Question 1

How do I get started with Pritect?

Accepted Answer

Getting started is easy! Create your account, complete the brief onboarding questionnaire, and you'll have access to your dashboard. From there, you can add your first processing activity, invite team members, and explore the platform. The entire process takes under 10 minutes.

Question 2

What jurisdictions does Pritect support?

Accepted Answer

Pritect supports GDPR (EU), UK GDPR, UAE PDPL, KSA PDPL, India DPDP, ADGM Data Protection Regulations, DIFC Data Protection Law, and can be configured for other jurisdictions. Our templates and workflows are designed by privacy professionals with deep expertise in each regulatory framework.

Question 3

Can I import existing data?

Accepted Answer

Yes! We provide import templates for processing activities, suppliers, assets, and organisational hierarchies. Our onboarding team can assist with data migration from tools like OneTrust, TrustArc, or spreadsheet-based systems.

Question 4

How do the different governance domains connect?

Accepted Answer

All domains share the same foundation: your organisation hierarchy, supplier catalogue, asset inventory, and user management. A supplier added in Data Protection is automatically visible in Cybersecurity and AI Governance. Risks identified in any domain feed into your Enterprise Risk register. Incidents are tracked in a unified Incident Centre regardless of whether they're data breaches, security incidents, or AI failures.

Question 5

Do I need to activate all domains at once?

Accepted Answer

No. You can start with one domain and add more as your needs grow. Each new domain builds on the same shared data: your supplier catalogue, assets and organisational structure carry forward automatically. There's no duplicate data entry when you activate a new suite.

Question 6

Can I generate cross-domain reports?

Accepted Answer

Yes. Pritect's reporting infrastructure spans all activated domains. You can generate executive dashboards that combine data protection compliance status, cybersecurity maturity scores, AI governance posture, and enterprise risk metrics in a single board-ready view.

Question 7

How does the shared master data work?

Accepted Answer

Your organisation hierarchy, supplier catalogue, IT asset inventory, and user directory are shared across all domains. When you update a supplier's details, the change is reflected everywhere: in your Data Protection RoPA, your Cybersecurity supply chain assessment and your AI supplier due diligence simultaneously.

Question 8

How do I invite team members?

Accepted Answer

Navigate to Settings > User Management and click "Invite User". Enter their email address and select their role. They'll receive an invitation email to join your workspace.

Question 9

What user roles are available?

Accepted Answer

We offer pre-defined system roles including Platform Admin, Tenant Admin, Module Admin, and Standard User. In addition, each organisation can define their own custom functional roles with granular permissions. Our AI assistant helps you create the right roles with the right access for your team.

Question 10

What's included in the free tier?

Accepted Answer

The free tier includes platform access for 1 user. You'll need to add at least one domain suite (like Data Protection) to get started. This lets you experience the platform before committing.

Question 11

Can I switch plans later?

Accepted Answer

Absolutely. You can upgrade or change plans at any time. Your data stays intact, and you only pay the difference. No lock-in contracts, no penalties.

Question 12

How is pricing structured?

Accepted Answer

We offer flexible pricing with subscription tiers (Basic, Pro, Enterprise) and domain-specific suites (Data Protection, Cybersecurity, AI Governance, Enterprise Risk). You can start with what you need and add modules as you grow. Domain bundles offer significant savings over individual modules. No hidden fees, no per-record pricing surprises.

Question 13

What is RoPA and why do I need it?

Accepted Answer

RoPA (Record of Processing Activities) is a legal requirement under GDPR Article 30. It documents all your data processing activities. Pritect makes creating and maintaining your RoPA simple with an 8-step guided wizard, completeness scoring, and interactive data lineage maps that show how data flows across your organisation.

Question 14

How do I handle a data breach?

Accepted Answer

All incidents, whether data breaches, security incidents or AI incidents, are managed in our unified Incident Centre. Each incident type has a dedicated workspace that guides you through assessment, severity classification, remediation tracking, and regulatory notifications. The 72-hour GDPR notification timeline is tracked automatically.

Question 15

What impact assessments does Pritect support?

Accepted Answer

Pritect supports DPIAs (Data Protection Impact Assessments), TIAs (Transfer Impact Assessments), LIAs (Legitimate Interest Assessments), and PIAs (Privacy Impact Assessments). Our AI assistant can draft risk narratives and research destination-country legislation for TIAs, turning days of work into minutes.

Question 16

Does Pritect support NIS2 compliance?

Accepted Answer

Yes. The Cybersecurity suite is built with NIS2 requirements in mind, including supply chain security oversight, incident reporting workflows, risk management aligned to ISO/IEC 27001, and security maturity assessments. It also covers DORA requirements for financial sector organisations.

Question 17

What is the Pritect Cybersecurity Framework (PCF)?

Accepted Answer

The PCF is our structured maturity framework that maps cybersecurity capabilities across five phases: Discover, Strategise, Execute, Respond, and Monitor. It provides a clear maturity roadmap with measurable scores across hundreds of controls, aligned to ISO/IEC 27001 and NIST CSF.

Question 18

Can I track IT assets and their security posture?

Accepted Answer

Yes. The shared asset inventory feeds directly into cybersecurity risk assessments. You can classify assets by criticality, link them to controls, track vulnerabilities, and generate business impact analyses, all connected to your broader governance picture.

Question 19

How does the AI assistance work?

Accepted Answer

Our AI features help generate processing activity descriptions, suggest legal bases, identify risks, draft policy documents, and research legislation for Transfer Impact Assessments. All AI outputs are suggestions that require human review. We never make compliance decisions for you automatically.

Question 20

Does Pritect support EU AI Act compliance?

Accepted Answer

Yes. Our AI Governance suite includes AI system inventories with risk classification aligned to EU AI Act categories, comprehensive AI Impact Assessments (AIRA), model and dataset governance, agentic AI assessments, and shadow AI discovery to identify unsanctioned AI tools across your business units.

Question 21

Can Pritect detect shadow AI in my organisation?

Accepted Answer

Yes. The Shadow AI Discovery feature helps you identify and govern unsanctioned AI tools adopted across business units. You can assess their risk, bring them under formal governance, or recommend alternatives, all within the platform.

Question 22

How does the enterprise risk module connect to other domains?

Accepted Answer

The Enterprise Risk suite aggregates risks from all activated governance domains into a single risk register. Compliance gaps from Data Protection, security vulnerabilities from Cybersecurity, and AI risks from AI Governance all feed into your enterprise risk view, giving you true cross-domain visibility.

Question 23

Does Pritect support quantitative risk analysis?

Accepted Answer

Yes. The ERM suite includes Monte Carlo simulation for quantitative risk assessment, scenario analysis and modelling, Key Risk Indicator (KRI) monitoring, and bow-tie analysis. You can model financial impact, assess probability distributions, and generate board-ready risk reports.

Question 24

Can I generate board-level risk reports?

Accepted Answer

Absolutely. Pritect generates executive dashboards and board reports with risk severity breakdowns, maturity scores, trend analysis, and KPI tracking. Reports consolidate data across all governance domains for a complete enterprise risk picture.

Question 25

Is my data secure?

Accepted Answer

Absolutely. We use enterprise-grade security with row-level security ensuring complete multi-tenant isolation. Data is encrypted at rest and in transit using TLS 1.3. We support SSO via Azure AD and enforce MFA. Your data never leaves the EU unless you choose otherwise.

Question 26

What security certifications do you have?

Accepted Answer

We are actively pursuing ISO/IEC 27001:2022 certification (target 2026). Our security practices are designed to meet industry standards, and we can provide our security documentation upon request via our Trust Centre.

Question 27

How does implementation support work?

Accepted Answer

We offer self-service documentation, guided onboarding for Pro plans, and dedicated implementation support for Enterprise customers. White Label Consultancy also offers professional services for organisations that want hands-on assistance with setup, data migration, and workflow configuration.

Question 28

Can I customise workflows?

Accepted Answer

Yes! You can configure approval workflows, notification rules, and automation triggers to match your organisation's processes. The RACI operating model lets you define clear accountability for every governance activity.

Question 29

Does Pritect support multi-entity organisations?

Accepted Answer

Yes. Pritect supports complex organisational hierarchies with multiple legal entities, subsidiaries, and business units. Each entity can have its own compliance posture while rolling up to group-level dashboards for consolidated oversight.

Question 30

Who is behind Pritect?

Accepted Answer

Pritect is built by White Label Consultancy, a team of governance practitioners and technologists with decades of combined experience in data protection, cybersecurity, AI governance, and enterprise software. We built the platform from our own client delivery experience.

Question 31

How can I contact support?

Accepted Answer

You can reach our support team via the in-app chat, email at support@pritect.ai, or through our support portal. Enterprise customers have access to dedicated support channels.

Question 32

What makes Pritect different from other GRC tools?

Accepted Answer

Most GRC tools were built when data protection, cybersecurity, and AI governance were separate concerns. They bolt on new modules without sharing data between them. Pritect was designed from the ground up as a unified governance platform: all domains share the same data model, the same workflows and the same reporting infrastructure. The result: no duplicate data, no reconciliation, and one board-ready view across everything.

Frequently Asked Questions

Popular Questions

How do I get started with Pritect?

How do the different governance domains connect?

How is pricing structured?

What makes Pritect different from other GRC tools?

Getting Started(3)

Platform & Integration(4)

Account & Users(2)

Billing & Plans(3)

Data Protection(3)

Cybersecurity(3)

AI Governance(3)

Enterprise Risk(3)

Security(2)

Modules & Features(3)

General(3)

Still have questions?