How it works
From a declared asset to a report you can hand to someone else
Eight steps, one authorisation boundary, and a fixed turnaround. Here is exactly what happens after you pay, and what you are expected to provide.
- 01
You choose an offer
Pick the Identity Exposure Check or the Evidence Assessment. Payment is a single Stripe checkout — no sales call, no procurement cycle.
Output
Order reference issued
- 02
You complete onboarding
Declare the brands, domains, profiles, listings and images that are genuinely yours, describe your concern, and authorise observation of those assets.
Output
Official asset registry
- 03
We scope the dimensions
Your declared assets determine which of the eight Watch dimensions apply. The scope is written into the report so you can see what was and was not examined.
Output
Written scope
- 04
We observe public sources
Bounded observation across the relevant source families for the dimensions in scope, over a stated observation period.
Output
Raw signals
- 05
We qualify and correlate
Signals are grouped, checked against the registry, and either promoted to evidence with captured provenance or recorded as a hypothesis that could not be established.
Output
Qualified cases
- 06
An operator reviews
A human reviews every finding before it is called a verified incident, and writes down what remains uncertain.
Output
Reviewed findings
- 07
You receive the report
Executive summary, scope, methodology, findings with epistemic status and evidence references, risk scoring with rationale, limitations, and prioritised recommendations.
Output
Customer report
- 08
You decide what happens next
Act on the recommendations yourself, buy an Action Pack so the reporting packages are prepared for you, or start Continuous Guardian to keep watching.
Output
Your decision
Turnaround
Fixed, and measured from onboarding — not from payment
The clock starts when your asset registry is complete, because we cannot observe assets that have not been declared. The Identity Exposure Check is delivered within three business days of that point; the Evidence Assessment within five. If we expect to miss it, you hear from us before the deadline, not after.
Authorisation
We observe only what you have declared and authorised
Your asset registry is also your authorisation scope. If we notice something interesting that falls outside it, we will tell you it exists and ask whether to extend scope — we will not quietly widen the engagement. Extending scope is your decision, and it is recorded.