Case Study: TGI Fridays achieves GDPR readiness and streamlined third‑party risk management with SureCloud

TGI Fridays deploys SureCloud’s GDPR and Third Party Risk Management Solutions

TGI Fridays, the UK arm of the hospitality chain with 84 restaurants and records covering over 2 million data subjects, faced cumbersome, spreadsheet-based vendor risk and GDPR processes that slowed assessments and left data flows and audits fragmented. Having already used SureCloud for Penetration Testing and Vulnerability Management, TGI Fridays turned to SureCloud’s Third Party Risk Management solution and GDPR Suite to replace manual workflows and meet GDPR obligations.

SureCloud implemented its cloud-based Third Party Risk Management software and a five-application GDPR Suite to centralize data inventory, automate supplier assessments, map data flows, run DPIAs, log incidents, and provide real-time dashboards. The result was faster, automated vendor risk assessments (including a Modern Slavery questionnaire across 100+ suppliers), consolidated auditing of previously untracked processes, clear grading of supplier risks without spreadsheet extraction, and a single source of truth for GDPR compliance and ongoing risk remediation.

TGI Fridays

Jeremy Dunderdale

Head of Business Solutions