Legal, security and governance work better together.

    Altura works across legal, security, privacy, controls and regulation where those areas affect the same product, process or customer requirement.

    Altura Advisory ehf. is based in Reykjavík, Iceland, and works with technology companies in Iceland and internationally.

    The aim is to keep decisions, responsibilities and documentation consistent.

    About the founder

    Tinna Róbertsdóttir

    Founder · Legal & Regulatory Advisor

    Tinna is an Icelandic lawyer and the founder of Altura. She holds a BA and a Master’s degree in Law from Reykjavík University, complemented by further studies in artificial intelligence at Oxford and AI ethics at the London School of Economics.

    Her career spans Iceland and the UK, with senior legal and compliance roles and leadership responsibilities in privacy, information security and corporate governance. Her expertise covers SaaS and technology contracts, fintech regulation, GDPR and data protection, AI governance, and security compliance, including ISO 27001 and SOC 2.

    Tinna founded Altura to bring this experience to businesses seeking clear, practical advice. Having worked closely with founders, product teams and senior management, she understands how legal and regulatory requirements affect commercial decisions, technology and day-to-day operations.

    Connect with Tinna on LinkedIn

    The approach

    Start with the real issue

    Not every gap requires a large project. Altura identifies what is important now, what can wait and what does not need to be done.

    Make the work usable

    Altura produces contracts, controls and policies that reflect how the company actually operates.

    Keep responsibilities clear

    Material processes should have defined ownership, review and escalation.

    Understand the product

    Useful advice depends on understanding what the product does, how data moves and how customers use the output.

    Reduce unnecessary work

    The same question should not be analysed several times by different advisers unless separate specialist input is genuinely required.