Kertos

Kertos provides a software-as-a-service platform designed to automate and manage corporate data privacy and compliance operations. The company primarily serves fast-growing scale-ups and mid-sized businesses, including those in the B2C, SaaS, health tech, and fintech sectors, helping them navigate complex regulatory landscapes. The business model is subscription-based, offering a no-code solution that reduces the manual effort and costs associated with compliance.

Founded in Munich, Germany, in 2021, Kertos was established by Dr. Kilian Schmidt, Johannes Hussak, and Alexander Prams. The founding was driven by Schmidt's firsthand experience with the operational inefficiencies in legal and data protection departments at companies like TIER Mobility and Home24. Hussak and Prams, who previously ran a software agency focused on data-driven innovation, brought the technical and product expertise to build a solution for these challenges. The company secured a seed funding round of €4 million in May 2023, led by Redstone/VR Ventures, to expand its product offerings and introduce AI-driven automation.

The Kertos platform connects to a company's entire IT infrastructure via API integrations to automate compliance workflows. Its core functionalities include Data & Process Discovery, automated handling of Data Subject Requests (DSRs), and Access & Asset Management. The platform supports businesses in preparing for certifications such as ISO 27001, SOC 2, and TISAX®, and ensuring compliance with regulations like GDPR, DORA, and NIS2. It automates the generation of essential documentation, including Records of Processing Activities (RoPA), and provides tools for risk management and employee training. A key feature is its ability to give real-time compliance insights and help discover "shadow IT" across an organization. Keywords: compliance automation, data privacy management, GDPR compliance, ISO 27001 certification, information security management system, ISMS, legal tech, data subject requests, DSAR automation, no-code platform, data governance, risk management, SOC 2, TISAX, regulatory technology, regtech, data protection, privacy operations, vendor management, access management