How it works
Audit. Map. Comply. Connect.
It starts with an audit: we go into your operations and the systems they run on, and see how the work is really done. We map each process to the controls you must keep, show where you comply and where you do not, then connect your systems so the controls are checked as the work happens.
Four steps
Each step leaves something you keep.
- 01
Audit
We go into your operations and the systems they run on, and see how the work is really done: who touches what, where data goes, and which checks are still kept by hand.
LeavesA written map of your systems
- 02
Map
Every process, system and data flow mapped to the controls you must keep, with the law behind each control, the duties one person should not hold alone, and a fixed-price plan.
LeavesThe controls that apply, the gaps, and the blockers to build
- 03
Comply
Each control is checked on every record as it happens. A gap becomes an issue, a named person closes it, and the closing is kept.
LeavesEvidence, kept as you work
- 04
Connect
Your systems are connected. The checks run without pause and the work between systems runs on its own, with a person approving what matters.
LeavesOne record across your systems
How a record flows
Once connected, every record takes the same path: read, checked, kept, raised if it fails, and decided by a person.
1 · Read
Your systems, read where they already are.
2 · Check
Every record against every control that applies, on arrival.
3 · Keep
Each result fingerprinted with SHA-256, added to and never rewritten.
4 · Raise
A failure becomes a finding, with the records behind it.
5 · Decide
A named person accepts, fixes or approves, and the closing is kept.
- Connect
Plugs into the systems you already run
Through each system's own sign-in, and files of every kind: spreadsheets, exports, e-invoices and documents.
- Read
Reads each record as it is made
Every payment, invoice, email, enquiry and change of access, read once, the moment it arrives.
- Check
Checks it against your controls
Each record against every control that applies to it, and the EU law behind each control.
- Keep
Keeps the proof, tamper-evident
Each result fingerprinted with SHA-256 and chained to the one before it: a result changed, removed or slipped in breaks the chain, and the chain checks out with code that runs outside the database.
7e09f84be23a…The fingerprint of a kept check: SHA-256 7e09f84be23af4b8cc3ca2ead375f678159ebd1d69bd58c9ef5c125ce31dd27d - Fix
Proposes the fix. A person approves.
A failed check becomes a finding with its records and the fix to make. A named person accepts it. A fix to access, money or customer data waits for a named approver. The closing is kept.
Try this in a copy of your own, for two hours, with nothing to sign up for.
Open your own copyDuties one person should not hold alone
The audit asks where one person can start and finish something that should need two: adding a supplier, changing its bank details and paying it, or changing a signed-off record without a trace. Each one it finds becomes a blocker in the build plan, which stops the action before it happens.
How it is bought
The audit and the map are one fixed-price assessment. The build connects your systems and switches the checks on. Run & Monitor keeps them watched, fixed and reported.
- Audit
Assessment: systems and compliance audit
€6,300
- 7 days: systems map, where work is keyed twice or lost
- Compliance check for the sector's laws
- Fixed-price build plan
- A map of everything the business runs: each system, supplier, AI tool, data flow and website, with its owner and how sensitive its data is
- Build
Build: connect and automate
from €15,000
- Connect the customer's systems (CRM, email, payments, accounts, website)
- Workflows with retries and alerts
- Controls mapped and evidence switched on
- Access governance: leavers' sign-ins removed, admin access approved by a second person, access reviewed every three months
- Privacy operations: data requests on their legal clocks, erasure across every system, the record of processing
- AI governance: the AI-use register and each use's class under the AI Act
- The incident clocks for GDPR, NIS2 and DORA
- The business's own trust centre
- Run
Run & Monitor
from €850 a month for each business
- Monitoring of every connected system
- Eurus's assistants watching every check, with what needs you ranked first
- Fixes to workflows and integrations
- Monthly assurance report
- A named FourWinds lead
- Access reviews and data requests kept to their dates
- Restore tests recorded as evidence, with their dates
Want this on your own systems? It starts with an audit of how your business really runs.
Book an auditWhat you bring
A key or a sign-in for each system
Read permission only: a restricted key, or a sign-in at the vendor's own page.
A person who approves
A named person who approves fixes to access, money and customer data.
The rules it keeps
Its sector, and the standards its customers and its insurer ask about.
From the first day
In sandbox
You start in sandbox: your real systems are read, and no message is sent.
One workflow at a time
Each workflow is tried on test data, then switched on by name.
Live
When it is ready, FourWinds switches its messages to live.
Want this on your own systems? It starts with an audit of how your business really runs.
Book an auditWhat you see
The app itself: its five screens and the views inside them, on a phone or a desk.
Start here
See it on a business of your own.
Open your own copy in a few seconds and use it for two hours, with nothing to sign up for. When you want it on your own systems, we start with an audit.