This is the whole programme written out. Ten steps in a fixed order, and the 33 documents they produce between them.
Nothing here is a summary of something you get told later. If you want to know what step seven actually hands you, it is on this page.
Each step uses what the one before it produced. Step three needs the map from step one to be right.
You decide when the next step starts. There is no schedule you fall behind on.
You get documents at the end of each one, not at the end of the programme.
Self-Serve and Guided run this identical list. The difference is who checks the work.
Before any of the ten steps, there is a step zero. It costs nothing and it exists so you can decide whether to carry on with something in your hands rather than on a promise.
You keep what it produces whichever route you pick, and if you pick neither.
You cannot write a rule about data you have not found. These two steps establish what the business holds, where it sits, and what you have already told people about it.
The record everything after this reads from.
What you tell people about their data, matching what you actually do.
Every piece of data you hold needs a reason, a contract behind it where someone else touches it, and a way for people to ask what you have.
Why you are allowed to hold each set of data.
The suppliers and tools that touch your data on your behalf.
What happens when someone asks what you hold, or asks you to delete it.
Three steps that turn the paperwork into something your team runs on a normal Tuesday, and on the worst day of the year.
How long you keep things, who deletes them, and the rules for your systems.
The worst day, decided in advance rather than at the time.
The controls, and the people who have to use them.
The last two steps are about evidence: catching risky work before it starts, and being able to show the whole thing to someone who asks.
Spotting the work that needs checking before it begins.
Everything gathered, signed off and dated.
Not a folder of templates. A set of written processes with a named owner on each one, and the evidence that they are being followed.
Steps, in a fixed order, each one finishing in something you can use.
Documents, registers and procedures, written against how your business works.
Stages of work, so you always know which part of the job you are in.
The StepWise Seal is a dated record of completion and the evidence behind it. That is the whole of what it is, and we do not describe it as anything more. Under Articles 42 and 43 of the UK GDPR, formal certification comes from UKAS-accredited bodies working to ICO-approved criteria. We are not one, and the Seal is not that.
There are no prices here. Both routes run this same list, so putting figures beside each step would only invite you to add them up in a way that matches neither route. Every number is on the StepWise page, in one place, once.
Thirty minutes on a call and you will know which steps are already done in your business, which are half done, and where to start.
Book a 30 minute callThis creates your workspace and starts you on step zero. There is nothing to pay and no card to enter.