GRC Automation
Continuous monitoring against GDPR, DPDP, POPIA, PIPA and your own frameworks.
ExploreThe Praeferre Platform
One dashboard. Every module. Infrastructure that's actually yours.
GRC Automation, AI Data Leak Protection, Third-Party Risk, Consents Manager and DPO as a Service all report into a single compliance hub — your enterprise assurance layer, with unified dashboards and reporting across every module. API-first from day one, secured by your own SSO, and hosted wherever your data is required to live: Praeferre Cloud, your own AWS, Azure or GCP tenancy, or entirely on-premises.
5 modulesOne dashboard, one evidence base
3 cloudsOr fully on your own infrastructure
Single-tenantNothing shared, ever
Runs wherever you need it to:
PRAEFERRE CLOUD
AWS
AZURE
GCP
ON-PREMISES
AIR-GAPPED / LOCAL
One hub, five modules
Everything reports into the same place
Each module works standalone, but every scan, redaction, vendor assessment, consent record and DPO decision feeds the same evidence base — so your dashboard shows one true picture of your compliance posture, not five disconnected tools pretending to be a platform.
AI Data Leak Protection
Redact, obfuscate or block sensitive data before it reaches ChatGPT, Claude or Gemini.
ExploreThird-Party Risk
Automated vendor questionnaires, document review at scale, and DPIA escalation.
ExploreConsents Manager
One view of every customer and every consent across your platforms, with access and erasure requests done in clicks.
ExploreDPO as a Service
A named DPO, backed by the same platform data, for a fraction of an in-house hire.
ExploreYour compliance hub
One dashboard your DPO, your board and your auditor can all read
Compliance data scattered across five tools is compliance data nobody fully trusts. Praeferre's dashboard pulls every module into role-based views — an executive summary for the board, a working queue for your compliance team, full evidence trails for an auditor — all drawn from the same underlying data, updated in real time.
- Role-based dashboards — board, compliance team, and auditor views from one data set
- Unified reporting — export or schedule reports spanning every module at once
- One evidence base — a DPIA raised from vendor risk shows up in your GRC record automatically
Platform Architecture
Deploy anywhere
Your data lives where it needs to — not where it's convenient for us
Data residency isn't a checkbox on a form; it's a hosting decision. Choose how and where Praeferre runs, and change your mind later without re-platforming.
Praeferre Cloud
Fully managed, fastest to get running. Choose your data region at setup — UK, EU, or elsewhere — and it stays there.
- Live in days, not months
- Fully managed updates and monitoring
- Region-locked at setup, single-tenant always
Your cloud tenancy
Deployed directly into your own AWS, Azure or GCP account — inside your existing network, IAM and security tooling.
- Data never leaves infrastructure you already control
- Your existing security and monitoring stack applies automatically
- Satisfies procurement rules that require named-cloud hosting
On-premises & air-gapped
A fully local install for environments where nothing leaves the building — no external network dependency required.
- Runs entirely within your own data centre or facility
- No external connectivity required to operate
- Built for defence, government and the most sensitive estates
API-first, always
If it's in the dashboard, it's in the API
Praeferre was built API-first, not API-eventually. Every scan, score, redaction and DPIA is available as a call you can integrate into your own systems — your ticketing tool, your SIEM, your internal GRC dashboard, or a data warehouse you already trust.
- Full REST API covering every module — nothing dashboard-only
- Webhooks for real-time events — a flagged vendor, a raised DPIA, a blocked prompt
- Built to sit behind your own systems, not replace them
Sample Request
// Pull a vendor's current risk score
GET /v1/vendors/{vendor_id}/risk-score
Authorization: Bearer •••••••••••
{
"vendor": "Meridian Cloud Services",
"score": 94,
"status": "within_limits",
"framework": "GDPR",
"last_scanned": "2026-07-09T08:12:00Z",
"next_scan": "2026-08-09T08:12:00Z"
}
GET /v1/vendors/{vendor_id}/risk-score
Authorization: Bearer •••••••••••
{
"vendor": "Meridian Cloud Services",
"score": 94,
"status": "within_limits",
"framework": "GDPR",
"last_scanned": "2026-07-09T08:12:00Z",
"next_scan": "2026-08-09T08:12:00Z"
}
AI built for this, not adapted to it
Every model is structured around your compliance boundary
Praeferre's models aren't a general-purpose assistant pointed at your documents — they're structured and tuned specifically for compliance and privacy tasks, and every deployment respects the same boundary your hosting choice sets. Your data is processed within the region you selected, is never used to train shared models, and every AI-generated finding carries the evidence it was based on.
- Processing stays inside your chosen hosting region, always
- Your data is never used to train shared or third-party models
- Every finding is traceable to the clause or evidence behind it
Processing Boundary
Built as your platform
Nobody shares your resources. Nobody ever will.
Multi-tenant SaaS pools compute and storage across customers to keep costs down — and accepts the shared blast radius that comes with it. Praeferre doesn't. Every deployment, whichever hosting option you choose, is dedicated to you alone: your own compute, your own storage, your own isolation boundary.
- No shared compute or storage with any other customer, ever
- A security incident elsewhere on Praeferre can't reach your environment
- Meets enterprise procurement standards that shared SaaS can't satisfy
Tenancy Model
TYPICAL SHARED SAAS
Many customers on pooled compute and storage — efficient, but an incident anywhere can touch everyone.
PRAEFERRE
Every resource in this deployment belongs to you. No pooling, no shared blast radius, no exceptions.
Sign in your way
Access follows your existing identity setup, not a new one
Praeferre secures every deployment behind your own single sign-on, so access to the platform follows the same joiner, mover and leaver process your IT team already runs — no separate password, no orphaned accounts when someone leaves.
SAML 2.0
OIDC
OKTA
AZURE AD / ENTRA ID
GOOGLE WORKSPACE
ROLE-BASED ACCESS
Access Model
Built to extend
If the platform doesn't do it yet, we'll build it with you
Every organisation has at least one requirement that doesn't fit a standard module. Praeferre is built to be extended, not worked around.
Custom modules
Built around your own internal frameworks and control sets, not just the standard ones.
Custom dashboards
Report templates and views built around the metrics your board actually wants to see.
Custom integrations
Purpose-built API connections into legacy or proprietary systems standard connectors don't reach.
Custom risk models
Scoring and thresholds tuned to your organisation's own risk appetite, not a generic default.
Common questions
Questions we get asked
Five modules that report into one compliance hub: GRC Automation, AI Data Leak Protection, Third-Party Risk Management, Consents Manager and DPO as a Service. They share the same dashboards and reporting, so your DPO, your board and your auditor read the same numbers rather than three reconciled versions of them.
Wherever your compliance boundary requires — the deployment is modelled around that boundary rather than around our convenience. Tenancy is not shared: nobody else sits on your resources, and that does not change as you add modules.
Yes. The platform is API-first, and the rule we hold ourselves to is that if it is in the dashboard, it is in the API — so anything you can see, you can pull into your own reporting, SIEM or warehouse.
Through your existing identity provider and SSO. Access follows the identity setup you already run, so joiners and leavers are handled by the process you have rather than by a second directory that drifts out of date.
Tell us. Much of what is in the platform today started as a customer requirement, and where a gap matters to your programme we will build it with you. A short discovery call is the place to start.
Start your compliance journey
See it built around your infrastructure, not ours
Bring your hosting requirements, your identity provider and your integration list — we'll show you what the platform looks like running on your terms.