Maximum

Kertos automates your compliance standards, such as ISO 27001, GDPR, SOC 2, or the EU AI Act – from the initial analysis to the audit and as a sustainable solution far beyond.

Leading companies trust us with their Nis2 Compliance Journey
AskUI
pliant
Stallkamp
Grohe
A&O
Blacklane
Lixil
Personio
FINN
Any Bill
Augmented Industries
Aware
Contract Hero
Deeploi
Enpal
Flink
Kyon Energy
Muffintech
Neotaste
Reusch Law
Wellster
Gaia

Rethinking Compliance:

Our platform makes information security easier, reduces complexity and accompanies you through to successful certification with expert support.

€10M

satisfied customers

2%

audit success

24h

industries covered

≈ 80%

faster than usual

NIS2 Compliant in weeks, not months

Traditional consulting takes months and costs hundreds of consulting hours. Here's how Kertos gets you there in weeks with 80% less manual work.

1

Assessment & Setup

2

Policies & Documentation

3

Technical Controls

4

Training & Awareness

5

Incident Readiness

6

Validation & Registration

NIS2 IN GERMANY

The NIS2UmsuCG Is Now in Effect

Germany transposed NIS2 through the NIS-2-Umsetzungs- und Cybersicherheitsstärkungsgesetz. If you operate in Germany, these are the specifics that matter.

BSI Registration Is Mandatory

All affected entities must register with the Bundesamt für Sicherheit in der Informationstechnik (BSI).

  • Designate a point of contact
  • Provide IP ranges and domain names
  • Update within 2 weeks of any changes
  • Failure to register = immediate non-compliance

Kertos generates your registration documentation automatically.

German Classification Terms

NIS2 uses EU terminology. German law uses different labels.

  • Essential Entities vs. Besonders wichtige Einrichtungen
  • Important Entities vs. Wichtige Einrichtungen
  • Critical Infrastructure vs. KRITIS-Betreiber

Know which category applies to you — it determines your obligations and supervision level.

KRITIS + NIS2 = Both Apply

Classified as KRITIS operator? NIS2 adds requirements — it doesn't replace obligations.

  • 24-hour incident reporting (vs. 72h for KRITIS)
  • Personal liability for management
  • Expanded supply chain requirements
  • BSI registration under new categories

Kertos manages both frameworks from one platform.

Why German Companies Choose a German Platform

US platforms built for SOC 2 and retrofitted for Europe don't understand the nuance. Kertos was built here, for here.

  • 🇩🇪 German-built: Developed in Germany, by a German team, for German requirements
  • 🔒 German data residency: Your compliance data stays in Germany — no transatlantic transfers
  • 🗣️ German-language support: Native support as standard, not an afterthought
  • 📋 BSI expertise: We understand German regulatory context firsthand
  • SOC 2 Type II certified: We practice what we preach

Kertos manages both frameworks from one platform.

TESTIMONIALS

What our

Compliance that convinces: Whether B2C, B2B, startup, scale-up or SME, Kertos is the right solution for companies with growing compliance requirements.

Jonas Menesklou
Jonas Menesklou
CEO & Co-Founder

"We especially appreciate the Trust Center"

After having a disappointing experience with a US-based provider, we wanted a platform that truly supports us efficiently and saves time. With Kertos, we achieved ISO 27001 certification in just 2.5 months—without external consultants and without blocking our team. Everything was clearly structured, well managed, and technically well thought out. The decisive factor for us was also the integrated Trust Center: it allows us to immediately demonstrate to our customers how seriously we take security.

Florian Fesch
Florian Fesch
Co-Founder, Tech & Product

“Sustainably optimizing internal processes”

Kertos enabled us to significantly accelerate the complex ISO 27001 certification process and sustainably improve our internal workflows. The intuitive platform, combined with extensive automation, provided substantial relief—truly a game-changer for growing companies with high security requirements.

Janina Möllmann
Janina Möllmann
CEO @GAIA Technologies

“ISO 27001 certification within a few weeks”

With Kertos, we were able to achieve our ISO27001 certification within a few weeks. It was immediately obvious that this was a powerful compliance automation solution developed in and for the European market!

Stefan Hessel
Stefan Hessel
Salary Partner & Head of Digital Business, reuschlaw

“Reliable partner for all compliance issues”

For us, Kertos is the reliable partner for all compliance issues. Whether it's ISO27001 certification or data protection, we really appreciate Kertos' expertise and support.

Matthias Knoche
Matthias Knoche
COO, McMakler

“Unique solution for European companies”

Kertos offers a unique compliance automation solution for European companies, which, thanks to the combination of expertise and automation, stands out significantly from the mass processing of large compliance companies on other continents.

Julian Lübke
Julian Lübke
Co-Founder & CEO, deeploi

“Real compliance powerhouse”

Kertos quickly and precisely guided us through the GDPR and ISO27001 certification compliance jungle. The Kertos platform was easy to implement and is a real compliance powerhouse due to the high level of automation.

Adrian Kapsalis
Adrian Kapsalis
CEO of Kyon Energy

“Adapts to our changing needs”

Kertos adapts to our changing needs so we can focus on growing our business.

Mirco Roth
Mirco Roth
Co-Founder & CTO, Augmented Industries

“Absolutely impressed us”

From start to ISO 27001 in 2.5 months? — With Kertos, this goal was possible. We were absolutely impressed by the combination of technical innovation, comprehensive expert knowledge and flexible adaptation to our business needs.

Ferdinand Schmidt-Thomé
Ferdinand Schmidt-Thomé
Co-Founder, Aware

“Flexible and scalable solution for GDPR compliance”

As a health-tech company that deals with sensitive customer data, we have found a flexible and scalable solution to comply with the GDPR in Kertos. It strengthens the trust of our customers, sets new standards through automation, and the support team is consistently responsive and reliable when it comes to urgent concerns — Kertos is therefore the all-in-one solution that really pays off for us.

Integrations

Over 100

Simply connect and get started: With numerous integrations, connecting your IT landscape is child's play.

RessourceS

Discover our ressources

Find useful whitepapers, videos, and practical tools to help you efficiently achieve your compliance goals.

No items found.
No items found.