Start with a shared brief
Keep the conversation, agreed services, quotation revisions and engagement agreement together.
Platform / Professional practices
Your expertise. Connected client work.
Agree the scope, organise the engagement and collaborate through the access each client approves.
Work within approved access
The client chooses the records, permitted actions and duration. A listing or signed agreement does not itself grant workspace access.
Keep professional roles clear
DPCO filings, DPO responsibilities and other advisory services follow their own admission, scope and authority requirements.
A clear brief. A shared working context.
Bring your expertise into the client’s work.
Work with clients you already serve or meet a new company through the marketplace. Keep the engagement, approved access and delivery connected without losing your professional responsibilities.
- 01
Start with the client’s need
Use the conversation to understand the company’s requirements and the service it is looking for. Keep the professional role and scope clear from the beginning.
- 02
Agree the engagement
Prepare the quotation, discuss revisions and agree deliverables, terms and payment milestones. Keep the engagement agreement beside the conversation that shaped it.
- 03
Obtain the right authority
The company separately approves the records, permitted actions and duration of access. Work within that approved scope, with service eligibility and credentials appropriate to your role.
- 04
Deliver and review together
Coordinate the programme or advisory work, follow up questions with the client and bring the relevant evidence into review. Where the engagement includes audit reporting, follow its review and signing steps.
See the work take shape
An agreed engagement. A separate access decision.
Koru Commerce engages a fictional professional practice to support its privacy programme.
Fictional company example
- Client brief
- Review processing records and programme gaps
- Agreed deliverables
- Record review and a prioritised follow-up agenda
- Engagement context
- Quotation revisions and agreed milestones
- Company authority
- Access limited to the approved programme scope
Human review
The client approves the relevant access separately from the engagement agreement. The practitioner reviews the work within that authority.
The relationship, scope and company decisions stay clear as the work moves forward.
Clear responsibilities
Your team and the client’s, each in their lane.
You lead the work, the client coordinates, and departments answer only what they are asked.
Professional lead
Agrees the service, coordinates delivery and retains responsibility for professional judgement.
Client coordinator
Confirms the company context, coordinates responses and arranges the appropriate access decisions.
Department contributor
Provides the operational context and supporting information needed for the agreed review.
What you take forward
A shared engagement with clear boundaries.
Keep the commercial agreement and the working context close, so both sides understand the service and the decisions still needed.
- Client conversations and quotation revisions
- Agreed scope, deliverables and milestones
- Client-approved access to relevant records
- Review context and follow-up work
Before you start
What practices ask before they join.
Can we bring clients we already work with?
Yes. You can bring existing client relationships into Asiri. Agree the engagement and have each company approve the relevant access to its workspace.
Who can offer professional services?
Service eligibility depends on the practitioner’s category, approved credentials and scope. DPO responsibilities, regulated DPCO work and other advisory services have distinct authority requirements; a marketplace listing does not confer them all.
What does it cost to work as a professional?
The professional workspace is free, with no per-client access fee. Companies pay for their software plans. Marketplace-introduced work follows its applicable commercial terms; see pricing for current rates and conditions.
Does signing an engagement grant company access?
No. The company separately chooses the records, permitted actions and duration. A signed agreement or marketplace listing alone does not grant access.
Can Eri support our preparation?
Eri can answer questions and prepare supported drafts using records accessible to the initiating person. People review the work. The deeper NDPA preparation workflow does not confer professional authority or replace a regulated opinion.
Bring one client first. Add the rest as you go.
Professional services depend on each practitioner’s service category and approved credentials. Listing is not certification, and an adviser does not acquire regulated DPCO authority by joining the marketplace.