pricing
Ongoing legal support on a monthly retainer.
Predictable costs, a dedicated expert, zero surprises. Choose the package that fits the stage of your business.
Startup Legal Stack
A comprehensive package for tech startups. Everything you need to build your product without legal missteps.
- Up to 10 hours of legal consultations per month
- Up to 5 documents per month (NDAs, terms of service, B2B contracts, employment contracts)
- GDPR Starter Pack - policies, clauses, record of processing activities
- Support with investment agreements (Term Sheet, SHA)
- Quarterly Legal Check-up - compliance review
DPO as a Service
A formally designated, external Data Protection Officer. Full GDPR compliance without the cost of a full-time hire.
- Official DPO role, notified to the Polish DPA (UODO)
- Ongoing GDPR compliance monitoring
- Unlimited consultations on data protection matters
- Maintaining the Record of Processing Activities (RoPA)
- Handling security incidents and data breaches
- Annual employee training on data protection
- Annual GDPR audit with a report and recommendations
Pricing by organisation size
one-off · 7 days
AI Readiness Audit Sprint - from PLN 4,900 net
AI system classification, gap analysis and an AI Act compliance roadmap. Three variants: Basic, Pro, Enterprise.
Frequently asked questions.
Can I switch packages during our engagement?
Yes. You can upgrade or downgrade from the next billing month - a simple email is enough. With DPO as a Service, the tier changes automatically once your organisation crosses the headcount threshold for a given variant.
What happens if I exceed the hours or document limit?
Nothing bad - additional hours are billed at a preferential package rate, agreed before work starts. I always let you know before a limit is reached, so there are no surprises on your invoice.
Does an external DPO satisfy the requirements of Art. 37 GDPR?
Yes. The GDPR explicitly allows the Data Protection Officer role to be performed under a service contract (Art. 37(6)). I am formally designated by the controller and my details are notified to the Polish DPA (UODO) - exactly as with an in-house DPO.
What does onboarding look like?
We start with a kick-off meeting (up to 2 hours) where I map your data processing operations and key risks. Within the first 30 days I review your existing documentation and present a remediation plan. Full operational readiness - usually within 2-4 weeks.
Is there a minimum contract term?
The Startup Legal Stack requires a minimum of 3 months - real value cannot be built in less. DPO as a Service is an annual contract, because the DPO role inherently requires continuity; after one year it converts to an indefinite term with one month's notice.
Do the packages cover representation before the Polish DPA (UODO)?
Incident handling and day-to-day correspondence with the Polish DPA (UODO) are included in the DPO as a Service package. A full administrative proceeding before the President of UODO is a separate project - package clients receive a preferential quote for it.