Downloads & Forms

Data protection & monitoring templates

If you monitor staff devices, or ask us to do it for you, UK data protection law requires certain paperwork to be in place first. These templates give you a solid starting point, free to download and adapt.

Employee Monitoring Policy & Privacy Notice

For employers to issue to their staff

A ready-to-complete policy explaining what is monitored on company devices, what is deliberately not monitored, the lawful basis, retention, and staff rights, with an acknowledgement section for employees to sign.

DOCX · 12 KB Download

Data Processing Agreement (UK GDPR Art. 28)

Between your business and Alpha IT Solutions

The written agreement required by law whenever we process personal data on your behalf. Sets out responsibilities, security measures, sub-processors, breach notification and data return or deletion.

DOCX · 12 KB Download

Data Protection Impact Assessment (DPIA)

For employers, before monitoring begins

A DPIA following the ICO’s recommended seven-step format, pre-filled with the risks and mitigations typical of workplace activity monitoring. Complete it and keep it on file.

DOCX · 12 KB Download

Security audit forms

The paperwork we use before touching anything. We publish it so you can read exactly what you would be agreeing to, and what we are promising not to do, before you speak to anyone.

Free scan: authorisation and terms

One form, one signature — for the free perimeter check

Confirms you own the systems you want checked, sets out precisely what the scan does and does not do, and authorises the access for Computer Misuse Act purposes. Part B is optional and only applies if you want a Windows machine checked from the inside.

PDF · fillable Download

Security audit engagement letter

The commercial agreement for a paid audit

What we do, what you get, what it costs, and what happens if either of us walks away. Includes the limits of what an audit can tell you, and a plain statement that we are not a certification body.

PDF · fillable Download

Authority to test and scope schedule

Signed before any work begins — no exceptions

Names every computer in scope, everything deliberately excluded, and the dates we may work. This is the document that makes the testing lawful rather than unauthorised access, and we do not start without it.

PDF · fillable Download

Audit data processing agreement (Annex D)

For the personal data an audit inevitably sees

Required under UK GDPR Article 28. Audit findings contain usernames, machine names and administrator group membership, so this sets out what we hold, where it is held, how long we keep it, and how to have it deleted. Separate from the general template above, which is for day-to-day support work.

PDF · fillable Download

These are our own engagement documents, not templates for you to reuse. All four open as fillable PDFs and can be signed electronically. If your own contract or NDA needs to sit alongside them, send it over and we will sign that too.

Please read before using these templates

These documents are provided free of charge as general templates. They are not legal advice and no solicitor–client relationship is created by downloading them.

• Every field in [SQUARE BRACKETS] must be completed for your organisation.
• Have them reviewed by a solicitor or your Data Protection Officer before use.
• Monitoring staff without telling them is unlawful. Issue the policy before any monitoring begins.
• Alpha IT Solutions accepts no liability for how these templates are used or adapted.

Not sure which you need?

We help businesses across Dagenham, East London and Essex get their IT and data protection paperwork straight. Tell us what you’re trying to do and we’ll point you to the right document.

Get in touch