Certification readiness
End-to-end support for GDPR, ISO 27701, and the NIST Privacy Framework — gap analysis, remediation, and audit preparation.
Privacy, simply explained.
We help organisations turn complex regulatory requirements into a competitive advantage — through advisory work at DUB SERVICES LLC and our privacy-posture platform, Esquseo.
- CIPP/E
- CIPP/US
- CIPM
- IAPP Member
- GDPR · ISO 27701 · NIST
[ 01 ] — What we do
Two complementary projects, one mission: make privacy and AI compliance navigable, practical, and ultimately useful — for legal teams, engineers, and the organisations that depend on them.
DUB SERVICES LLC is our consultancy: certification readiness, Privacy by Design, compliance monitoring, and bespoke Privacy-Tech engineering. Esquseo is our privacy-posture platform: any organization's privacy standing, read from the public record in one search — and, with Esquseo Enterprise, the transfer due diligence, agreements and impact assessments that follow from it. Esquseo Dock turns the lens on your own website: a privacy and security review of what it actually does, and a privacy policy draft to match.
[ 02 ] — The Consultancy
DUB SERVICES LLC. Privacy that works for the business.
We are an Armenia-registered privacy and AI compliance consultancy working with clients globally. We help our clients move from "we should probably do something about privacy" to a defensible, audited posture — without slowing the business down.
Privacy by Design
Embedding privacy into products, processes, and architecture from day one — so compliance becomes a property of the system, not a tax on it.
Compliance monitoring
Ongoing oversight, KPI design, and assurance frameworks that let leadership see — in plain numbers — how the privacy programme is performing.
Privacy-Tech engineering
Custom tooling and privacy-enhancing technologies: DSAR automation, consent infrastructure, ROPA tooling, and privacy-aware data pipelines.
Cross-framework mapping
One control set, many regimes — mapped across GDPR, LGPD, PIPA, PDPA, CCPA/CPRA, and PIPL so multi-jurisdictional teams stop duplicating work.
AI compliance advisory
EU AI Act readiness, model documentation, risk classification, and the practical interface between AI governance and existing privacy programmes.
Visit dub-services.com
Engagements available in English, Russian, and Armenian.
[ 03 ] — The Platform
Esquseo. Any organization's privacy posture, in one search.
Esquseo reads the public record — official registries, framework participant lists, and stated certifications — and returns a structured, sourced read of any organization's privacy posture. One search, four checks, zero guesswork.
-
Applicable data-protection laws. Which regimes reach the organization — GDPR, UK GDPR, CCPA/CPRA, LGPD, PIPL, and more — identified from where and how it operates.
-
EU–US Data Privacy Framework status. Verified participant status, checked against the official DPF list — essential context for transatlantic data transfers.
-
APEC / Global CBPR certification. Cross-Border Privacy Rules status for the Asia-Pacific and global CBPR systems, confirmed from official registries.
-
Publicly stated security certifications. ISO 27001, SOC 2, and other publicly disclosed certifications, surfaced in one place.
-
Sourced, dated, confidence-labeled. Every finding cites its source, carries a date, and is labeled by confidence — a compliance read you can actually defend.
-
Privacy-first by construction. Passwordless email sign-in, two free assessments, pay-as-you-go credits — and we store only your email and credit balance. No assessment history is retained.
Open Esquseo
Two free assessments. Passwordless. No assessment history stored.
[ 04 ] — The Enterprise tier
Esquseo Enterprise. The paperwork a transfer decision rests on.
A standard assessment gives you a triage read. Enterprise gives you the file: researched counterparty due diligence, a scored transfer risk registry, a data processing agreement built on the correct SCC module, and a transfer impact assessment that follows the EDPB six-step method — all saved to your account.
-
Counterparty assessment. Name, registration number, country and website in — and out comes a researched assessment with a privacy posture score, verified against the organization's own published record and the registries that matter.
-
Transfer risk registry. The risks you actually take on when sending data to this organization — each scored by likelihood and impact, with a concrete mitigation and the legal basis behind it.
-
DPA with the right SCC module. A complete, ready-to-edit agreement on Module One, Two, Three or Four as the relationship requires — with Annexes I, II and III drafted, not left as placeholders.
-
Transfer scenarios and TIAs. Controller to controller, controller to processor, processor to controller or processor to processor — assessed against the destination country's government access regime, with supplementary measures and a documented conclusion.
-
Working documents, not just reports. Assessments and DPAs export to Word. Risk registers and TIAs export to Excel workbooks you work inside — dropdowns, live formulas, and inherent-versus-residual heat maps that move as your mitigations land.
-
Access by contract. Enterprise runs under a separate agreement with DUB SERVICES LLC, with a credit allowance set in that agreement. Anyone can sign in to preview the interface and read the full tutorial before deciding.
Open Esquseo Enterprise
AI-assisted analysis from public sources — not legal advice. Review with counsel before you rely on it.
[ 05 ] — The website review
Esquseo Dock. Your website, read from the outside.
Point Dock at a website you own. It reads one public page from the outside, the way a browser does, and returns a prioritised list of privacy and security drawbacks with a fix for each — plus a first-draft privacy policy built from what it actually found on the page.
-
An outside-in review. What the page actually loads and sets: third-party scripts and trackers, forms and the personal data they ask for, cookies and consent signals, links to legal pages, and the security headers the server sends.
-
Drawbacks in priority order. Each finding marked privacy or security, ranked high to low, with why it matters and a concrete fix — and the technical facts behind it shown alongside.
-
A data picture of the site. The personal data it likely collects, the third parties that receive it, the tracking in play, and where transfers outside the EEA are likely.
-
A privacy policy draft from real facts. Tailored to the trackers, forms, processors and embeds Dock detected, with bracketed placeholders wherever a detail still needs your confirmation. Review and draft both download as Word documents.
-
Same account, same credits. One review costs 2 credits from the balance used for assessments and the Explorer — the two free credits on sign-up cover the first. A review that fails is refunded automatically.
-
Minimal by construction. Dock refuses private and internal network addresses, never stores the page's text, and deletes your results from your account after 24 hours.
Open Esquseo Dock
An automated review of one public page — not a security audit or legal advice. Have the draft reviewed before you publish it.
[ 06 ] — Who runs this
Iliá Dubovtsev
Founder & Director, DUB SERVICES LLC
CIPP/E · CIPP/US · CIPM · IAPP Member. Master of Private Law, Bachelor of Laws. Working with clients in Armenia, the EU, and beyond.
“Compliance shouldn't be a riddle. Our job is to take what regulators wrote and turn it into something a product team, a board, and a customer can all act on.”
[ 07 ] — Get in touch
Let's talk about your privacy programme.
Whether you need certification support, an outside DPO perspective, or want to see your vendors through Esquseo's lens — we'd like to hear from you.