01ATTOH · Legal-Ops Verticalspartial

Cyber Essentials

Cyber Essentials exists to solve: NIS2 and UK GDPR obligations shift and an SME's policies quietly fall out of date until a fine makes it obvious.

Live · attoh.tech/cyber-law£199 one-off10 parts · 8 probe-verified

ATTOH LTD (Companies House 14079382)attoh.tech/cyber-law

02What it is

The facts, from the register.

Product	Cyber Essentials
Register key	cyber-law
Owner	ATTOH LTD (Companies House 14079382)
Live at	attoh.tech/cyber-law · HTTP 200 on 9 September 2026
Price	£199 one-off · [object Object]
Built from	10 register parts, 10 live, 8 probe-verified
Listed	14 August 2026

What it does

Cyber-law automates UK cyber compliance for SMEs. Our AI predicts regulatory changes (NIS2, UK GDPR) and adapts your policies in real-time, preventing fines. Get proactive, data-driven compliance and peace of mind from just £199/month. Stay ahead of evolving cyber threats.

Runs on

White-label site engine

White-label site deploy (Cloudflare Pages)

Client Engine (white-label site generator)

Site lead capture

Source: estate register (products, product_parts, builder_blocks) · deploy probe 9 September 2026Evidence live

03The frameWhat this buyer's profession checks

We will measure it against the SRA Standards and Regulations.

Three checks a buyer in this field applies, whether or not they name the standard. We use them as the frame for everything that follows.

Check 1

Competence and supervision of the work

Check 2

Client money and confidentiality handled correctly

Check 3

A record that stands up if the regulator asks

Frame chosen by BRG as a summary of the SRA Standards and Regulations. Verify the wording with the body before external use.No accreditation is claimed

04Why it's better · 1 of 6Check 2 · fit for purpose

The job as the register describes it.

NIS2 and UK GDPR obligations shift and an SME's policies quietly fall out of date until a fine makes it obvious.

Who carries it

SMEs in the UK needing automated cyber compliance for NIS2 and UK GDPR

Source: register pain_point · audienceThe problem, stated plainly

05Why it's better · 2 of 6Check 2 · fit for purpose

What it does instead.

Cyber Essentials exists to solve: NIS2 and UK GDPR obligations shift and an SME's policies quietly fall out of date until a fine makes it obvious.

The parts doing the work

White-label site engine verified

One renderer for many branded client sites; live tenant Pages proof plus source contract and publish queue guard.

White-label site deploy (Cloudflare Pages) verified

Builds a site from its live DB config and deploys to brg-site-<slug>.pages.dev (self-provisions the Pages project). GitHub Actions workflow_dispatch.

Client Engine (white-label site generator) verified

BRG-owned client engine surface composed from the white-label site generator, config contract, client editor and approval-gated publish queue.

Site lead capture verified

Public Supabase edge fn (honeypot, CORS, service-role) -> partner_site_leads, tagged by site_slug. Every white-label site form posts here; intel flows

Source: register purpose, public_blurb, product_parts joined to builder_blocks4 of 10 parts shown

06Why it's better · 3 of 6Check 1 · controls

Proof it exists, not a roadmap.

200

HTTP status of attoh.tech/cyber-law on 9 September 2026 · real-content-verified

8/10

parts wired live

HTTP 200

functional surface probe

Open attoh.tech/cyber-law during the talk. Anything the deck claims should be visible there.

Source: register deploy_probe_code, deploy_probed_at, product_parts.verified_by_probeProbed, not promised

07Why it's better · 4 of 6Against the market, honestly

Where we lead, and where we don't.

Category: Legal-Ops Verticals. Nearest rivals: Vanta, OneTrust, Luminance, cSquare GRC; strongest is Vanta. Our edge: AI-driven, predictive impact analysis of UK cyber regulatory changes (e.g., NIS2, DPDI Act 2025 amendments to UK GDPR) on existing policies and controls, providing actionable, automated adaptation recommendations and generating updated compliance documentation in real-time, leveraging a continuously updated proprietary knowledge graph of UK cyber law precedents and enforcement actions. This moves beyond mere alerts t. How we beat them: We will target UK SMEs in regulated sectors via LinkedIn (targeted ads, thought leadership content for Legal Ops, CISOs, Compliance Officers) and strategic partnerships with UK cyber insurance providers and specialist legal consultancies. Our wedge is the unique AI-driven *predictive adaptation* capability for UK cyber law, offering proactive compliance and risk mitigation, combined with a transparent, SME-friendly p. Source: product_market_analysis, analyst gtm-loop-worker; rivals re-checked against the product's own promise 2026-08-29.

Not independently sourced This verdict was written from an analysis whose only source was the model itself, not scraped competitors (analyst gtm-loop-worker). Treat the competitor names and positions as a working hypothesis until the market research is re-run; do not quote them to a buyer.

Source: register vs_competitionNamed competitors are the register's, not the presenter's

08Why it's better · 5 of 6Check 2 · fit for purpose

Built for one kind of buyer.

SMEs in the UK needing automated cyber compliance for NIS2 and UK GDPR

Source: register audience, serves_nichesOne buyer, not everyone

09Why it's better · 6 of 6Price is part of the scope

What it costs, in one line.

£199 one-off

Basis: [object Object]

Buying route

Payment on enquiry

software

Scope named on the next slides, so the price has a boundary

Source: register price_gbp, billing_interval, pricing_basis, payment_link_activeNo hidden rate card

10What's inside

The parts, with their verification state.

Part	Category	State
White-label site engine	backend	live_wired
White-label site deploy (Cloudflare Pages)	integration	live_wired
Client Engine (white-label site generator)	ui	live_wired
Site lead capture	backend	live_wired
GTM Outreach Engine	data	live_wired
ICO fee-payer register	data	live_wired
Legal Plain-English Clause Explainer (cited, no-fake)	backend	spec
Legal Redline / Track-Changes	backend	spec
Claude API prompt/IP pipeline	integration	live_wired
Cyber Law deterministic proof control room	full-stack	live_wired

Source: product_parts joined to builder_blocks · 10 of 10 shown probe-verified not yet

11Why packaging matters

Bought as a price.
Delivered as a scope.

What the buyer hears

£199 one-off

A number to compare with the last number.

the gap
disputes · churn
unpaid work

What the provider means

A scope

10 parts, some verified, some not, plus everything that is excluded.

Packaging is the instrument that makes the scope as visible as the price.Thesis

12Why packaging matters

Five things a package does that a price cannot.

Scope becomes visible. The parts are named, so nothing is assumed.

Boundaries are explicit. What is outside is written down before the first invoice.

It is auditable. A package is a documented process, which is what the SRA Standards and Regulations looks for.

Buyers compare like for like. A referral needs a defined thing to refer.

Switching fear drops. The move is inside the package, not a project bolted on the front.

Source: BRG packaging doctrine; frame from slide 3Packaging = a compliance instrument

13This packageCut by what each part does

Cyber Essentials, as a package.

backend

White-label site engine

One renderer for many branded client sites; live tenant Pages proof plus source contract and publish queue gua

verified

Site lead capture

Public Supabase edge fn (honeypot, CORS, service-role) -> partner_site_leads, tagged by site_slug. Every white

verified

Legal Plain-English Clause Explainer (cited, no-fake)

Plain-English explanation layer over engine.legal-ops clauses. Grounded in the clause + our curated risk_flags

spec

Legal Redline / Track-Changes

Clause-level redline between two contract versions over engine.legal-ops output. Deterministic LCS word-diff +

spec

integration

White-label site deploy (Cloudflare Pages)

Builds a site from its live DB config and deploys to brg-site-<slug>.pages.dev (self-provisions the Pages proj

verified

Claude API prompt/IP pipeline

Shared prompt/IP reasoning layer behind the agent fleet and build tooling.

verified

Client Engine (white-label site generator)

BRG-owned client engine surface composed from the white-label site generator, config contract, client editor a

verified

data

GTM Outreach Engine

Vertical-agnostic, global, always-on outbound GTM. A vertical = a gtm_vertical config row (pain wedge, killer

verified

ICO fee-payer register

Companies legally required to register but absent (CH diff) = warm ICO-product lead. Draft engine.

verified

full-stack

Cyber Law deterministic proof control room

Proof-only Cyber Law control room: Cyber Essentials readiness, recert delta, CE Plus verdict + incident-liaiso

verified

Source: product_parts grouped by builder_blocks.category5 groups

14Anatomy of the packageOn one page · 3 items of work left, filed

A package reads like a control document.

Inside the scope

White-label site engine
White-label site deploy (Cloudflare Pages)
Client Engine (white-label site generator)
Site lead capture
GTM Outreach Engine

Evidenced, and how

Live URL probed: HTTP 200 on 9 September 2026
8 parts probe-verified, latest 16 July 2026
Functional surface: HTTP 200
Register row updated with every probe

Outside the scope today · work left

No build gap recorded in the register
2 parts still to verify by probe
1 register field to fill (vs_competition_unsourced)

Who signs, and where the work sits

ATTOH LTD owns the product and the data layer
0 build packets proposed · 3 management items pending
Change log kept in the register

Source: product_parts (inside), deploy and part probes (evidenced), v_deck_work_left (work left; filed to manager_work and build_packets by deck_work_left_sync)One page

15Across the family

Where it hands over.

A1 Elitea1elite.pages.dev

Accounts & Filingattoh.tech/accounts-law/

AddressSnapattoh.digital/snap/addresssnap/

ATTOHCyber Essentialsattoh.tech/cyber-law

AIEmploymentattoh.tech/aiemployment/

AIFreightaifreight.uk

AITransportaitransport.uk

Source: register rows sharing client_key attohOne house, many doors

16Close

Three things to take back to your desk.

One

Open the URL on slide 6. Test it before you trust it.

Two

The parts and their verification state are on slide 10.

Three

A package is a compliance instrument, not a price list.

See it live

attoh.tech/cyber-law

Talk to us

cyber.smegrowthteam.com

ATTOH LTD (Companies House 14079382)ATTOH

1 / 16

Arrow keys or space · N narration · P print

Slide 1Narration Words Running total

Item	Spec
Format	16:9, 1920×1080, 25 fps, H.264 MP4 plus WebM. Burned captions and a sidecar SRT.
Runtime	Narration below plus screen captures of the live product; typically 8 to 12 minutes.
Frame	the SRA Standards and Regulations. Verify the wording of the three checks with the body before external use.
Brand	ATTOH family palette as rendered here. Green only for verified and live states; red only for exclusions.
Voice	Calm, exact, never theatrical. Read figures and dates in full. Numbers are the register's, and the register is cited on every slide.

Cyber Essentials

The facts, from the register.

We will measure it against the SRA Standards and Regulations.

Competence and supervision of the work

Client money and confidentiality handled correctly

A record that stands up if the regulator asks

The job as the register describes it.

What it does instead.

White-label site engine verified

White-label site deploy (Cloudflare Pages) verified

Client Engine (white-label site generator) verified

Site lead capture verified

Proof it exists, not a roadmap.

Where we lead, and where we don't.

Built for one kind of buyer.

What it costs, in one line.

The parts, with their verification state.

Bought as a price.Delivered as a scope.

What the buyer hears

What the provider means

Five things a package does that a price cannot.

Cyber Essentials, as a package.

White-label site engine

Site lead capture

Legal Plain-English Clause Explainer (cited, no-fake)

Legal Redline / Track-Changes

White-label site deploy (Cloudflare Pages)

Claude API prompt/IP pipeline

Client Engine (white-label site generator)

GTM Outreach Engine

ICO fee-payer register

Cyber Law deterministic proof control room

A package reads like a control document.

Inside the scope

Evidenced, and how

Outside the scope today · work left

Who signs, and where the work sits

Where it hands over.

Three things to take back to your desk.

One

Two

Three

Production guide

1 · Deliverable

2 · Runtime plan

3 · Screen captures

4 · Full narration

5 · What this deck must not say

6 · Regenerate

Bought as a price.
Delivered as a scope.