We run compliance.
You run the business.

Data breaches, DPIAs, DPA reviews, records of processing, privacy policies. Appointed externally or handled in-house, with the 72-hour breach clock always running.

Policy governance, whistleblower intake, internal control system, quarterly board report. Appointed, documented, defensible under § 130 OWiG.

ISO 27001:2022 ISMS ownership, NIS-2 incident reporting, KRITIS obligations. 93 controls tracked, 24-hour early-warning and 72-hour incident-notification handled, TISAX and BSI C5 delivered on request.

Hazard assessments, site inspections, mandatory trainings, accident investigations. Appointed in writing per § 5 ASiG, documented per DGUV V2, filed in one place.

Fire-protection orders, evacuation drills, fire-department plans per DIN 14095. DGUV-I-205-023-compliant documentation, appointed in writing, audit-ready at inspection.

Substance inventory per TRGS 400, risk assessment per § 6 GefStoffV, substitution checks. A live register that survives any Gewerbeaufsicht visit.

Permit management, emission reporting, waste tracking, hazardous-substance storage. Full environmental file cabinet across BImSchG, WHG, KrWG and ISO 14001.

Risk analysis, KYC/KYB, suspicious-activity reporting to FIU. § 7 GwG appointment documented, reporting line clean, BaFin-inspection ready.

Process audits, management review, CAPA, customer-complaint loop. DIN EN ISO 9001:2015 certification and recertification handled without surprises.

Human-rights risk analysis, preventive measures, grievance mechanism, annual BAFA report. Supply-chain due diligence on rails for any company above the LkSG thresholds.

AGG complaints office per § 13 AGG: confidential intake, documentation, case handling. BGleiG workflows for federal bodies included.

Preventive checkups, workplace health assessments, return-to-work coordination, vaccination programmes. Appointed per § 3 ASiG, hours scaled to DGUV V2 headcount rules.

ADR, IMDG and IATA documentation, transport-safety checks, annual report to the operator. Appointed where transport volumes cross the § 3 GbV thresholds.

Hygiene plan per § 36 IfSG, infection-control audits, staff training, drinking-water sampling per TrinkwV. Mandatory in healthcare, gastronomy, kindergartens.

Double-materiality analysis, CSRD-compliant sustainability report, ESRS data points, GHG-Protocol inventory. Responsible for the annual report management signs.

Confidential intake of whistleblower reports, case handling within the 3-month HinSchG deadline, retaliation monitoring. Independent from management reporting lines.

Emission monitoring, supervision of permit-required plants, annual report to operator management, input on notifiable plant changes. Mandatory per § 53 BImSchG.

Waste register per AbfBeauftrV, recycling-quota monitoring, annual report to management, input on notifiable waste decisions. Required per § 59 KrWG above threshold.

Water-hazard inventory per AwSV, tank and separator inspections, leakage response, annual report. Required for facilities handling water-hazardous substances above thresholds.

Business-continuity plans per ISO 22301, emergency drills twice yearly, crisis-team coordination, after-action reviews. Often bundled with ISO 27001 or occupational safety mandates.

Safety concept per 12. BImSchV, safety analysis, incident report to Regierungspräsidium within 24 h, coordination with fire brigades. Mandatory for Seveso-tier plants.

Permits per StrlSchG, dosimeter management, staff medical screening, monthly dose reporting to BfS. Required in medical, industrial radiography and research.

Coordination with the Integrationsamt, workplace-adaptation budgets, accessibility reviews, annual representation report. Required per § 181 SGB IX in most companies.

Construction-site supervision per state building codes (LBO), SiGeKo role per BaustellV, DGUV-compliant safety briefings, as-built documentation. Named on the building permit.

On-site supplier audits per ISO 9001 and IATF 16949, non-conformance logs, CAPA tracking, audit report with risk score. Scheduled against a rolling three-year cycle.