01
Data Protection (GDPR) for Business
Close GDPR compliance gaps with audits, DPO outsourcing, privacy engineering, and regulatory training for your team.
Up Secure — Cybersecurity & Compliance
Cybersecurity & compliance.
Built into your business.
Cybersecurity & compliance consulting for SaaS teams
We assess your risks, review your software and help implement the controls your business needs—across cybersecurity, privacy and AI governance.
One practice. Connected expertise.
• Legal understanding• Engineering depth• Practical implementation
Core services
What we can help you with.
Connected disciplines. Practical support for the business, the product and the people building it.
02
Cybersecurity for Business
Penetration testing, secure code reviews, SDLC audits, and cybersecurity training under NIS 2, ISO 27001, and SOC 2.
03
Software Engineering
Secure AI-assisted development with architecture reviews, threat modeling, SDLC audits, and secure coding training.
04
AI Governance and Compliance
EU AI Act and ISO 42001 advisory, risk classification, conformity assessments, and AI governance implementation.
What the work looks like
A clear problem.
A useful piece of work.
Examples of engagements you can discuss with us. Scope and deliverables are agreed for your systems and objectives.
01 / Engagement example
Prepare for a security audit
An enterprise customer asks for ISO 27001 or SOC 2 evidence.
Assess gaps, define controls and organize the evidence your team needs to maintain.
What you receive
Compliance readiness A prioritized readiness plan and control evidence requirements.
02 / Engagement example
Review an application before release
You need an independent view of the risks in your product.
Review the agreed application scope, investigate weaknesses and explain how to address them.
What you receive
Application security testing Documented findings, reproduction steps and remediation guidance.
03 / Engagement example
Build a safer development process
Your engineers are shipping more code, faster, with AI.
Review the delivery workflow and help integrate security checks and responsibilities.
What you receive
Secure SDLC consulting Secure SDLC guidance and an implementation plan for your workflow.
Customers & their experiences
Confidence,
built together.
From software and infrastructure to everyday services. Meet the organizations we work with and explore selected customer stories.
What our customers say
Guy DassaChief Technology Officer
Working with Piotr the founder of Up Secure has been a pleasure. They provided trusted and highly professional security services that made us feel safer and more resilient as a company. Their dedication, loyalty, and expertise were evident in every engagement. We look forward to the possibility of collaborating with them again on future projects, and any organization would benefit greatly from their support.
15Five
- 15Five
15Five
How Up Secure helped 15Five scale security operations, maintain SOC 2 readiness, and embed compliance into development workflows. Client success story.
- Verne
Verne Vanta Implementation
Custom frameworks, policy architecture, and compliance automation in Vanta for a multi-site data centre operator.
- Verne
Verne Privacy Programme
Building a full Data Protection Management System across UK and EU GDPR for a multi-site data centre operator.
The person behind Up Secure
Piotr Siemieniak, PhD
Understanding the requirement.
Knowing how to build it.
I founded Up Secure to connect legal requirements with the decisions people make when building and running software. My research in data protection by design and my work in software engineering inform the same practice.
That perspective lets us discuss the obligation, examine the system and work out what needs to change.
Read the Up Secure storyWho we work with
For the people building
and protecting a business.
Our focus is SaaS and software teams, alongside organizations managing privacy, security and AI adoption.
Founders & business leaders
Understand your exposure, respond to customer requirements and plan the work ahead.
Business advisoryProduct & engineering teams
Review architecture and code, fix weaknesses and build security into delivery.
Engineering supportPrivacy & security teams
Bring specialist capacity to assessments, control implementation and recurring responsibilities.
Specialist rolesCybersecurity from an engineering perspective
Your engineering team ships fast with AI. Can your security and compliance keep up?
We work through the system behind the policy: identity and permissions, data flows, application code and the checks in your delivery pipeline.
- Architecture reviews and threat modeling
- Python/Django and web application security
- Secure development and AI governance
Security that moves with your business
Requirements → Engineering → EvidenceLow maturityDevelopingHigh maturity
Put controls into the system.
Translate requirements into access controls, privacy defaults, secure delivery checks, and supporting records.
Controls + evidenceExpertise
Choose how
we work together.
A defined project, advice when you need it, or ongoing specialist support.
01
Audits and Assessments
Compliance audits and maturity assessments across GDPR, ISO 27001, NIS 2, SOC 2, and EU AI Act for regulated industries.
02
Consultancy and Advisory
GDPR, AI Act, ISO 27001, and NIS 2 consultancy for compliance programs and security architecture decisions.
03
Role Outsourcing
Outsourced DPO, Privacy Engineer, Security Engineer, vCISO, and AI Compliance Officer on fractional or full-time basis.
04
Process Outsourcing and Managed Services
Managed risk assessments, vendor due diligence, and compliance monitoring with defined SLAs and regular reporting.
Frameworks
Requirements translated
into practical work.
Assess readiness, design controls and organize evidence. Explore the framework relevant to your business.
AI Act
EU AI Act compliance services — audits, implementation, risk classification, and governance for AI systems.
NIS 2 Directive
NIS 2 Directive compliance services — gap assessment, governance, incident reporting, and supply chain security.
GDPR
GDPR compliance services — audits, DPO outsourcing, implementation support, and privacy engineering for SaaS teams.
ISO 27001
ISO 27001 compliance services — ISMS implementation, gap analysis, certification support, and ongoing advisory.
SOC 2
SOC 2 compliance services — readiness assessment, Trust Services Criteria controls, and Type I/II audit preparation.
ISO 42001
ISO 42001 AI management system services — governance framework, risk controls, and certification support for AI.
Working together
From the first conversation
to the next step.
Start with the outcome you need. We use that to define a useful scope and a clear way of working.
Define the scope
Discuss your goals, systems and deadlines. Agree deliverables, access and responsibilities.
Do the work together
Review the evidence, investigate the system or support implementation with your team.
Make the handover useful
Walk through findings and recommendations, assign priorities and agree any follow-up.
Training & knowledge transfer
Give your team the understanding
to make better decisions.
Training connects privacy, security and AI governance with the choices people make in their daily work.
Explore training- For engineers
- Privacy and security by design
- For business teams
- Data protection and cybersecurity
- For teams adopting AI
- Governance and responsible use
Ideas, shared in public
Explore the thinking
behind the practice.
Article
Privacy by Design at the UODO Conference
Conference presentation on Privacy by Design principles and GDPR Article 25 compliance. Delivered at the Polish Data Protection Authority conference.
Event
The Future of AI Meetup #1: Claude Code for Business & Community Kickoff
Join the Future of AI Meetup for a practical session on Claude Code in business workflows. Community kickoff with live demos and open discussion.
Article
The Hack Summit 2024 - Privacy by Design for AI Development Cycle
Hack Summit 2024 conference talk on applying Privacy by Design principles to the AI development lifecycle. Practical insights for engineering teams.
Before we start
A few practical questions.
Can we start with one specific problem?
Yes. An engagement can focus on a particular application, an audit readiness question, a privacy assessment or a development process. The scope and deliverables are agreed around that need.
Do you help implement the recommendations?
Implementation support is available alongside assessments and advisory work. It can include control design, engineering guidance and work with your team. The proposal specifies what is included.
Can you work alongside our existing team?
Yes. Advisory, outsourced roles and managed services can complement your engineering, security, privacy or legal team. Responsibilities and ways of working are agreed before delivery.
What should we include in an enquiry?
Describe your business, the system or process involved, the problem you want to solve and any deadline or framework requirements. That provides a useful starting point for defining the scope.