Privacy Advisory
€600 per month · billed annually
Asynchronous privacy advice through our compliance cockpit, with expert-led review and a quarterly check-in. Not a named DPO.
Outsourced DPO
DPO plans and pricing
Representative appointment? Sign up online. Sign-up takes minutes. After payment and a short onboarding form, your contact address and documents are created automatically, once the sanctions and establishment checks are complete.
Advisory support, or a named DPO for your privacy program, from quarterly oversight to a fully embedded, end-to-end role. Every plan is billed annually in EUR, with one-time onboarding waived on annual billing.
Key takeaways
- Engage Compliance publishes its plans instead of quoting privately, so you can size an engagement before you speak to anyone.
- Every plan is billed annually in EUR, and the one-time onboarding fee is waived on annual billing.
- The entry tier is advisory only, with no named DPO. A named Data Protection Officer, notified to the supervisory authority, starts at the tier above it.
- For a figure matched to your company rather than a table, the DPO assessment returns a tailored quote from a short set of questions.
- For how an outsourced DPO's cost compares to a full-time hire, see the outsourced DPO cost guide.
Outsourced DPO plans
Non-DPO
DPO tiers
Every tier below includes a named DPO, notified to the supervisory authority, delivered through our compliance cockpit with expert review and sign-off. Privacy Advisory, above, is expert advice without a named DPO.
DPO Foundation
€1,000 per month
Billed annually
You lead. We guide, review, and help. Light-touch oversight of your privacy program, for teams that run privacy day to day themselves.
- Quarterly check-in calls
- Advice and templates for requests, records, and incidents
- Typically one main contact
Assessments and training at client rates, listed below.
One-time onboarding of €1,000, waived on annual billing.
Find your planDPO Partner
From €2,500 per month
Billed annually
We work alongside you, hands-on, driving reviews, assessments, and progress.
- Quarterly risk committee check-ins and monthly workshops
- Hands-on, live breach support
- Up to five contacts, with training included
Assessments included in your engagement scope.
One-time onboarding of €1,500, waived on annual billing.
Find your planDPO Complete
From €4,500 per month
Billed annually
We lead it day to day. You make the calls. An embedded expert and named DPO, supporting privacy, operations, and strategy end to end.
- Embedded in your team, with as-needed syncs
- We lead on breaches, 24/7
- Anyone in your organization can contact us
Assessments included in your engagement scope.
One-time onboarding of €2,500, waived on annual billing.
Find your planEnterprise
Custom
Custom scope and pricing for larger organizations: multiple entities, group structures, and complex regulatory footprints.
- Scope, cadence, and pricing set on a call
- Multi-entity and group coverage
- Complex regulatory footprints handled
Assessments included; scope set on the call.
Onboarding scoped with the engagement.
Talk to usAssessments and training
Data protection impact assessments (DPIAs), transfer impact assessments (TIAs), and privacy training are charged at client rates on Privacy Advisory and DPO Foundation, and are included in scope on DPO Partner and DPO Complete.
- DPIA€1,000
- TIA€750
- Privacy training€750 per session
Not on a plan? The standalone DPIA service for non-clients is priced per assessment from €2,500.
Representative services
A separate product line from the DPO plans above. If you sell into the EU or the UK with no establishment here, you may need a named Article 27 representative. The standalone appointment is priced on company size, revenue, and the number of people in the EU and UK whose data you hold, billed annually, with no setup fee. Whichever of the three puts you highest sets the price. The twelve mandates and the route into checkout are on mandate explanations.
The smallest band is for very small organizations only: 1 to 10 people, under €2m in global annual revenue, and under 5,000 people in the EU and UK whose personal data you hold. All three must be true. If any one of them is not, the next band up applies. If your company grows into a bigger band during the year, nothing changes mid-term: you pay the new band's price from your next renewal.
| Mandate and who it is for | Band 0 1 to 10 people, under €2m revenue, and under 5,000 people in the EU and UK whose data you hold | Band 1 11 to 50 people, or €2m to €10m revenue, or 5,000 or more people in the EU and UK whose data you hold | Band 2 51 to 250 people, or €10m to €50m revenue | Band 3 251 or more people, or over €50m revenue |
|---|---|---|---|---|
| EU Representative GDPR Article 27. Companies with no establishment in the EU that offer goods or services to, or monitor the behavior of, people in the EU. | EUR 690 a year | EUR 990 a year | EUR 2,290 a year | EUR 4,490 a year |
| UK Representative UK GDPR Article 27. Companies with no establishment in the UK that offer goods or services to, or monitor the behavior of, people in the UK. | EUR 550 a year | EUR 790 a year | EUR 1,830 a year | EUR 3,590 a year |
| Swiss Representative Swiss FADP Article 14. Companies based outside Switzerland whose processing of Swiss people's data is large scale, regular, and high risk, and is tied to offering goods or services in Switzerland or monitoring behavior there. | EUR 950 a year | EUR 1,190 a year | EUR 1,830 a year | EUR 3,590 a year |
| DSA Legal Representative Digital Services Act Article 13. Providers of intermediary services, which includes hosting, online platforms, marketplaces and search, that offer services in the EU without an establishment there. | EUR 1,200 a year | EUR 1,724 a year | EUR 3,993 a year | EUR 7,833 a year |
| NIS2 Representative NIS2 Directive Article 26(3). DNS providers, TLD registries, domain registration services, cloud and data centre providers, CDNs, managed service and managed security providers, online marketplaces, search engines and social platforms that offer services in the EU without being established there. Three of those have no size threshold: Article 2(4) applies the Directive to entities providing domain name registration services regardless of their size, and Article 2(2)(a)(iii) does the same for TLD name registries and DNS service providers. | EUR 2,000 a year | EUR 2,873 a year | EUR 6,655 a year | EUR 13,055 a year |
| Data Act Legal Representative Data Act Article 37(11). Any company in scope of the Data Act that makes connected products available or offers related services in the EU without being established there. | EUR 1,200 a year | EUR 1,724 a year | EUR 3,993 a year | EUR 7,833 a year |
| DGA Data Intermediation Representative Data Governance Act Article 11(3). Data intermediation service providers, meaning data marketplaces and data-sharing intermediaries, that offer those services in the EU without being established there. | EUR 550 a year | EUR 790 a year | EUR 1,830 a year | EUR 3,590 a year |
| DGA Data Altruism Representative Data Governance Act Article 19(3). Organizations seeking recognition as a data altruism organization that are not established in the EU. The representative is what makes registration in a Member State register possible. | EUR 550 a year | EUR 790 a year | EUR 1,830 a year | EUR 3,590 a year |
| e-Evidence Legal Representative e-Evidence Directive Article 3. Service providers offering electronic communications, domain name, IP numbering or other information society services in the EU that have no establishment in a Member State bound by the Directive. | EUR 550 a year | EUR 790 a year | EUR 1,830 a year | EUR 3,590 a year |
| EU AI Act Authorised Representative for general-purpose AI models EU AI Act Article 54. Providers established outside the EU that place a general-purpose AI model on the EU market. Models released under a genuinely free and open-source licence are outside this, unless they present systemic risk. | EUR 690 a year | EUR 990 a year | EUR 2,290 a year | EUR 4,490 a year |
| EU AI Act Authorised Representative for high-risk systems EU AI Act Article 22. Providers established outside the EU that make a high-risk AI system available on the EU market. The appointment has to be in place before the system goes on the market. | EUR 2,200 a year | EUR 3,157 a year | EUR 7,301 a year | EUR 14,313 a year |
| TCO Legal Representative TCO Regulation Article 17. Hosting service providers without a main establishment in the EU that let users store and share content publicly. | EUR 690 a year | EUR 990 a year | EUR 2,290 a year | EUR 4,490 a year |
Standard price: DGA Data Intermediation Representative, DGA Data Altruism Representative, e-Evidence Legal Representative.
AI Act Article 54 and TCO price: EU AI Act Authorised Representative for general-purpose AI models, TCO Legal Representative.
Swiss price: Swiss Representative.
DSA and Data Act price: DSA Legal Representative, Data Act Legal Representative.
NIS2 price: NIS2 Representative.
AI Act Article 22 price: EU AI Act Authorised Representative for high-risk systems.
Need more than one? Each added mandate costs 75% of its own base price. At the smallest band, adding a UK appointment to an EU appointment costs €413, and the two appointments together are EUR 1,103 a year. You can see your price and appoint online, or compare the representative providers.
FAQ
Frequently asked questions
How much does an external DPO cost?
Privacy Advisory, which is expert advice without a named DPO, is €600 per month. A named DPO starts at €1,000 per month on DPO Foundation, DPO Partner is from €2,500 per month and DPO Complete is from €4,500 per month, while Enterprise is scoped and priced on a call. The outsourced DPO cost guide sets that against the cost of a full-time hire.
How do I get a quote for DPO services?
Take the DPO assessment. It returns a tailored quote from a short set of questions, so you get a figure matched to your company rather than a table. For Enterprise scope (several entities, a group structure or a complex regulatory footprint), talk to us and we set the scope and price on a call.
Do you publish your prices?
Yes. Every plan and its price is on this page, so you can size an engagement before you speak to anyone. Enterprise is the only custom tier, because its scope is set on a call.
How is the DPO plan billed?
Plans are billed annually by default. Quarterly and monthly billing are agreed case by case, and the one-time onboarding fee is waived on annual billing. All prices are in EUR.
Is there an onboarding fee?
Yes, a one-time fee: €500 on Privacy Advisory, €1,000 on DPO Foundation, €1,500 on DPO Partner and €2,500 on DPO Complete. It's waived on annual billing, and Enterprise onboarding is scoped with the engagement.
Does every plan include a named DPO?
No. Privacy Advisory is expert advice through our compliance cockpit with a quarterly check-in, and it isn't a named DPO. Every tier from DPO Foundation up includes a named DPO, notified to the supervisory authority, with expert review and sign-off.
What's the difference between DPO Foundation, DPO Partner and DPO Complete?
How much of the work we take on. On DPO Foundation you lead and we guide, review and help, with quarterly check-in calls. On DPO Partner we work alongside you, hands-on, with monthly workshops and up to five contacts. On DPO Complete we lead day to day as an embedded expert and named DPO, and anyone in your organization can contact us.
What does DPO Complete include?
DPO Complete is from €4,500 per month. You get an embedded expert and named DPO supporting privacy, operations and strategy end to end, with as-needed syncs, and we lead on breaches, 24/7. Anyone in your organization can contact us, and assessments are included in your engagement scope.
When do we need Enterprise rather than a listed plan?
When you have multiple entities, a group structure or a complex regulatory footprint. Enterprise scope, cadence and pricing are set on a call, so there's no public figure for it.
Are DPIAs and training included?
On DPO Partner and DPO Complete, assessments are included in your engagement scope. On Privacy Advisory and DPO Foundation they're charged at client rates: €1,000 for a DPIA, €750 for a transfer impact assessment (TIA) and €750 per privacy training session.
Can I buy a DPIA without a DPO plan?
Yes. The standalone DPIA service for non-clients is priced per assessment, from €2,500.
What happens if we have a data breach?
It depends on the plan. DPO Foundation gives you advice and templates for requests, records and incidents, DPO Partner adds hands-on, live breach support, and on DPO Complete we lead on breaches, 24/7.
How quickly can you start?
We start within one day of signing: your named DPO is in place and onboarding is done within one day.
Can we change plans later?
Yes, you can change a tier at any time. Moving up a tier keeps the same DPO on your account.
How does the cost compare with hiring an in-house DPO?
A full-time internal hire typically runs €80,000 to €150,000 a year before recruitment and training (that's the range in our outsourced DPO cost guide). The guide also walks through what moves the price of an outsourced DPO.
Is representative pricing part of the DPO plans?
No, it's a separate product line. If you sell into the EU or the UK with no establishment there, you may need a named Article 27 representative. That appointment is priced on company size, revenue and the number of people in the EU and UK whose data you hold, billed annually with no setup fee, and the price for every mandate and band is in the representative table on this page.
Can you be both our DPO and our EU representative?
Yes. We act as both and scope the two roles together. The representative appointment is priced separately, in the representative table on this page, and you can appoint your representative online.