Two of this month's five free Independent AI Audits are still open, included when you start an AI health check.Check eligibility →
Evidence · Data-Flow Map

Where data goes when AI touches it, mapped from the record.

The Data-Flow Map shows where data goes when AI touches it: which tools, which models, which accounts. It is part of the Evidence Pack and is generated from the record.

The problem

Data protection assessments need to know where data flows, and with AI it changes constantly.

Assessments rest on assumptions and are wrong as soon as someone adds a tool.

24%

of businesses using AI have security practices that cover it

DSIT, 2026
What you get

The benefits of Data-Flow Map.

Data flows mapped from what actually happened
Part of every Evidence Pack
Supports data protection assessments
Who it is designed for

The people who feel the problem first.

DPO and compliance

A basis for assessments.

CIO and security

See where data really goes.

Legal

Answer client and regulator questions.

Where it is used

Three ways teams use Data-Flow Map.

DPIA support

Start an assessment from the real flows.

Vendor review

See which vendors touch which data.

Client questionnaires

Answer where data goes with confidence.

Part of Evidence

Works best alongside.

Prices are indicative ranges, confirmed in writing before you commit. Estimates are replaced by your own figures once your health check runs.

How the supporting tools fit together

GenWA Frame brings together your policies, business knowledge and our methodology to guide the work.

The Log records what connected AI saw, produced and who approved it.

The Intelligence Layer is being built to turn those records into trends and answers linked to their source. We agree which tools are available and appropriate for your engagement.

Find out more about the GenWA Frame