Certification readiness to the gold standard: led by certified practitioners, built clause by clause on each standard

We prepare organisations for the PDPA, DPTM, Cyber Essentials, the Cyber Trust mark and ISO certification. What sets the work apart is below, with the proof.

15+ DPTM implementations
50+ ISO 27001 and 22301 implementations
2,000+ hours of PDPA and information security training delivered by our trainers

What you can check before you hire us

A sample of our workThree of our real formats, filled with invented data: a gap report page, an evidence-pack index and a Microsoft 365 plan map.See the samples below
Our credentials, and how to verify eachAsk us for the holder’s name and certificate number, then check it with the issuer.IAPP (CIPM, PDPC certificate)IRCA (lead auditors)PECB (lead auditors)Institute for Adult Learning (ACLP, DACE)
Client contacts, on requestSpeak to a client who has agreed to take a call about our work.
The analysis behind our adviceEvery PDPC decision published since 2016, read and classified by outcome, cause and sector.What PDPC decisions show

Do it yourself or have it done

What the PDPC’s free guides give you

The rules, explained well and free: guides on data breaches, security for ICT systems, impact assessments and a data protection programme.

The PDPC’s guides

What we add

Evidence mapped to what the assessor tests
An evidence pack in the certification body’s own structure
A named Data Protection Officer
Your team’s time back

The Gold Standard, defined

Certified lead in every disciplineEach discipline is led by a holder of its own professional credential.
Assessor-ready evidenceEvery deliverable maps to the clause the assessor tests.The same method behind 15+ DPTM implementations and 50+ ISO 27001 and 22301 implementations.See a sample below
Built on each standard, and on how it is enforcedWe work clause by clause from the standard you are certifying to, and from what regulators have actually enforced.See the analysis
We stay after the certificateA named Data Protection Officer, monthly support and an annual review, in plain English.

CIPMIssued by the IAPP after an exam; holders earn 20 continuing-education credits every two years.
ISO/IEC 27001 Lead AuditorCertified through IRCA or PECB: a lead auditor course and exam, then logged audit experience.
ACLP and DACEIssued by the Institute for Adult Learning, Singapore. ACLP alone is 71 hours over four assessed modules.
Practitioner Certificate in Personal Data Protection (Singapore)Issued by the PDPC with the IAPP after a three-day course and an exam.

See a sample

One page each, from three of our formats. The company and every detail are invented.

Sample page from a Data Protection Trustmark gap report for Example Pte Ltd: eleven requirements grouped by the four SS 714:2025 principles, each with a status of met, partly met or not met, the finding and the evidence still needed. — **A DPTM gap report page**Look for: one row per requirement, a plain finding, and the exact evidence the assessor will ask for.

Sample index of a certification evidence pack for Example Pte Ltd: documents filed in lanes A to F, each with an ID, the requirement it evidences, a version and a status of ready, in review or to do. — **An evidence-pack index**Look for: every document filed in the certification body’s order, with the requirement it proves.

Sample Microsoft 365 plan map for Example Pte Ltd on Business Standard with 24 licences: features grouped by identity, email, devices and data, each marked on, off or missing, with what it takes to close the gap. — **A Microsoft 365 plan map**Look for: what your plan already includes, what is switched off, and what is missing.

Track record

Clients include

AMC Asia
De Dental
Medicare Associates

“Their review of the resident forms alone demonstrated the value of the engagement, as several forms were collecting personal data without being fully aligned with PDPA requirements.”

General Manager (Property Management), SingHaiyi Group, for Grand DunmanNamed DPO and PDPA support

“We greatly appreciate how they minimised our anxiety by explaining the DPTM process, the timeline, and the many other dependencies to get the job done better and faster.”

Head of Business IT, AMC AsiaDPTM certified, 2023

“… we achieved DPTM certification and improved how we manage personal data.”

General Manager, Range ConstructionDPTM certified

Who stands behind the work

Led by

Gea Ban PengChief Executive Officer

Gea Ban Peng leads PDPA Compliance as its Chief Executive Officer. He oversees every engagement our consultants deliver, from a condominium’s named Data Protection Officer to a group’s certification readiness, and is the person our clients reach when it matters.

Certification readiness to the gold standard: led by certified practitioners, built clause by clause on each standard

What you can check before you hire us

Do it yourself or have it done

The Gold Standard, defined

See a sample

Track record

Who stands behind the work

Call me back

Book a 20-minute call

Data breach? 24/7 helpline

Which certification fits?

Sample