TrueComply turns a 15-minute questionnaire into a tailored SOC 2 & UK GDPR draft pack, delivered within 48 hours — so the next time a customer or investor asks about your security posture, you have a considered answer.
Draft documents for preparation — not legal advice or certification.
Illustrative sample pages — every pack is generated from your own answers.
A customer's procurement team, an investor's diligence list, a partner's legal counsel — someone will ask. The usual options each have a catch.
Thorough and credible, but engagements start north of £10,000 and are designed for companies further along than you are today.
Generic documents don't reflect your actual stack, data flows or team — and the people reviewing them can tell within a page.
Evenings spent reading ICO guidance and SOC 2 criteria without knowing what "good" looks like, or where to begin.
Generated from your answers about your business, data, tools and team — then delivered as an editable, branded pack you can review, refine and share.
Illustrative examples of the format and level of detail — your pack is generated from your own answers, stack and data flows.
This policy defines how [Company] collects, processes and stores personal data in accordance with the UK General Data Protection Regulation and guidance issued by the Information Commissioner's Office.
This policy applies to all employees, contractors and systems that collect, process or store customer or employee personal data, including the third-party tools listed in the sub-processor register.
Personal data is processed only where a lawful basis under Article 6 applies. For each processing activity, the applicable basis is recorded in the data inventory maintained by the data protection lead.
Only personal data necessary for the stated purpose is collected. Fields, logs and analytics are reviewed quarterly to remove data no longer required.
Documents drift out of date the day they're written. The TrueComply portal keeps yours honest: every policy maps to named checks, owners re-confirm them on a schedule, and your readiness score moves as your company does.
Each policy claim becomes a check with a named owner — passing, failing, or awaiting an answer. No mystery about where you stand.
Owners are asked to re-confirm on a schedule that matches how fast things change. Nothing to remember; nothing silently stale.
Every answer, change and document version is logged. When a customer asks "since when?" — you have the receipt.
Your business, the data you handle, your tools, team size and current security practices.
About 15 minutesAI drafts structured documents from your answers, aligned to UK GDPR and SOC 2 preparation, and each pack is reviewed for coherence before it's sent.
We do the workA clear, editable, branded pack arrives in your inbox — ready to review with your team or share with the people asking questions.
24–48 hoursIn plain terms: TrueComply provides AI-assisted draft documentation for preparation purposes only. Always consult a qualified legal, security, or compliance professional before relying on any documentation for formal audits or regulatory decisions. In compliance, trust is the product — overclaiming would be a strange way to earn yours.
TrueComply is not collecting pilot applications through this website until the production intake path has server-side validation, abuse protection, processor review, and final legal terms.
When applications reopen, submissions will be handled through a Cloudflare-protected endpoint rather than a direct third-party form post.
Register interest by emailPlease do not send confidential customer data, credentials, special category data, or full compliance questionnaires by email.
No. TrueComply provides AI-assisted draft documentation. Speak with a qualified legal, security, or compliance professional before relying on documents for formal audits or legal decisions.
The current pilot is focused on UK-based startups and UK GDPR preparation.
About 15 minutes of your time for the questionnaire, and your draft pack is delivered within 24–48 hours.
Yes. Include what you have in the questionnaire, and the pack helps identify missing or weak areas rather than starting from zero.
A private page where your pack stays current: each policy maps to named checks, owners re-confirm them quarterly, and every change is logged with a timestamp. It's in development — pilot members get first access. Readiness tracking is self-attested and remains a preparation tool, not certification.
This website is not currently collecting application or questionnaire data. When intake reopens, TrueComply will publish the live Privacy Policy, sub-processor list, retention periods, and deletion route before accepting submissions.
How we handle your data, the terms we provide the service on, and the cookies this site uses.
Production safeguard. The public site does not collect application or questionnaire data until final legal terms, processor records, and server-side intake controls are in place.
TrueComply is a UK compliance startup. You can contact us at hello@truecomply.co.uk.
This website does not currently contain an application form, does not submit questionnaire data, and does not set marketing cookies. Application intake is paused while the production data path is completed.
If you choose to email us, we will use your email address and message content to respond. Please do not send confidential customer data, credentials, special category data, or full compliance questionnaires by email.
The static site is hosted on Cloudflare Pages. Fonts are currently loaded from Google Fonts, which may receive standard request metadata such as IP address and user-agent. No form processor receives data from this page.
TrueComply will publish a full Privacy Policy, controller details, sub-processor list, retention periods, international transfer safeguards, and data deletion route before accepting application or questionnaire submissions through the website.
This website is informational while pilot intake is paused. No contract is formed by browsing the site or registering interest by email.
TrueComply materials describe AI-assisted draft compliance documentation and self-attested readiness tracking for preparation purposes only. They are not:
Always consult a qualified legal, security, or compliance professional before relying on any documentation for formal audits, regulated decisions, or customer assurance.
This site is deliberately light on cookies.
| Type | What | Consent needed? |
|---|---|---|
| Strictly necessary | Only if/when features require them (e.g. future portal login sessions). None are set on the public site today. | No |
| Analytics | Cloudflare Web Analytics — cookieless, no cross-site tracking. No analytics cookies are set. | Not applicable |
| Marketing | None. No advertising or tracking cookies. | — |
Questions: hello@truecomply.co.uk.