INFO by Design

What INFO by Design does

INFO by Design is a New Zealand-based specialist privacy consulting firm founded in 2017 that helps organizations comply with the Privacy Act 2020 and shift from compliance-focused to customer-centred privacy management. The company serves New Zealand organizations across private and public sectors — particularly businesses without a dedicated Privacy Officer — through a portfolio of services including the Virtual Privacy Officer subscription, Privacy Strategy development, Privacy Impact Assessments, Breach Management and Investigation, Policy Development and Process Design, Training and Mentoring, and Privacy Health Checks.

Its technology backbone is the SECURITI.ai PrivacyOps platform, delivered through an exclusive NZ partnership, which provides AI-powered automation for data inventory, data subject rights requests, consent management, breach management, vendor assessments, and data mapping. The firm operates as a small, founder-led team of Managing Director Paul Holmes, recognized as one of New Zealand's leading privacy experts, and Consultant Leon Colman, with internal operations running on Microsoft 365, Proposify, Xero, and Matomo.

The business model combines a recurring subscription stream (Virtual Privacy Officer packages starting at NZD 1,000 per month, with a GDPR compliance add-on) and project-based consulting, training, and breach investigation engagements. Distribution is consultative and direct — via website contact, phone, email, monthly newsletter, and thought-leadership content on Medium, Twitter, and LinkedIn — and the company operates solely within New Zealand with no disclosed funding, acquisitions, or external institutional investment.

Name

INFO by Design

Legal name

INFO by Design Limited

Website

https://infobydesign.co.nz

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

1–10 employees

Short description

INFO by Design is a New Zealand specialist privacy consulting firm founded in 2017 that helps organizations comply with the Privacy Act 2020 through Virtual Privacy Officer subscriptions, consulting engagements, and AI-powered PrivacyOps automation delivered via SECURITI.ai.

Ownership category

akta.pro rank

Product category

Privacy Consulting Services

NAICS

Computer Systems Design Services (541512)

SIC

Services-Computer Integrated Systems Design (7373)

akta.pro industry

PRIMARYHDADAIAI

Privacy Governance & Consent Management

Hardware, Technology & Telecom/Cybersecurity/Governance, Risk & Compliance (GRC)

SECONDARYHDADAFAH

Privacy Management (Consent, DSAR, RoPA)

Hardware, Technology & Telecom/Cybersecurity/Data Security & Privacy (DLP, Encryption, Key Mgmt)

SECONDARYBPAEADAL

Data Security & Privacy Managed Services (DLP/Encryption)

Business & Public Services/IT & Digital Services (Managed Services, Systems Integration)/Cybersecurity Services (MSSP)

Keywords

• Privacy consulting services
• Data breach management
• Virtual privacy officer
• Privacy impact assessments
• Privacy compliance

Headquarters

HQ city

Auckland

HQ country

New Zealand

HQ region

Oceania

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Virtual Privacy Officer Service: Recurring subscription service providing businesses with access to privacy officer expertise without appointing a full-time employee. Packages are scalable to fit business needs and budget, starting from $1,000 per month.
2. Privacy Consulting Services: Consulting engagements including Privacy Strategy development, Privacy Impact Assessments, Breach Management and Investigation, Policy Development and Process Design, and Privacy Health Checks. Billed per engagement or project.
3. Training and Mentoring: Specialist training modules and workshops for various audiences from privacy novices to professionals. Can be delivered as regular classes or customised in-house sessions. Also includes mentoring services for Privacy Officers and Privacy Professionals.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels3 records

Core offering

INFO by Design is a New Zealand specialist privacy consulting firm that helps organisations meet obligations under the Privacy Act 2020. Its core offering is a Virtual Privacy Officer (VPO) subscription service providing ongoing privacy officer expertise, complemented by project-based consulting including Privacy Strategy, Privacy Impact Assessments, Breach Management and Investigation, Policy Development and Process Design, Training and Mentoring, and Privacy Health Checks. The firm delivers these services through a small team of privacy specialists, augmented by an exclusive partnership with SECURITI.ai for AI-powered PrivacyOps automation.

Product overview

INFO by Design offers a portfolio of specialist privacy consulting services rather than a traditional software product. The core offering is the Virtual Privacy Officer (VPO) service, which provides ongoing privacy officer support and obligations management. This is complemented by Privacy Strategy, Privacy Impact Assessment, Breach Management and Investigation, Policy Development and Process Design, Training and Mentoring, and Privacy Health Checks services. All services can be enhanced through the SECURITI.ai PrivacyOps platform, which INFO by Design delivers as an authorized partner—providing AI-powered automation for data inventory, data subject rights, consent management, and privacy assessments.

Differentiator

Problem solved

Functional benefit

Products and services

• Virtual Privacy Officer (VPO) A cost-effective subscription service helping New Zealand businesses meet their Privacy Officer obligations under the Privacy Act. Provides access to technical privacy expertise including compliant privacy policies, staff training, information management improvements, breach management support, and Office of the Privacy Commissioner engagement. GDPR compliance advice is available as an add-on for European-facing businesses.
• Privacy Strategy Development of an outcomes-focused Privacy Strategy aligned with business priorities, including implementation support to embed the strategy across all organisational levels from culture-setting through to the privacy work programme.
• Privacy Impact Assessment Development or review of privacy impact assessments for projects and change initiatives, including design and implementation of customised PIA processes aligned with organisational project methodologies. Uses Privacy Design methodologies proven to reduce overhead compared to traditional processes.
• Breach Management and Investigation Design and implementation of customer-centred breach management processes that minimise impact on affected individuals and the organisation, including independent breach investigations, root cause analysis, and prevention strategies.
• Policy Development and Process Design Development of privacy policies and related processes and documents to ensure customer transparency, including advice on effective customer communication about privacy practices, consent processes, and rights.
• Training and Mentoring Specialist training modules and workshops for audiences ranging from privacy novices to privacy professionals, covering topics such as Privacy Act compliance, data breach management, Official Information Act compliance, and leadership skills. Includes dedicated mentoring services for Privacy Officers and Privacy Professionals.
• Privacy Health Checks Low-impact privacy capability and performance assessment that delivers a practical improvement plan based on strengths, imperfections, and opportunities identified. Typically completed within two days on site.
• SECURITI.ai PrivacyOps AI-powered privacy management platform delivered through partnership with SECURITI.ai, combining robotic automation and AI with full workflow automation for centralised privacy compliance and data governance. Capabilities include automated data inventory, data subject rights automation, consent management, breach management, privacy impact assessments, vendor assessments, and data mapping automation.

Quantifiable outcome

• Significant savings through Privacy Impact Assessment processes and templates
• +1 more outcomes

Named customers2 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability3 records

Feature8 records

Partnerships

One partnership is on record.

• SECURITI.aicoreTechnology or IntegrationINFO by Design has chosen to partner exclusively with SECURITI.ai, the leader in AI-powered PrivacyOps and data governance. They describe SECURITI.ai as having developed something 'truly revolutionary' and the only platform they have chosen as a partner. SECURITI.ai has been awarded 'Most Innovative Startup' at RSA Conference 2020 and is a Leader in the Forrester Wave: Privacy Management Software. INFO by Design leverages SECURITI.ai's platform to deliver PrivacyOps solutions including automated data inventory, data subject rights management, consent management, breach management, privacy impact assessments, vendor assessments, and data mapping automation.

Scale indicators1 record

Recent moves5 records

Expansion highlights4 records

Broad incumbents

• Exterro: Legal GRC and privacy management software vendor with data subject request automation and breach response modules. Comparable privacy operations software functionality.
• PwC New Zealand: Big 4 privacy and cyber risk advisory in NZ. Targets overlapping enterprise/government privacy programs, often with broader transformation scope than boutique specialists.
• Deloitte New Zealand: Big 4 advisory with privacy, cyber and GRC practices serving NZ enterprise and government. Competes for the same privacy strategy, PIA and breach response mandates that INFO by Design targets.
• Collibra: Enterprise data intelligence and governance platform. Competes in the broader data governance space that INFO by Design addresses via its data mapping and governance offerings.
• OneTrust: Global leader in privacy, security and governance software. Direct competitive overlap with INFO by Design's SECURITI.ai-powered PrivacyOps offering, but operating at vastly larger scale and serving enterprise multinationals.

Direct peers

• TrustArc: Privacy management platform offering consent, DSAR, PIA and privacy program automation. Closely comparable technology stack to the SECURITI.ai offering INFO by Design delivers to NZ clients.
• BigID: Data intelligence platform for privacy, security and governance including DSAR automation and data mapping. Overlaps with INFO by Design's privacy management and data inventory capabilities.
• Securiti.ai: AI-powered PrivacyOps platform that INFO by Design resells and configures. Comparable end-product (consent, DSAR, breach management, data mapping), but Securiti.ai sells direct while INFO by Design is the NZ implementation partner.

Regional players

• Aura Information Security: New Zealand-headquartered cybersecurity consultancy offering governance, risk and compliance services. Comparable NZ regional presence and consulting-led model targeting similar enterprise and government clients.
• PrivIQ: Australia/NZ-focused privacy advisory firm offering virtual DPO and privacy program services. Closest regional direct peer to INFO by Design's VPO subscription model.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xtwitter.com/infobydesign
• LinkedInlinkedin.com/company/infobydesign

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about INFO by Design