Tailored Plans, Guaratneed Outcome

One size doesn't fit all! Tailored pricing for lasting and cost-effective compliance, adapted to your company's size and development stage.

Essential

Designed for in-house experts and CISOs. Manage all your compliance processes in one place, from preparation to audits.

  • Compliance automation platform
  • ISMS, AIMS
  • Continuous Customer Success support

  • For multiple frameworks (GDPR, NIS2, ISO, SOC2…)
  • Full agentic workflows, automation, and KAIA (AI Expert)
  • Trust Center
  • 100+ Integrations
  • UAM, SSO, and 2FA
  • MCP Read Access for Integrations with LLMs

Pro

The full-service package to get your compliance journey started quickly through the support of our certified experts.

  • Compliance automation platform
  • ISMS, AIMS
  • Guided Implementation project (with accredited compliance experts)
  • Ongoing Certified Expert support
  • Continuous Customer Success support

  • For multiple frameworks (GDPR, NIS2, ISO, SOC2…)
  • Full agentic workflows, automation, and KAIA (AI Expert)
  • Trust Center
  • 100+ Integrations
  • UAM, SSO, and 2FA
  • MCP Read Access for Integrations with LLMs

Premium

For larger companies with more customization to manage more complex compliance processes.

  • Compliance automation platform
  • ISMS, AIMS
  • Extended guided Implementation project (with accredited compliance experts)
  • Ongoing Certified Expert support
  • Continuous Customer Success support

  • For multiple frameworks (GDPR, NIS2, ISO, SOC2…)
  • Full agentic workflows, automation, and KAIA (AI Expert)
  • Trust Center (your own domain)
  • 100+ Integrations
  • UAM, SSO, and 2FA
  • MCP Read Access for Integrations with LLMs
  • Multi-framework Cross-Mapping
  • Automated Alerts and Reports
  • Business Continuity Management
  • Pre-Audit Assistance included
  • AI-Powered Questionnaire Automation
< Request an Offer >
Kertos — Pricing (Framework features)

Choose your framework to see the full list of features

ISO27001, ISO27701, ISO42001, SOC2, C5, TISAX...

NIS2, GDPR, EU AI Act...

Certifications/Reports
PLATFORM & TOOLING
All Frameworks
Feature/ComponentESSENTIALPROPREMIUM
GRC Platform Access
Vendor / Supplier Management
In-Platform Asset Management
Policy Management
Risk Management (Not Included in GDPR Module)
Pre-Built Control Library
Policy & Documentation Templates
Task & Evidence Management
Upload & Link Existing Policies
Audit Trail & Evidence Log
Progress Score Dashboard
Incident & Security Management Workflow
Multi-Framework Cross-MappingAdd-OnAdd-On
Multi-Entity ManagementAdd-OnAdd-OnAdd-On
Bi-Directional Task Syncronization
User Access & Role Management (UAM/URM)
Employee Data Sync (HR Software Integration )
Single Sign On (SSO)
Two-Factor Authentification (2FA)
Trust Center✓ (Kertos Domain)✓ (Kertos Domain)✓ (Your Domain)
Collaboration Spaces & Commenting
In-App Awareness Training Modules
Control Automation Through Integrations (Cloud, Git...)
Breach Management Workflow (PII)
Shadow IT Discovery
Collaboration Spaces & Commenting
Control Automation Through Integrations (Cloud, Git...)
REST API AccessAdd-OnAdd-OnAdd-On
MCP Read Access
MCP Write AccessAdd-OnAdd-OnAdd-On
Automated Slack Alerts & ReportsAdd-OnAdd-On
Custom FrameworksAdd-OnAdd-OnAdd-On
Platform SLAsLevel 3Level 3Level 2
Information Security Frameworks Only
ESSENTIALPROPREMIUM
Automated ISMS Platform
Business Continuity Management (BCM)Add-OnAdd-On
Information Security Asset Management
Information Security Training Modules
Data Protection Frameworks Only
ESSENTIALPROPREMIUM
Automated RoPA
DPIAs
Automated DSRsAdd-OnAdd-OnAdd-On
Data Privacy Training Modules
Automated TOMs
Seucrity Breach Management Workflows
AI Governance Frameworks Only
ESSENTIALPROPREMIUM
Automated AIMS Platform
AI Assets Inventory
AI Risk Assessment
AI Training Modules
KAIA - AI COMPLIANCE CO-PILOT
Feature/ComponentESSENTIALPROPREMIUM
Vendors & Systems Auto-Fill
Real-Time Insights & Recommendations
Setup & In-App Product Guidance
Pre-Audit AssistanceAdd-OnAdd-On
Real-Time Compliance Monitoring
MCP Integration
Policy Co-Pilot (Policy Generator)
Questionnaire Automation (AI)Add-OnAdd-On
Universal Contextual Search
Agentic Evidence Checker
Assisted Register / Inventory Creation
Assisted Risk Management Workflows
Assited RoPA Creation
IMPLEMENTATION PROJECT
ServiceESSENTIALPROPREMIUM
Project Kickoff
Milestone Framework & Project PlanIn PlatformReview & JudgeCo-Create
Expert Check-Ins-
Expert Q&A-✓Fair Use✓Fair Use
Pre-Audit Completeness Check-In
Internal AuditAdd-onAdd-OnAdd-on
Post-Audit Review & Mitigation Strategy--
Milestone-based Expert Check-Ins-
ONGOING CUSTOMER SUPPORT & SUCCESS
ServiceESSENTIALPROPREMIUM
Customer Support
Customer Succcess Manager
Personal Onboarding
Support Response Time - SLAHigh Priority RTHigh Priority RTMaximum Priority RT
Implementation Status Report & Check-In✓(Yearly)✓(Yearly)✓(Quarterly)
ONGOING CERTIFIED EXPERT SUPPORT
ServiceESSENTIALPROPREMIUM
Expert Collaboration-✓ Fair Use✓ Fair Use
Support Response Time - SLA-High Priority RTMaximum Priority RT
Quarterly operation & startegy check-ins-Add-On
Audit and due diligence support-Add-On
Community-Webinars and EventsAdd-OnAdd-On
Direct Communication with customer's clients-Add-OnAdd-On
Yearly Compliance Report-
PARTNER SERVICES
ServiceESSENTIALPROPREMIUM
PentestingAdd-OnAdd-OnAdd-On
Virtual CISOAdd-OnAdd-OnAdd-On
WhistleblowingAdd-OnAdd-OnAdd-On
Phishing Simulation/ Web Browsing SecurityAdd-OnAdd-OnAdd-On
Dark Web MonitoringAdd-OnAdd-OnAdd-On
Secret DetectionAdd-OnAdd-OnAdd-On
Attack Surface ManagementAdd-OnAdd-OnAdd-On
External Certification AuditAdd-OnAdd-OnAdd-On
Compliance Data Migration (Other GRC Platforms)Add-OnAdd-OnAdd-On
PLATFORM & TOOLING
All Frameworks
Feature/ComponentESSENTIALPROPREMIUM
GRC Platform Access
Vendor / Supplier Management
In-Platform Asset Management
Policy Management
Risk Management (Not Included in GDPR Module)
Pre-Built Control Library
Policy & Documentation Templates
Task & Evidence Management
Upload & Link Existing Policies
Audit Trail & Evidence Log
Progress Score Dashboard
Incident & Security Management Workflow
Multi-Framework Cross-MappingAdd-OnAdd-On
Multi-Entity ManagementAdd-OnAdd-OnAdd-On
Bi-Directional Task Syncronization
User Access & Role Management (UAM/URM)
Employee Data Sync (HR Software Integration )
Single Sign On (SSO)
Two-Factor Authentification (2FA)
Trust Center✓ (Kertos Domain)✓ (Kertos Domain)✓ (Your Domain)
Collaboration Spaces & Commenting
In-App Awareness Training Modules
Control Automation Through Integrations (Cloud, Git...)
Breach Management Workflow (PII)
Shadow IT Discovery
Collaboration Spaces & Commenting
Control Automation Through Integrations (Cloud, Git...)
REST API AccessAdd-OnAdd-OnAdd-On
MCP Read Access
MCP Write AccessAdd-OnAdd-OnAdd-On
Automated Slack Alerts & ReportsAdd-OnAdd-On
Custom FrameworksAdd-OnAdd-OnAdd-On
Platform SLAsLevel 3Level 3Level 2
Information Security Frameworks Only
ESSENTIALPROPREMIUM
Automated ISMS Platform
Business Continuity Management (BCM)Add-OnAdd-On
Information Security Asset Management
Information Security Training Modules
Data Protection Frameworks Only
ESSENTIALPROPREMIUM
Automated RoPA
DPIAs
Automated DSRsAdd-OnAdd-OnAdd-On
Data Privacy Training Modules
Automated TOMs
Seucrity Breach Management Workflows
AI Governance Frameworks Only
ESSENTIALPROPREMIUM
Automated AIMS Platform
AI Assets Inventory
AI Risk Assessment
AI Training Modules
KAIA - AI COMPLIANCE CO-PILOT
Feature/ComponentESSENTIALPROPREMIUM
Vendors & Systems Auto-Fill
Real-Time Insights & Recommendations
Setup & In-App Product Guidance
Pre-Audit AssistanceAdd-OnAdd-On
Real-Time Compliance Monitoring
MCP Integration
Policy Co-Pilot (Policy Generator)
Questionnaire Automation (AI)Add-OnAdd-On
Universal Contextual Search
Agentic Evidence Checker
Assisted Register / Inventory Creation
Assisted Risk Management Workflows
Assited RoPA Creation
IMPLEMENTATION PROJECT
Infromation Security and AI Governance Frameworks
ServiceESSENTIALPROPREMIUM
Project Kickoff
Milestone Framework & Project PlanIn PlatformReview & JudgeCo-Create
Expert Check-Ins-
Expert Q&A-✓Fair Use✓Fair Use
Pre-Audit Completeness Check-In
Internal AuditAdd-onAdd-OnAdd-on
Post-Audit Review & Mitigation Strategy--
Milestone-based Expert Check-Ins-
DPO Implementation Package
ServiceESSENTIALPROPREMIUM
Project Kickoff
Milestone Framework & Project Planin Platform
Technical implementation of GDPR with CSM
Milestone-based Expert Check-Ins-
Expert Q&A-✓ Fair Use✓ Fair Use
Expert Support Reply SLAs-High Priority RTMaximum Priority RT
DPO Report-
Post-Audit Review & Mitigation Strategy--
ONGOING CUSTOMER SUPPORT & SUCCESS
ServiceESSENTIALPROPREMIUM
Customer Support
Customer Succcess Manager
Personal Onboarding
Support Response Time - SLAHigh Priority RTHigh Priority RTMaximum Priority RT
Implementation Status Report & Check-In✓(Yearly)✓(Yearly)✓(Quarterly)
ONGOING CERTIFIED EXPERT SUPPORT
ServiceESSENTIALPROPREMIUM
Expert Collaboration-✓ Fair Use✓ Fair Use
Support Response Time - SLA-High Priority RTMaximum Priority RT
Quarterly operation & startegy check-ins-Add-On
Audit and due diligence support-Add-On
Community-Webinars and EventsAdd-OnAdd-On
Direct Communication with customer's clients-Add-OnAdd-On
Yearly Compliance Report-
DPO - ONGOING SUPPORT (GDPR)
ServiceESSENTIALPROPREMIUM
Official appointment of the DPO (Art. 37)-
Dedicated DPO-
DPO Collaboration incl. Support Requests (e.g. Breach, DSR, Authorities, DPA check...)-✓ Fair Use✓ Fair Use
SLA-High Priority RTMaximum Priority RT
Informing and advise of general obligations (Art. 39)-
Continuous compliance monitoring (Art. 39)-
Yearly Privacy Report-
Quarterly operation & startegy check-ins-Add-On
Audit and due diligence support-Add-On
Community-Webinars and EventsAdd-OnAdd-On
Direct Communication with customer's clients-Add-OnAdd-On
PARTNER SERVICES
ServiceESSENTIALPROPREMIUM
PentestingAdd-OnAdd-OnAdd-On
Virtual CISOAdd-OnAdd-OnAdd-On
WhistleblowingAdd-OnAdd-OnAdd-On
Phishing Simulation/ Web Browsing SecurityAdd-OnAdd-OnAdd-On
Dark Web MonitoringAdd-OnAdd-OnAdd-On
Secret DetectionAdd-OnAdd-OnAdd-On
Attack Surface ManagementAdd-OnAdd-OnAdd-On
External Certification AuditAdd-OnAdd-OnAdd-On
Compliance Data Migration (Other GRC Platforms)Add-OnAdd-OnAdd-On
TESTIMONIALS

What Our Customers Say

Compliance you can trust: Whether B2C, B2B, startup, or scaleup, Kertos is the ideal solution for companies aiming for rapid growth.

Thomas Gan
Thomas Gan
Co-Founder, MuffinTech

“Fast, straightforward, and seamlessly automated!”

It's incredible how effortlessly the Kertos team guided us through the complex ISO 27001 process. Fast, straightforward, and seamlessly automated! Compliance is no longer on our minds because Kertos takes care of everything.

Janina Möllmann
Janina Möllmann
CEO @GAIA Technologies

“ISO 27001 certification within a few weeks”

With Kertos, we were able to achieve our ISO27001 certification within a few weeks. It was immediately obvious that this was a powerful compliance automation solution developed in and for the European market!

Matthias Knoche
Matthias Knoche
COO, McMakler

“Unique solution for European companies”

Kertos offers a unique compliance automation solution for European companies, which, thanks to the combination of expertise and automation, stands out significantly from the mass processing of large compliance companies on other continents.

Julian Lübke
Julian Lübke
Co-Founder & CEO, deeploi

“Real compliance powerhouse”

Kertos quickly and precisely guided us through the GDPR and ISO27001 certification compliance jungle. The Kertos platform was easy to implement and is a real compliance powerhouse due to the high level of automation.

Ferdinand Schmidt-Thomé
Ferdinand Schmidt-Thomé
Co-Founder, Aware

“Flexible and scalable solution for GDPR compliance”

As a health-tech company that deals with sensitive customer data, we have found a flexible and scalable solution to comply with the GDPR in Kertos. It strengthens the trust of our customers, sets new standards through automation, and the support team is consistently responsive and reliable when it comes to urgent concerns — Kertos is therefore the all-in-one solution that really pays off for us.

FAQ

Frequently Asked Questions

Information about Kertos's Compliance Platform

How does Kertos help comply with the EU AI Act?

With Kertos, you can specifically address EU AI Act requirements, identify risks, and automate compliance documentation. Our platform helps you reliably comply with the legal framework for AI systems.

Can I manage multiple frameworks at the same time?

Yes, Kertos is specifically designed to support multi-framework compliance. You can manage standards such as ISO 27001, SOC2, and GDPR in parallel and ensure that your company is compliant at all levels.

What is Kertos and how does the platform support my compliance?

Kertos is Europe's most innovative compliance platform. We automate standards like ISO 27001, GDPR, SOC2, or TISAX®, from initial analysis to audit. Our solution enables you to design compliance processes efficiently and sustainably, while you fully concentrate on your core business. Kertos integrates all relevant data sources of your company via API interfaces, including websites, single sign-on solutions (SSO), office applications and central databases.

Which industries benefit from Kertos?

Our platform supports companies in various industries:

  • Startups: Building trust through the early implementation of security standards.
  • Scaleups: Security and compliance for growth-oriented companies.
  • SaaS: Protection of sensitive customer data and cloud compliance.
  • FinTech: Meeting high regulatory requirements.
  • HealthTech: Security and data protection for health data.
  • InsurTech: Compliance with the strictest standards for sensitive customer data.
Which frameworks does Kertos support?

With Kertos, you can manage a variety of compliance standards in one central location, including:

  • ISO 27001
  • TISAX®
  • SOC 2
  • DORA (Digital Operational Resilience Act)
  • GDPR
  • ISO 27701
  • ISO 42001
  • EU AI Act
  • NIS2

Our multi-framework support helps you make your organization holistically compliant.

How does Kertos simplify the compliance process?

Kertos automates time-consuming tasks such as data protection documentation, incident management, and the development of an ISMS. With our no-code integrations and REST API, you can seamlessly connect your systems and get a complete overview of your compliance processes in real-time.

What is Kertos AI (KAI) and how does it help me?

Kertos AI (KAI) is your intelligent compliance partner, available 24/7. KAI handles tasks such as risk assessments, policy management, and supplier evaluations, automates documentation creation, and provides answers to complex compliance questions.

Can I integrate Kertos with my existing systems?

Yes! Kertos offers simple no-code integrations with standard interfaces, as well as a REST API that seamlessly integrates with your existing systems. This allows you to connect internal and external systems, including databases, SaaS tools, and third-party services, for maximum transparency.

Is the platform suitable for my company?

Kertos is flexible and scalable, enabling companies of any size – from startups to established market leaders – to benefit from the automation and simplification of compliance processes.

Do you have any more questions?

Our team is happy to assist you with any questions you may have about our platform, various frameworks, and compliance.

Inquire now

📅 Schedule Your 5min Compliance Check

Please enter your business email to continue. We require a company email address to ensure we can best serve your organization.

📞 5min Compliance Check