A note from our founder

"In my nine years in-house, I’ve seen two types of privacy advice. There is the theoretical kind - long legal memos that tell you what the law says but leave your engineers wondering how to actually build the product compliantly. Then there is the 'automated' kind—software platforms that give you a checklist but no actual strategy.

I started Aerx to provide the middle ground.

Having navigated the high-pressure environment of FinTech acquisitions and global data migrations, I know that the most successful privacy frameworks aren't the ones with the thickest policy manuals. They are the ones where the DPO is approachable, the requirements are clear, and the governance actually keeps pace with the code.

At Aerx, we don't just want to keep you compliant; we want to make sure your privacy posture is a reason why customers say 'yes' to your product."

— Maisie Griffiths, Founder of Aerx

Trust and Expertise

Aerx (pronounced Arx) is a boutique privacy and AI governance consultancy built for the modern tech stack. We don’t just cite the law; we build the frameworks that allow SaaS and FinTech companies to scale through complex global regulations.

The pedigree behind the firm

Our expertise is rooted in nearly a decade of high-stakes, in-house leadership. Our founder has navigated the privacy landscape of the global payments industry, most recently serving as a Senior Data Protection Officer for a high-growth FinTech through multiple billion-dollar acquisitions by Fortune 500 enterprises.

We’ve sat in the room during the due diligence process for global giants. We know exactly what investors look for, what auditors fear, and which "red flags" actually stall an exit.

Approachable by design

In the world of privacy, a "department of no" is a liability. Aerx was built on the philosophy that a consultant should be an enabler, not a bottleneck.

Our founder's recent 360-degree professional review—covering over 150 staff members—consistently highlighted one core trait: approachability. We pride ourselves on being the trusted partner your engineering, sales, and product teams actually want to call.

Our technical edge

We are fluent in the environments where your data actually lives. Our experience includes:

Global regulatory oversight - Navigating the friction between UK/EU GDPR, the DUA Act, and US standards like CCPA.

The AI frontier - Leading AI Impact Assessments and building the governance structures required by the upcoming EU AI Act.

Commercial velocity: Reviewing thousands of client and vendor due diligence questionnaires to ensure compliance accelerates the sales cycle rather than stopping it.

Total transparency: From ROPA reviews to full-scale company audits, we provide the documentation that turns "compliance" into a tangible business asset.

The Aerx mission