Privacy engineering
GDPR in your code: data maps, retention, deletion and consent — including AI pipelines.
Privacy policies promise things that software then has to do: keep data only as long as needed, delete it everywhere when asked, show who saw it. With AI in the stack, personal data now also flows into prompts, embeddings and logs. We engineer the part that makes your promises true — and give your DPO the technical facts to stand behind them.
01 / What it solves
Where personal data lives, where it flows, which processors touch it — built from your systems, not from memory.
Scheduled clean-up and a deletion flow that reaches databases, search, analytics, vector stores and third-party tools.
Consent and preferences recorded with time and version, and respected by every service that uses the data.
PII masked before prompts, permission-aware retrieval, short retention for prompts and outputs, no training on your data.
02 / Stack
Industry-standard, boring in the good way: tools with a future, that the next engineer will know too.
Discovery & classification
Microsoft Presidio
PII detection and anonymisation
Data catalogs
Tags for personal and sensitive fields
Protection
Field-level encryption
Sensitive fields encrypted with managed keys
Pseudonymisation
Analytics without direct identifiers
Row-level security
Access limited to the records a user may see
Lifecycle
Retention jobs
Scheduled deletion with a record that it ran
DSAR workflows
Access, export and erasure requests end to end
Consent store
Versioned consent and preference records
AI & LLM
LLM gateway
Masking, logging policy and provider settings in one place
Permission-aware RAG
Retrieval that respects who is asking
03 / Approach
Your legal side sets the rules; we turn them into code and give back the technical facts.
The cheapest data to protect is data you never stored; we question every field.
Retention and erasure run as jobs with evidence, instead of tickets someone may forget.
Data flows, processors and measures written up so your assessment and records stay accurate.
04 / Standards
We adhere to industry standards and proven methods on every project — they are what makes the estimate hold.
05 / Infrastructure
Good questions
Straight answers to what buyers ask before they start.
No. WNC are engineers. Your legal team or DPO decides what the rules are; we build the systems that follow them — data maps, retention jobs, deletion that reaches every copy, consent records — and give them the technical facts they need.
Related work
Projects and products of ours that involved this service.
Start
Tell us what personal data you process and where it lives. A senior engineer writes back with an honest scope and price.
Let’s manage See compliance readiness
