GroundworkStartups, SaaS and vibe-coded businesses
Get GDPR-compliant in a weekend with our AI compliance agent.
Connect your codebase and suppliers, answer a few questions in chat, and draft your security policy, data processing agreement (how you handle their data), or Cyber Essentials in hours. No sales call, and no documents written for a 30-person organisation.
How it works
A chat-based AI agent
Groundwork drafts your documents, updates them when something changes, and collects evidence from the tools you connect. You can edit any document yourself. Nothing is published until you approve it.
Self-serve by default
Run it yourself in chat, with the checks built in.
Expert help when you need it
Guided setup, document import, and a review with our team when you want someone alongside you.
Clinical safety officer
A registered clinician to review and approve the clinical safety case NHS DTAC asks for, and the hazard log. You pay for that review, not a drafting project.
Works with your code and suppliers
Connect the tools you already use. Groundwork drafts the supplier and processor list from them, and your editor can read the documents and implement them.
GitHub builds your supplier and processor list
Connect GitHub and Groundwork reads your repositories, dependencies, pull requests, and releases. It drafts and keeps the supplier register, the IT asset register, and the change log ready for you to review.
Claude Code and Cursor, over MCP
Connect Claude Code or Cursor so they can read your Groundwork documents. They implement the requirements in your codebase, and can propose a document update when the code changes. You still review and approve.
Connect your suppliers directly
Connect GitHub, Linear, Microsoft, and more. Groundwork collects evidence from them and checks that those suppliers are set up the way your documents say they are.
The documents you get
One set of documents, sized to your organisation and the rules you need to meet. Describe a change in chat, and Groundwork proposes the same edit across every policy, list, and log that mentions it.
Policies, privacy notices, and customer agreements
Privacy notices, information security policies, and data processing agreements (the contract that says how you handle a customer's data), written for your actual setup.
Registers and logs
Lists of the personal data you handle, the suppliers and software you use, and the risks you track.
Issues, fixes, and changes
A record of what went wrong, how you fixed it, and the changes you made, so the affected policies and logs stay in step.
Customer- and auditor-ready PDFs
Clean PDFs with a version number and a history of who approved each change, ready to send to a customer or auditor.
How the options compare
Most compliance options charge thousands a year before you have documents you can send. Groundwork gives you the requirements, built-in checks, and an AI editor directly.
Traditional consultancies
£8,000 to £25,000+
You + Consultants
Pay thousands for meetings and generic templates, handed back weeks later as files that do not update themselves.
AI-assisted consultancies
£3,000 to £12,000+
You + Consultants + A little AI
Yearly subscriptions for interactive web based platforms with AI assistance.
Groundwork
Self-serve
You + AI Agent + Consultants (optional)
Use an AI agent to draft, understand, approve, and use your own compliance documents in hours, then keep them up to date effortlessly.
Questions
How Groundwork drafts, checks, and keeps your policies and records up to date.
Does the AI publish documents on its own?
No. It writes drafts. You save a record or a log, or send a policy for approval. Nothing goes live until you, or the right person on your team, approves it.
Do I need compliance experience to use Groundwork?
No. Groundwork is built for small teams with little or no compliance background. It drafts from your setup, explains what belongs in each list or log, and shows what needs doing and when.
What if I am the only person in the company?
The documents match a one-person team. If a role is you, it is named as you. Groundwork does not invent a compliance committee or a large-company organisation chart.
What happens when I add an AI provider or change hosting?
Say what changed in chat. Groundwork proposes one edit across the privacy notice, the data agreement, the record of the personal data you collect, and the list of suppliers. You review it and approve it.
Can I send a document to an auditor or a customer?
Yes. Any published version exports as a clean PDF, with its version number and a history of changes, ready to send to a customer, an NHS buyer, or an auditor.