Governance is not just about having policies in place. School governors, charity trustees and company directors need visibility of what is happening on the ground so they can oversee activities and, where necessary, take control by making informed decisions before things start to go wrong.
As with Finance and Operations, they need visibility of how information and technology are used across the organisation, with each Head of Department owning the risks and accountable for ensuring active risk management and regulatory compliance.
APIMS brings all of this into view. Developed in response to schools’ needs, it is equally configurable for charities, healthcare providers and SMEs.

Reduce complexity and costs with our award-winning GDPR and cybersecurity risk management software.

Our clients:
If you are a school governor, charity trustee or company director, your Board is legally "accountable", i.e. you must be able to demonstrate compliance with the six Privacy Principles".
Could you do that now? No worries - APIMS will give you the visibuility and contyrol you need to provide active, practical oversight.

APIMS maps departments, processes, systems and services to build a clear Record of Processing Activities, clerly showing what personal information and technologies are being used - where, how and by whom.

APIMS identifies risks and rsecord them in the Information Risk Register, assigning owners and mitigating actions, then monitoring risk ratings and the status of control actions.

Governing bodies, Department Heads, Process Leads and Data Protection Officers can all use their role-based dashboards oversee, review, manage or monitor risk assessments (DPIAs), Subject Access Requests, Data Incidents & Breaches and the risk and control environment.
Large organisations spend years and £millions implementing "Privacy Programmes" using consultants and expensive software.
We know, because we've spent decades in the industry building privacy frameworks for multinational organisations.
As a smaller business, school or charity, you have the same legal obligations and risks – but not the resources.
We've developed APIMS to meet your needs.

“CPOMS has been using APIMS for a couple of years. APIMS really came into its own when we had a consensual ICO audit. We were able to show the ICO our Accountability Framework, our ROPAs and our Risk Register with up-to-date information on risk ratings and control status displayed on the dashboard. The auditors said they were ‘really impressed’ with our processes, as well as our training module – also produced by APIMS.”

APIMS is the product of Simon Hall’s nearly two decades of experience in privacy, information governance and software design. He saw that, as governance becomes more critical, schools and other small to medium-sized organisations had few affordable ways to give leaders the visibility and control they need for effective oversight.
Simon became IBM’s Data Privacy Officer for the UK, Ireland and South Africa in 2007 and chaired its EMEA Privacy Review Board for more than four years, performing or overseeing around 1,500 privacy impact assessments.
He led the roll-out of IBM’s in-house Global Privacy Assessment Tool, which he believes was the world’s first privacy management software.
He went on to co-found KPMG’s global Privacy Advisory practice and deliver privacy and GDPR-readiness programmes for organisations including AstraZeneca and Walmart.
At Asda, he designed and built a bespoke tool used to document more than 130 IT systems and manual processes. He was also DPO for six years at CPOMS, a leading EdTech provider.
Simon brought these experiences together in APIMS, drawing on a Privacy Management Framework model used by KPMG’s practice, an Enterprise Process Framework derived from IBM’s EPF, a Risk & Control Matrix he developed over 15 years, and an Accountability Framework of his own design.
The result is a platform designed to make effective information governance affordable and usable without specialist expertise.
Simon is a non-practising barrister and Fellow of Information Privacy. APIMS was named PICASSO Europe’s Most Impactful Privacy Product in 2023.

Nathan is an outstanding technology and AI consultant with over twenty years’ experience. His clients have included Nest, Ministry of Justice, BAE, Rolls Royce, KPMG, Pfizer, Centrica and Amazon.
He has deep expertise in cloud architecture, AI design and mobile/web app development, and a proven track record in driving innovation and successful project delivery.

Sarah has held Global CMO & International Sales Director roles with companies including Google, ITV & Truphone, and hasd advised a number of tech start-ups.
She is passionate about human-centric tech.

Khalil is a digital advertising pioneer and entrepreneur with deep experience building and advising high-performance sales and go-to-market teams across digital media, AdTech and Education.