Efficient. Tailored.
Successfully certified.
Companies from a wide range of sectors have achieved their compliance certification with iso-easy — ISO 27001, TISAX, ISO 42001 or regulatory implementation (NIS-2, DORA, GDPR, HinSchG, EU AI Act). Structured, pragmatic and without unnecessary complexity. Two further companies are currently on their way to the certificate with us.
Employer Brandcode / think why GmbH
A specialist employer branding agency that guides companies across the DACH region in developing their employer brand. Core competencies: EVP design, HR brand strategy and recruiting positioning.
- Initial analysis & risk assessment of the information security position
- Building the ISMS including policies & processes to ISO 27001
- Implementing technical & organisational controls
- Internal audits, training & audit preparation
- Ongoing work as external security officer
„As an agency we did not want a rigid set of rules slowing us down. iso-easy built information security in so that it fits our processes. Implementation went faster than planned — pragmatic, lean and ready for the audit.“
NETFORMIC GmbH
An experienced digital agency with more than 20 years of expertise in e-commerce, PIM systems and digital transformation. Owner-managed, based in Stuttgart. Builds scalable platforms for B2B, B2C and D2C.
- A thorough status & risk analysis of the existing IT security
- Building a conformant ISMS including complete documentation
- Implementing technical & organisational security measures
- Internal audit preparation, training & awareness
- Support through the external certification audit, ongoing security officer
„We had a healthy respect for the ISO 27001 project — above all for the effort and the time it would take. In the end we were certified after seven months. That was a pleasant surprise. iso-easy led us through the process in a structured and pragmatic way. The audit preparation in particular gave us confidence. Today we have not only the certificate but clear processes that work.“
Animus Intelligence AG
A software company in the financial sector developing proprietary AI-based systems for fully automated crypto trading. Focused on deep-learning trading engines for institutional partners.
- Current-state analysis plus threat & vulnerability analysis of the IT infrastructure
- Building the ISMS documentation: policies, manual, contingency plans
- Defining technical & organisational security measures
- Staff awareness & internal audits in preparation
- Audit support & ongoing work as security officer
„We had already done some groundwork, but we lacked a clear line. iso-easy created structure and developed our existing processes cleanly into ISO conformity. We went into the audit thoroughly prepared — no rush and no surprises.“
Crest Digital GmbH
A partnership-minded consultancy for digital transformation, business model development and technological modernisation. Sector-specific competence in cyber security and compliance.
- Initial current-state analysis & risk identification, prioritising critical areas
- Building a conformant ISMS including policies & role definitions
- Putting technical & organisational security measures in place
- Internal audits, training & a check on audit readiness
- Support through the external audit & long-term work as security officer
„Our worry was that the project would tie up our teams. In fact implementation ran considerably more efficiently than expected. iso-easy's clear structure let us prioritise topics and work through them step by step. The audit went smoothly — we were as well prepared as we could have been.“
Veoma Service & Consulting
An HR consultancy focused on recruiting strategy, HR process optimisation and people marketing for agencies and IT companies. Direct approach via LinkedIn and XING, plus building employer brands.
- Status & risk analysis of the information security position
- Developing policies, processes & security documentation
- Putting technical & organisational security measures in place
- Staff training & internal audits ahead of certification
- Successful external certification & ongoing security officer support
„We did not want a bureaucracy project, we wanted a system that works. iso-easy delivered exactly that: clear structure without unnecessary complexity. From the start to certification everything was predictable and transparent. That clarity is what won us over.“
VERDURE
A Stuttgart digital agency focused on CMS websites, UX and web design, SEO, Google Ads, content and B2B lead generation. Part of the DigitalNativeAlliance group since 2025. Our part: the complete ISO 27001 certification and ongoing security officer support.
- Gap analysis & scope definition for an agency context (client data, project assets)
- Building the ISMS with a focus on cloud services, the SaaS stack & data processing on behalf of clients
- Policies, processes & awareness training for the agency team
- Internal audit & support through to external certification
- Ongoing external security officer — continuous ISMS operation after certification
„As a digital agency we work with sensitive client data and a complex SaaS stack. iso-easy took us through the ISO 27001 certification pragmatically — without our day-to-day business suffering for it. The ongoing security officer support has run quietly in the background ever since.“
Red Rabbit GmbH
A Hamburg innovation consultancy: from trend and market research through strategy and product development to small-batch production — with the aim of cutting development cycles from years to months. A founding member of Food Harbour Hamburg; the AI platform nextFood.ai also came out of the same house. Our part: building the ISMS for a consulting business that handles clients' unpublished product and brand development.
- Scope definition for consulting engagements involving other companies' development data
- Protecting unpublished product and brand development
- Policies & processes for project work, service providers and small-batch production
- Technical & organisational measures for cloud and collaboration tools
- Awareness training and an internal audit in preparation for certification
NF1 SmartTech GmbH
The Hamburg SaaS company behind nextFood.ai. The platform takes product ideas in the food and drink industry from the first sketch to market readiness — with trend analysis, synthetic personas and automated market validation. The team works fully remotely and the platform runs on European servers. Our part: building the ISMS for the development, operation and support of the platform, with the certification audit in October 2026.
- Scope definition for a pure SaaS business — platform, development and support
- Risk analysis for AI-assisted processing and client data in the cloud
- ISMS documentation: policies, procedures and contingency planning
- Technical & organisational measures for a fully remote team
- Internal audit and preparation for the external certification audit
Compliance for every sector
Our clients come from a wide range of sectors — what they share is the goal: information security that actually works.
Digital agencies & IT
E-commerce, PIM, CX platforms, software development
Fintech & AI
AI product platforms, trading systems, crypto, financial service providers
Advisory & consulting
HR consulting, innovation consulting, strategy consulting
Marketing & employer branding
Employer brands, people marketing, digital marketing
Mid-market & SMEs
Manufacturing, food, services, e-commerce
International (D-A-CH)
Germany, Austria, Switzerland — GDPR-compliant
Become our next success story.
Whether you are an agency, an IT company or a mid-sized business — we guide you to your certification (ISO 27001, TISAX, ISO 42001) and through the implementation of regulatory requirements, in a structured and pragmatic way.
