GRC platform for security and compliance consultancies
A security consultancy runs NIS2, ISO 27001 and BSI IT-Grundschutz for many clients at once – and asks the same controls again for every framework. We built a platform of our own for this: one workspace that the consultancy and its client share, in the consultancy's own brand, where one answer counts for several frameworks.
Read the case study
Global security situation picture for a consultancy
Conflicts, natural hazards, protests, and disease outbreaks: the information is scattered across travel advisories, specialist services, and the news. For a consultancy, we turned it into a situation picture on a 3D globe — built from sources whose terms of use have been checked, and linked to official travel advisories.
Read the case studyBCM training platform for a German resilience consultancy
A German business continuity management consultancy sold crisis exercises as on-site workshops — labor-intensive, hard to scale, with no product character. Today it operates its own training platform under its own brand.
Read the case studyBusiness impact analysis as SaaS for a BCM consultancy
At the consultancy's clients, business impact analyses lived in dozens of Excel files: distributed by email, merged by hand, barely audit-ready. Today there is a dedicated multi-tenant SaaS platform for structured BIA assessments.
Read the case studyNIS-2 compliance platform for a consultancy
NIS-2 brings the German Mittelstand under a cybersecurity regime it has neither a security department nor an in-house consultant for. A consultancy worked with us to turn its scoping check, measure catalogue and self-assessment from spreadsheets into a multi-tenant platform — from the first assessment in the browser to the tool for implementation.
Read the case studyJust-in-sequence platform for a logistics and IT consultancy
A logistics and IT consultancy used to roll out its just-in-sequence methodology one project at a time at its clients — by hand, with paper lists and mental takt math on the line. Together we turned it into a product: first deployed at an automotive supplier, designed as a template for further plants.
Read the case studyLkSG due-diligence software for a compliance consultancy
A compliance consultancy met its clients' supply-chain due-diligence obligations under the LkSG with Excel, Word, and email — sound on substance, but unscalable and barely audit-proof. Today it runs on its own guided LkSG software under its own brand.
Read the case study
Data-protection management tool: ROPA, DPA tracking and guided DPIA
How a data-protection consultancy could turn its methodological know-how into software of its own — from the record of processing activities through DPA tracking to a guided data-protection impact assessment.
Read the case study
ICT risk and register-of-information software
How a consultancy in the DORA space could turn its ICT-risk-management methodology into software of its own — from the ICT risk register and the classification of critical and important functions to a supervision-ready register of information.
Read the case study
Double materiality assessment software (CSRD/ESRS)
How a consultancy in the CSRD space could turn its double-materiality methodology into software of its own — from IRO long-listing and the assessment of impact and financial materiality to an audit-ready materiality matrix along the ESRS.
Read the case study
EU AI Act readiness assessment software
How a consultancy in the AI compliance space could turn its classification and assessment know-how for the EU AI Act into software of its own — from a risk-classification wizard and a per-system gap report to a measures board along the obligations of each risk class.
Read the case study
Let’s turn your service into a digital product.
In an introductory call, we look at your consulting service, the repeatable workflows behind it, and the tool that could emerge. Together, we clarify whether a scoping workshop is the right next step.
Book a call