The Xelvio Toolkit
A compliance portal for organisations without a compliance department.
Why it exists
Most compliance failures are failures of maintenance: a register not updated, a policy review missed, training not recorded, a breach handled by telephone and not written down. The Toolkit is the portal in which that maintenance is the default. Every register, policy, assessment and training record lives in one place, dated, versioned and attributed, and your compliance position is visible at any time.
Your compliance position, at a glance
A dashboard showing open items, overdue reviews, upcoming deadlines and the state of every register. Board reporting generated from the same data.
Registers that stay current
Breach register, risk register, DPIA and AI register, complaints log, gifts and hospitality log, records of processing. Each entry dated, attributed and linked to the policy or obligation it relates to.
A policy library with version control
Every policy with its owner, version history, review date and staff acknowledgements. Reviews are diarised and reminders sent.
Training, assigned and evidenced
Training assigned by role, completion recorded, and evidence available for an auditor or regulator on request.
Regulatory change, monitored
A regulatory intelligence feed covering the ICO, the FCA and relevant legislation, with each item assessed for relevance to your organisation and actioned or dismissed with a record.
Documents drafted, then reviewed
An AI-assisted document generator produces first drafts of policies, DPIAs and assessments from your organisation’s own data. A practitioner reviews every draft before it is adopted. Xelvio is open about where AI is used.
For regulated firms
SM&CR responsibilities mapping, statements of responsibilities, certification records and a financial promotions log with approval workflow.
Three ways to use it
With a Xelvio retainer.
Included. Your fractional DPO or compliance officer works in it with you.
Self-service.
Organisations with in-house ownership can subscribe directly, with tiered plans by size and modules.
After a project.
Audit, remediation and complaints triage clients can retain their framework in the Toolkit under a self-service subscription.
Built to the standard we audit against
Each client has its own tenant. Role-based access for staff and for Xelvio. UK/EU data residency, encryption at rest and in transit, per-tenant isolation, audited access. Technical and data-processing details are set out in the Toolkit data sheet [link].
Plans
Plan details to follow.