Golonex

The Seat

The seatWhat the seat overseesGRC & third-party risk

Readiness

All readiness reviewsCMMC / NIST 800-171EU AI Act & ISO 42001ISO 27001PCI DSSGolonex Ready

Managed Delivery

All managed delivery 01Managed GCC02Managed talent03Managed software delivery04Managed infrastructure05Security assurance06Managed Microsoft ecosystem07Managed process & AI automation

Company

About Our work Industries Blog Book a readiness review →

Case studies : Selected engagements, in outline.

Client names are withheld and details generalised. Ask on the first call and we will tell you which of these we can introduce you to.

Case Studies

What we've delivered

AI Automation Financial Services
5× faster assessments

Vendor Risk Assessment Automation

Multi-agent workflow reduced assessment cycle to under 4 days with zero reduction in assessment depth. Analysts now review, not research.

AI AutomationBFSIMulti-Agent
Compliance SaaS
6wk vs 6-month industry average

ISO 27001 Certification in 6 Weeks

Gap assessment, ISMS build, evidence pack, and certifying body coordination completed in 6 weeks. The certifying body’s audit followed.

ISO 27001SaaSCompliance
AI Automation HR-Tech
3d → 2h per hire screening cycle

HR Talent Intelligence Pipeline

AI screening pipeline reduced initial review to under 2 hours per role while improving shortlist quality. Deployed with EU AI Act deployer controls.

AI AutomationHR-TechEU AI Act
AI Automation Legal
0 manual data entry

Intelligent Document Processing

IDP pipeline with structured extraction and human-review gates eliminated manual data entry entirely. Deployed air-gapped with full data residency.

AI AutomationIDPLegal
Compliance SaaS / AI Product
10wk to certification-ready

ISO 42001 Certification Readiness

AIMS design, policy library, risk register, evidence pack and certifying body coordination completed in 10 weeks. The certifying body’s audit followed.

ISO 42001AI GovernanceSaaS
Compliance Banking
Ready ahead of the May 2027 SDF deadline

DPDP Significant Data Fiduciary Readiness

DPO appointed (Golonex fractional), PIMS built, consent architecture redesigned, and audit readiness achieved well ahead of the deadline.

DPDPBFSIDPOPrivacy
Pen Testing FinTech
23 critical findings remediated pre-launch

Pre-Assessment Penetration Test — FinTech Platform

23 critical and high findings identified and remediated before launch. The findings fed the PCI DSS readiness work that followed.

Pen TestingPCI DSSFinTech

Ready to be the next case study?

Book a readiness review. We'll tell you exactly where you stand.