Your compliance partner —
experienced, clear and grounded in practice.
iso-easy is not a consulting conglomerate — it is a specialist team that makes information security, data protection and regulation understandable, workable and efficient. We guide you through ISO 27001, TISAX and ISO 42001, as well as NIS-2, DORA, GDPR, HinSchG and the EU AI Act.
„Compliance — whether ISO 27001, TISAX, DORA or the EU AI Act — does not have to be a bureaucratic monster. With the right structure, certification is realistic for mid-sized companies too, without overloading internal resources.“
From practice —
for practice.
iso-easy grew out of a simple observation: most companies do not fail for want of commitment to information security, but because of how complicated the road there is. Too much theory, too little structure.
As a brand of notivia GmbH we combine more than three decades of digital experience with deep ISO 27001 expertise. We have run certification projects ourselves — and we know what actually matters.
The result: a clear process, documents proven in the field, and support that does not overwhelm your team but equips it.
What drives us
Practice, not theory
All of our templates, processes and training come out of real projects. No textbooks — just usable tools that work in practice.
A partnership of equals
No anonymous call-centre support. You have one named contact who knows your company and thinks with you — rather than deciding for you.
Efficiency & clarity
We respect your time. Our processes are built to keep the effort down and the clarity up — without skipping steps that matter.
Security as added value
Information security is not an end in itself. We help you build an ISMS that offers real protection — and at the same time strengthens your clients' trust in you.
Transparency & commitment
No hidden small print. Fixed prices, clearly defined work, honest communication. What we promise, we keep.
Continual development
The ISO standard keeps developing — so do we. Our content is updated regularly so that you always work with the current 27001:2022 version.
The company behind iso-easy
iso-easy is a brand of notivia GmbH — a German IT and strategy consultancy that has been guiding since 2003 mid-sized companies and large corporations through digital transformation.
notivia advises on value stream analysis, AI-native adoption, data modernisation and process automation — for companies such as STIHL, LBBW, BMW and ZEISS. It is exactly this hands-on knowledge from regulated and complex environments that flows into iso-easy: not a kit of templates, but real results.
- Consulting: value streams, AI adoption, data & process automation
- IT consultancy since 2003 — from SMEs to large corporations
- A GDPR-compliant approach in every project
- Specialised in SMEs and mid-sized companies
- Experience in IT, manufacturing, services & e-commerce
- You talk to us directly — no handing you on to subcontracted consultants
What we are working on right now
Through notivia GmbH we are currently supporting demanding programmes in heavily regulated environments — and the experience gained there feeds straight back into iso-easy.
AI adoption programme at a German state bank
Programme management & senior advisor for group-wide AI adoption. An on-premise-first architecture and a target operating model for AI governance in a regulated asset management environment.
A leading German bank · name withheld at the client's request
Data modernisation as the foundation for AI
Programme control for the data platform: 37 source systems inventoried & assessed, an on-premise lakehouse (PSQL vector, data mesh), data governance and alignment with DORA, MaRisk and SFDR.
A leading German bank · name withheld at the client's request
BAMAKA AG — infrastructure & value streams
Rollout of a modern IT infrastructure and a value stream analysis to identify where efficiency and automation can be gained.
BAMAKA AG, central association of the German construction trades
What sets us apart
Not a generic consulting package
We do not sell hours, we sell outcomes. Our ISMS platform and our full-service offering are cut to the specific needs of German mid-sized companies.
Fixed prices — no surprises
You know what it costs before you start. No surprises on hourly rates, no additional costs after the fact. For us transparency is not a marketing promise but the default.
Multi-standard: 11 frameworks
Every document and process is aligned to the current version of the standard — including the new Annex A structure with its 93 controls.
Two routes, one destination
Whether you want to implement it yourself — guided by the ISMS platform — or prefer to be accompanied throughout, we have the right route for any situation.
Working inside your ISMS platform
We set up your ISMS platform and work in it together with you — for structured documentation, task management and audit readiness. The subscription is booked separately from 249 € per month.
Switch whenever you like
Start on your own from 249 € per month and add support when you need it. Your ISMS stays as it is — no starting over, no risk.
How we guide your certification
Through every phase our ISMS platform is with you — with an AI copilot, 230 prepared systems and the audit guide. That keeps the internal effort to a minimum.
Analysis & kick-off
We get to know your starting point: sector, size, existing processes, risk exposure. From that comes an individual project plan with a realistic timeframe.
Building the ISMS & documentation
Together we produce every policy, process and piece of evidence required. Our documented approach cuts your effort down to the essentials.
Risk analysis & treatment planning
Systematic identification and assessment of information security risks. We help you pick the right controls and document them so the reasoning holds up.
Internal audit & preparation
Before the external audit we check your ISMS for completeness and conformity. That way you go into certification without unpleasant surprises.
External audit & certification
We are with you through the audit by accredited certification bodies such as DQS or TÜV NORD — for ISO 27001, TISAX, ISO 42001 and further standards — and are on hand for any questions.
Operation & ongoing compliance
It does not stop with the certificate: surveillance audits, recertification and new standards all need managing. On request we take that on as your external security officer — or you steer it yourself.
Ready for your compliance certification?
Choose the route that suits your company — or simply ask us. The first conversation is free and without obligation.
