Naq
Naq is a UK/Netherlands-based compliance automation SaaS platform that helps SMEs, digital-health companies, and NHS suppliers manage 20+ regulatory frameworks (ISO 27001, NHS DSPT/DTAC, DCB 0129, GDPR, Cyber Essentials) from a single dashboard, serving 150+ customers across UK and EU regulated markets.
- Company typePrivate
- Founded2019
- HeadquartersDen Haag, Netherlands
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Naq does
Naq is a compliance automation platform founded in 2019 and headquartered across the Netherlands (Den Haag/Zoetermeer/Amsterdam) and the United Kingdom (London), operating through two legal entities — Naq Cyber B.V. and Naq Cyber UK Ltd. The company provides a unified SaaS dashboard that automates compliance with 20+ regulatory frameworks simultaneously, including ISO 27001, ISO 9001, NHS DSPT v8, NHS DTAC v2, DCB 0129, GDPR, Cyber Essentials, and MOD SBD, with cross-framework control mapping that allows a single piece of evidence to satisfy multiple standards. The product is structured as a core platform plus six modules (Automated Compliance, Risk Management, Clinical Risk Management, Training, Multi-framework Management, and Comprehensive Support), augmented by in-house Clinical Safety Officers, virtual Data Protection Officers, and IASME Certification Body status that enables Cyber Essentials certification issuance in-house.
Naq targets SMEs, digital-health startups, NHS suppliers, defence suppliers, and regulated enterprises in the UK and EU that need to win procurement deals requiring multiple compliance certifications. The company has published 150+ customer relationships as of September 2025, with named customers concentrated in digital health (RareCan, General Practice.AI, Oxford Dynamics, Clera, Incision, Vormats, Carna Health) alongside defence (Astor Defence) and professional services (Integro Accounting, TMA World). Customer-reported outcomes include £250k savings on a single case, over 200 hours saved on ISO 27001, 70% faster ISO 9001 compliance, and 50%+ cost reduction versus consultant-led alternatives.
The business model is primarily subscription-based SaaS with 12-month minimum contracts and monthly, quarterly, or annual billing, supplemented by professional services for bespoke policies, policy reviews, and due diligence questionnaire support priced at hourly or fixed rates. Distribution is direct enterprise sales via a 15-minute demo funnel. Naq has raised approximately €10.5M ($11.3M) across three rounds — $1.5M seed (March 2023), €3M seed (January 2024), and €6M Series A led by Automate Health (September 2025) — and holds strategic partnerships with the NHS Innovation Accelerator (DTAC automation for cohort members) and Hiscox Benelux (cyber-insurance bundling). CEO and co-founder Nadia Kadhim was named to Forbes 30 Under 30 in 2023.
Naq firmographics
Firmographics- Name
- Naq
- Legal name
- Naq Cyber B.V.
- Website
- https://naqcyber.com
- Company type
- Private
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Naq is a UK/Netherlands-based compliance automation SaaS platform that helps SMEs, digital-health companies, and NHS suppliers manage 20+ regulatory frameworks (ISO 27001, NHS DSPT/DTAC, DCB 0129, GDPR, Cyber Essentials) from a single dashboard, serving 150+ customers across UK and EU regulated markets.
- Ownership category
- akta.pro rank
Naq industry classification
Industry- Product category
- Compliance Management Software
- NAICS
- Other Computer Related Services (541519), Custom Computer Programming Services (541511)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC) (HDABAHAI)
- akta.pro secondary industries
- Data Privacy, Consent & Compliance Management (HDAEADAG), Consent, Preference & Data Rights Management (incl. HIPAA/GDPR support) (HLACAIAG), Consent, Authorization & Data Sharing Governance (opt-in/opt-out, DS4P) (HLACABAG)
Keywords
Where Naq is headquartered
LocationHeadquarters
- HQ city
- Den Haag
- HQ country
- Netherlands
- HQ region
- Europe
Offices3 records
Markets served
Naq business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations
Revenue model
- Subscription-based SaaS Platform: The service is available only with a paid subscription. The client is billed in advance on a recurring and periodic basis (monthly, quarterly or annually), depending on the subscription plan selected. Each contract has a minimum term of 12 months. The subscription provides access to the compliance platform and support services.
- Professional Services: Additional service provision beyond the normal subscription, including bespoke policies, review of existing policies, and due diligence questionnaire support. These are priced based on hours spent at the service provider's usual hourly rates or as a fixed price.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Subscription-based compliance platform with expert support |
Distribution channels1 record
Marketing channels8 records
Naq product offering
Product offeringCore offering
Naq sells a subscription-based compliance automation platform that helps organisations, especially SMEs and digital health companies, manage compliance with 20+ regulatory frameworks (ISO 27001, ISO 9001, DCB 0129, NHS DSPT v8, NHS DTAC v2, GDPR, Cyber Essentials, MOD SBD, JOSCAR) from a single dashboard. Controls and evidence are mapped across standards so that one piece of evidence satisfies several frameworks simultaneously. The platform also bundles in-house expert support (Clinical Safety Officers, virtual DPOs) and Cyber Essentials certification under Naq's IASME Certification Body status.
Product overview
Naq is a unified compliance automation platform built as a platform-plus-modules architecture. The core Naq Platform serves as the central dashboard that connects all modules, enabling organisations to automate, manage and scale their entire compliance programme from a single interface. The product portfolio consists of the core Naq Platform supplemented by six functional modules: Automated Compliance (automating 20+ frameworks), Risk Management (automated risk generation and tracking), Clinical Risk Management (DCB 0129 clinical safety management with in-house Clinical Safety Officers), Training (security-first training content), Multi-framework Management (streamlining overlapping requirements across standards), and Comprehensive Support (expert guidance including virtual DPOs and named expert sign-off). Evidence captured in one module maps across multiple frameworks simultaneously, so a single action satisfies several standards at once.
Differentiator
Problem solved
Functional benefit
Products and services
- Naq Platform Central compliance management dashboard that automates, manages and scales an organisation's entire compliance programme from a single interface, with controls mapped across 20+ standards so evidence captured once satisfies several frameworks simultaneously. Targeted at SMEs, NHS suppliers, digital health, defence suppliers, and regulated enterprises in the UK and EU.
- Professional Services (Bespoke Compliance Support) Additional service provision beyond the standard subscription, including bespoke policies, review of existing policies, and due diligence questionnaire support. Priced based on hours spent at the service provider's usual hourly rates or as a fixed price.
Quantifiable outcome
- Digital health company saves £250k with Naq
- +4 more outcomes
Companies that use Naq
Customer profileNamed customers33 records
Segments6 records
Ideal customer profiles3 records
Naq technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature6 records
Naq partnerships and signals
Strategic signalPartnerships
Two partnerships are on record, tiered core.
- NHS Innovation AcceleratorcoreNaq partnered with NHS Innovation Accelerator to automate NHS DTAC readiness evaluation for the 2024 cohort of 12 innovators. Naq's platform enables innovators to achieve DTAC compliance efficiently, demonstrating the platform's value in the NHS ecosystem.
- Hiscox BeneluxcoreNaq partnered with Hiscox Benelux to provide comprehensive cyber protection and compliance services. This partnership combines Naq's compliance automation platform with Hiscox's cyber insurance offerings, creating a combined compliance and insurance solution for customers.
Scale indicators11 records
Recent moves6 records
Expansion highlights6 records
Naq competitors and assessment
Company assessmentDirect peers
- Vanta: Vanta is the leading automated compliance/GRC platform helping businesses achieve and maintain SOC 2, ISO 27001, HIPAA, GDPR, and other certifications. It is a direct competitor in the multi-framework compliance automation category, though with broader horizontal coverage rather than Naq's NHS-specific depth.
- Drata: Drata offers automated continuous compliance for SOC 2, ISO 27001, HIPAA, GDPR, and other frameworks via a single dashboard with evidence collection and control mapping. Direct competitor on the 'evidence once, satisfy many' value proposition Naq also sells, primarily serving US-headquartered SaaS companies.
- Secureframe: Secureframe automates compliance for SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR and more, combining software with managed services. Direct competitor to Naq in the SME compliance automation space, with a comparable product-led plus expert-services bundle.
- Sprinto: Sprinto is a compliance automation platform focused on fast-growing SaaS and tech companies needing SOC 2, ISO 27001, GDPR, HIPAA and similar certifications. Closely comparable on automation-first compliance for SMEs, with stronger US mid-market presence than Naq.
- Thoropass (formerly Laika): Thoropass is a compliance platform combining automation software with in-house audit expertise for SOC 2, ISO 27001, HITRUST, HIPAA, PCI and GDPR. Closely comparable to Naq because of the bundled expert + software model for regulated SMEs.
- Hyperproof: Hyperproof is a compliance operations platform that centralizes evidence collection, control mapping, and audit management across frameworks like SOC 2, ISO 27001, FedRAMP, and HIPAA. Comparable to Naq on multi-framework control mapping for mid-market and enterprise compliance teams.
Broad incumbents
- Tugboat Logic (OneTrust): Tugboat Logic was acquired by OneTrust and now operates as part of OneTrust's broader GRC/privacy platform. Comparable to Naq on automated SOC 2 and ISO 27001 workflows, but as part of OneTrust's much larger privacy and compliance suite serving enterprises globally.
- AuditBoard: AuditBoard is an enterprise-grade audit, risk, and compliance management platform serving large organizations with SOX, SOC, ISO, and operational risk workflows. A broader incumbent in the same GRC category Naq operates in, but with significantly larger customer scale and US enterprise focus.
Regional players
- SureCloud: SureCloud is a UK-based GRC platform offering compliance, risk management, and cybersecurity services to mid-market and enterprise clients. A strong UK regional comparable to Naq, especially for organizations needing ISO 27001 and Cyber Essentials support.
- IT Governance: IT Governance is a UK-based provider of compliance products, tools, books, and consultancy covering ISO 27001, Cyber Essentials, GDPR, and PCI DSS. Comparable to Naq as a UK-headquartered compliance specialist, though more consultancy-led than pure SaaS.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
Naq social profiles
Digital presenceNaq compliance and trust
Trust signalCompliance8 records
Naq financial estimates
Financial estimateRevenue estimate
Valuation estimate
Naq leadership team
Management profileNumber of profiles
Profiles2 records
Naq funding detail
Funding detailFunding overview
Funding rounds5 records
Investors4 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Naq M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Naq
What does Naq do?
Naq sells a subscription-based compliance automation platform that helps organisations, especially SMEs and digital health companies, manage compliance with 20+ regulatory frameworks (ISO 27001, ISO 9001, DCB 0129, NHS DSPT v8, NHS DTAC v2, GDPR, Cyber Essentials, MOD SBD, JOSCAR) from a single dashboard. Controls and evidence are mapped across standards so that one piece of evidence satisfies several frameworks simultaneously. The platform also bundles in-house expert support (Clinical Safety Officers, virtual DPOs) and Cyber Essentials certification under Naq's IASME Certification Body status.
Is Naq a public or private company?
Naq is a private company. It is classified as venture growth investor backed and is currently operating.
When was Naq founded?
Naq was founded in 2019. It employs 11 to 50 people.
Where is Naq based?
Naq is headquartered in Den Haag, Netherlands, in the Europe region.
How does Naq make money?
Two revenue lines are on record. Subscription-based SaaS Platform is the primary driver. The others are professional Services.
Who are Naq's main competitors?
Direct peers on record are Vanta, Drata, Secureframe, Sprinto, Thoropass (formerly Laika) and Hyperproof. Broad incumbents are Tugboat Logic (OneTrust) and AuditBoard. Regional players are SureCloud and IT Governance.
Does Naq have an API?
No public API is recorded for Naq.
What industry is Naq in?
Naq's product category is Compliance Management Software. Its primary akta.pro industry code is HDABAHAI, Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC), with a secondary code of HDAEADAG, Data Privacy, Consent & Compliance Management. Its NAICS code is 541519 and its SIC code is 7372.