Fixed-fee compliance.
No surprises.
Every engagement starts with a defined scope and a price you agree to before we begin. No hourly billing. No junior associates. Direct accountability from the first conversation.
Three ways to engage
From a fast diagnostic to a full compliance build. All scoped, all fixed, all accountable.
The maximum ICO fine under UK GDPR — or 4% of global annual turnover, whichever is higher. A single enforcement notice can exceed our most expensive engagement by a factor of 3,500. That is the context for the numbers below.
- Full AI tool stack review — every tool that touches personal data
- Lawful basis assessment for each data process
- Gap analysis against UK GDPR & EU AI Act requirements
- Written report with prioritised remediation steps
- 30-minute debrief call
- Everything in the AI Compliance Audit
- Record of Processing Activities (ROPA) — drafted & delivered
- Privacy notice updated to cover AI processing
- Data Processing Agreement (DPA) template for AI vendors
- ICO registration review or registration handled
- Client-facing AI disclosure language
- 60-minute implementation call
- Everything in the Compliance Build
- Full contract audit — existing client & supplier agreements
- AI-specific contract clauses drafted for your agreements
- Data Protection Impact Assessment (DPIA) where required
- Regulatory change roadmap — 12-month horizon
- Board-ready governance summary
- 3 months of follow-up support (email)
All prices exclude VAT. Scope is agreed in writing before work begins. Payment split 50% upfront, 50% on delivery.
The Lexl guarantee
If the Tier 1 audit does not identify at least one compliance gap you were not already aware of, we will refund the fee. No questions, no argument. We have never been asked for one — but the offer stands because the work either delivers or it doesn't.
This is not for everyone
Most legal services won't tell you when you don't need them. We will.
- If your business has no personal data in its AI workflows, you have no GDPR exposure from AI. You don't need this.
- If you want a document to hide behind rather than a genuine understanding of what you're doing with other people's data, we're not the right fit.
- If you're looking for the cheapest possible tick-box exercise, there are cheaper options. They will not hold up under ICO scrutiny.
- If you're willing to take the risk without understanding it, that's a valid business decision. It's not one we can help you make responsibly.
- We work with founders who want to understand what they're doing with other people's data — and do it properly. If that's you, let's talk.
How an engagement works
From first conversation to delivered output — a clear, predictable process with no surprises.
-
01
Book a free 30-minute clarity session
We talk about your business, your AI tools, and what you're worried about. No pitch. No invoice. Just an honest assessment of what your actual exposure looks like and which tier makes sense.
-
02
Receive a written scope and fixed price
You get a one-page scope document within 24 hours of the call. It states exactly what we'll deliver, when, and what it costs. You review it. You decide. No pressure.
-
03
We do the work
You provide access to what we need — tool stack details, existing contracts, processing records. We review, assess, and build. You don't need to chase. We deliver on the timeline in the scope.
-
04
Delivery and debrief
All deliverables arrive in a clean, organised package. We walk through everything on a call so you understand exactly what you have and what to do with it. Nothing is left ambiguous.
-
05
You're compliant. And you stay that way.
Tier 3 clients get 3 months of follow-up support. All clients can return for targeted updates as the regulatory landscape changes. No retainer required — just a new scope when you need one.
Start with a conversation
Book a free 30-minute clarity session. We'll tell you exactly where you stand before you commit to anything.