How big is your GDPR risk?

Get a clear picture of your biggest risks and where to act first.

Based on a DataMapper scan you get one overall risk score from A to F, with an industry benchmark, an AI executive summary and prioritised recommendations. Ready for management, the DPO and the Danish Data Protection Agency.

Book a GDPR risk consultationSee an example of the report
Example of a GDPR Risk Assessment
Safe Online solutions are used by 500+ Danish and international companies
Alba Tankers Logo Big BlackAutohuset VestergaardBLS Capital logoDragsholm SparekasseFroslev logoHJHansen RecyclingGroup logo blaa RGBHarald NyborgJem og FixKjobenhavns Boldklub logoLTECH logoLynddahl colorMasai logo uai 1080x1080 1North Media logo presseNy Forbrugerraadettaenk logoProtector InsuranceRise SparekasseSOFACOMPANY BlackStansomatic logo 2021 dark blueStorstroms ForsikringTestaVivaUdviklingsbasen logoUni Tankers logo DMB RGB 1apotekerneserhvervshusene RGB posfocus advokater logotitan containerAlba Tankers Logo Big BlackAutohuset VestergaardBLS Capital logoDragsholm SparekasseFroslev logoHJHansen RecyclingGroup logo blaa RGBHarald NyborgJem og FixKjobenhavns Boldklub logoLTECH logoLynddahl colorMasai logo uai 1080x1080 1North Media logo presseNy Forbrugerraadettaenk logoProtector InsuranceRise SparekasseSOFACOMPANY BlackStansomatic logo 2021 dark blueStorstroms ForsikringTestaVivaUdviklingsbasen logoUni Tankers logo DMB RGB 1apotekerneserhvervshusene RGB posfocus advokater logotitan container

We set up the scan in 30 minutes

The report is based on a DataMapper scan of the systems you choose. Your employees are not involved, everything runs through native connectors in Microsoft 365. A scan of 2 TB gives a representative picture of your total data risk.

1

Choose systems

You choose which systems are scanned: Outlook, OneDrive, SharePoint, network and local drives.

2

DataMapper scans

DataMapper finds personal and sensitive data across the chosen systems through native connectors, without involving your employees.

3

Get the report

You get one combined risk report with score, benchmark and recommendations, ready for management, the DPO and the Danish Data Protection Agency.

Our Customer Success Manager handles the setup together with your Microsoft administrator, and it takes about 30 minutes.

What the report reveals

Not a raw file list, but a decision-ready report: where the risk sits, how sensitive it is, and what you do about it.

Risk score A–F
C
63/100
Moderate exposure
Volume
Severity
Concentration
Sector
With industry benchmark. 1 point below the comparison group.
Where the risk sits
Outlook25,016
OneDrive1,306
SharePoint17
Almost all the exposure sits in email.
Identifiers found
Danish personal ID numbers5,650
Payment cards1,248
Danish passports811
Danish driving licences260
Personal ID numbers dominate, highlighted by the Danish Data Protection Agency as high risk.
Article 9: special categories
Health20,133
Ethnic origin4,083
Political796
Sexual orient.766
Sensitive data that requires extra protection.
Concentrated with a few
~63%
of all high-risk findings sit with just 3 employees, so targeted clean-up is possible.
user17 · 2,353user24 · 1,251user33 · 1,051
AI-written executive summary

“The overall risk score for Acme A/S is 63/100 (grade C)… The most material findings relate to email and personally identifiable identifiers. The exposure is concentrated with a few employees…”

Ready for management, the DPO & the Danish Data Protection Agency

How your score is calculated

One combined score from 0–100, translated into a grade from A to F. Built on four factors.

ABCDEF

Volume of sensitive data

How much personal and sensitive data sits across your systems.

Sensitivity level

How sensitive the data is, for example personal ID, health and Article 9 data weigh more heavily.

Risk concentration

Whether the risk is spread out or gathered with a few users and locations.

Industry profile

The typical risk profile of your industry is part of the overall assessment.

The formula is documented and versioned, so the score is transparent and can be verified.

The report does not stop at the problem

Every report ends with prioritised recommendations and points to the tools that solve exactly what the scan found.

DataMapper

Activate the affected employees so they clean up the risk files found themselves.

Example: 7,305 high risk · 19,034 risk files to handle.

ShareSimple

Introduce secure sending, so personal ID numbers and cards do not end up in unprotected attachments.

Example: 5,650 personal IDs + 1,248 payment cards drive the risk.

Training

Targeted GDPR training for the employees who carry the risk in the report.

Example: 3 users hold ~63% of the high-risk files.

See exactly where your personal data sits, and where you are at risk

With DataMapper we scan your data and produce a GDPR Risk Assessment, which we then go through together with you.

From DKK 6,800

For example: a scan of up to 100 mailboxes and 2 TB of data is a fixed price of DKK 8,450. If you need more than that, we'll agree a tailored price with you.

  • Free setup & support
  • Clear recommendations and a visualisation of your GDPR risks
  • You decide which locations or environments are scanned (Outlook, OneDrive, SharePoint).
  • No complicated IT installations
See an example GDPR Risk Assessment