Frequently asked questions

Mainly small and mid-sized companies that are building a management system according to ISO 27001, ISO 27701 or ISO 22301, need to meet NIS2 obligations or require a TISAX label. We are particularly strong in industry, the automotive supply chain and OT environments. We also support larger corporate groups.

We audit as auditors for certification bodies and provide TISAX assessors, but never for companies we have advised ourselves. This keeps your certificate and TISAX label independent and robust.

If you have your own experienced CISO or DPO, the Platform package is usually enough. If certification is coming up or you lack internal resources, we recommend Platform + Experts. Enterprise is designed for multiple entities, integrated management systems or OT environments.

The KI-MIG sets out who supervises the AI Act in Germany. That is mainly the Federal Network Agency, and BaFin for financial service providers. This means there is now an authority that pursues violations and imposes fines. Already today, employees who use AI need demonstrable AI literacy, and prohibited practices are banned. We create the AI inventory with you, classify every system and document the evidence in the platform.

Yes. We support ISO 27001 and TISAX with consultants, auditors and assessors at sites across Europe and in the US, and for ISO 27001 also as a multi-site certification.

Yes. Our whistleblowing system meets the requirements of the German Whistleblower Protection Act (HinSchG). It is mandatory for companies with 50 or more employees and is integrated into the platform.

Yes. We transfer your existing assets, risks, measures and documents into the platform and check them against the requirements of the standard as part of a gap analysis.

Largely, but not completely. NIS2 additionally requires, for example, reporting processes, management board obligations and registration. The platform shows the remaining gaps for each requirement.

Yes. Our external DPO works on a standards basis according to ISO 27701 and the Standard Data Protection Model (SDM), with a direct law firm partnership for legal questions. The data protection software is included.