Built by a governance professional, not a content farm

I'm a GRC professional with over a decade of hands-on experience across enterprise governance and financial services. My background spans ISO 27001 implementation and audit, SOC 2 Type I and Type II readiness, GDPR compliance programmes, and PCI DSS assessments — working with organisations ranging from regulated financial institutions to fast-scaling technology companies.

I built GovernStack because I kept seeing the same problem: professionals reaching for online calculators that gave wrong answers, oversimplified complex frameworks, or didn't understand the regulatory context they were supposed to model. The IR35 calculators that ignore Scottish tax bands. The GDPR fine estimators that don't account for mitigating factors. The data breach cost tools that use outdated benchmarks.

Every tool on this site reflects how these frameworks actually work in practice — including the edge cases and nuances that generic calculators miss. The tax calculations use the correct 2025/26 HMRC thresholds. The GDPR fine estimator models real ICO enforcement factors from published cases. The data breach cost calculator uses the current IBM benchmark methodology. When I write a blog post explaining how corporation tax marginal relief works, I show the actual HMRC formula — not a simplified version.

All tools run entirely in your browser. I never see your inputs, and nothing is stored. The site is funded by advertising, not by selling data or gating tools behind paywalls.