Legit
Legit is a Croatian SaaS vendor selling Data Privacy Manager, a modular privacy governance platform with AI-powered data discovery and compliance automation, serving 250+ enterprise and mid-market clients across 40+ countries.
- Company typePrivate
- Founded2017
- HeadquartersZagreb, Croatia
- Headcount1–10
- GTM typeB2B
- OfferingSoftware
What Legit does
Legit Software d.o.o. is a Croatian-headquartered (Zagreb) privacy technology company that builds and sells Data Privacy Manager (DPM), a modular SaaS platform for operationalizing enterprise privacy programs. The platform is organized into four pillars — Personal Data Discovery, Privacy Program Management, Privacy UX and Data Removal Orchestration — covering data discovery and classification, ROPA, risk and assessment automation, third-party management, incident management, consent management, data subject request handling and policy-driven data removal. Legit serves 250+ clients across more than 40 countries in verticals including telecommunications, banking, retail, healthcare, energy and the public sector, with named customers such as Telemach, A1 Hrvatska, NLB Bank, Sparkasse Bank, INA, Lukoil and Bauerfeind.
The underlying technology uses AI-driven, language- and script-agnostic personal data classification to identify sensitive data across structured and unstructured sources, and the platform is certified to ISO/IEC 27001, 27701 and 42001 standards. Legit is recognized on the RegTech100 2026 list and by Gartner, Forrester and QKS Group, and the platform is available both via direct enterprise sales and through the Microsoft Azure Marketplace, with regional channel partners SecureLink (GCC) and Nvious Solutions (South Africa / SADC).
The business operates on a quote-based annual SaaS subscription model, monetizing per-module deployments of the DPM platform through direct sales, a marketplace listing and channel partners. The company has offices in Zagreb, Osijek and the UK, employs 11–50 people, and has raised a single disclosed round of €650,000 from Vesna Deeptech VC Fund in September 2024 to support AI development and international expansion.
Legit firmographics
Firmographics- Name
- Legit
- Legal name
- Legit Software d.o.o.
- Website
- https://legit.eu
- Company type
- Private
- Founded year
- 2017
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Legit is a Croatian SaaS vendor selling Data Privacy Manager, a modular privacy governance platform with AI-powered data discovery and compliance automation, serving 250+ enterprise and mid-market clients across 40+ countries.
- Ownership category
- akta.pro rank
Legit industry classification
Industry- Product category
- Privacy Governance Software
- NAICS
- Computer Systems Design and Related Services (5415)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)
Keywords
Where Legit is headquartered
LocationHeadquarters
- HQ city
- Zagreb
- HQ country
- Croatia
- HQ region
- Europe
Offices3 records
Markets served
Legit business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- SaaS Subscription - Data Privacy Manager: Legit generates revenue primarily through SaaS subscriptions to its Data Privacy Manager platform, sold directly and through the Microsoft Azure Marketplace. The modular platform offers various pillars and modules that organizations can deploy for privacy governance automation.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise SaaS subscription with modular pricing |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels5 records
Legit product offering
Product offeringCore offering
Legit develops and sells the Data Privacy Manager (DPM), a modular SaaS platform that helps organizations run their privacy program end-to-end, including records of processing activities, data protection impact assessments, vendor risk, cookie compliance, and AI Act readiness. It also delivers SOPA and SOPA+ Data Protection Impact Assessments as a combined software-plus-services offering for smaller organizations.
Product overview
Legit offers a modular privacy governance platform called Data Privacy Manager (DPM), which serves as a cloud-based SaaS solution for operationalizing privacy programs across data systems and regulatory obligations. The platform follows a pillar-and-module architecture comprising four main pillars: Personal Data Discovery (with Data Discovery and Personal Data Search modules), Privacy Program Management (with Assessment Automation, Third-Party Management, Risk Management, Incident Management, and Data Processing Inventory/ROPA modules), Privacy UX (with Consent Management and Data Subject Requests modules), and Data Removal Orchestration (with Data Removal and Filerskeepers modules). The platform also offers supplementary assessment services including SOPA and SOPA Plus for evaluating organizational privacy maturity.
Differentiator
Problem solved
Functional benefit
Products and services
- Data Privacy Manager (DPM) Modular SaaS platform that helps enterprises and mid-market organizations run their privacy program end-to-end, covering records of processing activities (ROPA), data protection impact assessments (DPIA), vendor risk management, cookie compliance, and AI Act readiness. Sold as a subscription to data protection officers, compliance teams, and privacy/legal leadership in regulated organizations.
- SOPA / SOPA+ Data Protection Impact Assessments Standardized, software-plus-services Data Protection Impact Assessment packages designed for smaller organizations and teams that lack in-house privacy expertise. Delivered as a managed DPIA service producing an audit-ready assessment for a specific processing activity or product launch.
Quantifiable outcome
- Up to 90% less manual work in privacy operations
- +3 more outcomes
Companies that use Legit
Customer profileNamed customers25 records
Segments6 records
Ideal customer profiles2 records
Legit technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration1 record
AI capability3 records
Feature11 records
Legit partnerships and signals
Strategic signalPartnerships
Two partnerships are on record, tiered core.
- SecureLinkcoreStrategic partnership to bring Data Privacy Manager to organizations across the GCC (Gulf Cooperation Council) region, helping businesses accelerate privacy compliance in Saudi Arabia, UAE, Qatar, and other GCC countries.
- Nvious SolutionscorePartnership for POPIA compliance in South Africa and SADC region, offering local expertise and support for compliance with South Africa's Protection of Personal Information Act.
Scale indicators4 records
Recent moves7 records
Expansion highlights6 records
Legit competitors and assessment
Company assessmentDirect peers
- Didomi: Consent and preference management platform with strong presence in Europe; overlaps with Legit's Consent Management and Privacy UX modules for marketing-driven compliance.
- OneTrust: Largest dedicated privacy management platform offering consent, DSAR, ROPA, vendor risk and AI governance — the most direct competitor to Legit's Data Privacy Manager across overlapping modules.
- Securiti: Unified data security, privacy and AI governance platform; competes head-on with Legit across DSR, consent, ROPA, third-party risk and AI governance modules.
- Usercentrics: European consent management platform with CMP focus; competes with Legit on consent/Privacy UX, particularly in EU mid-market deployments.
- TrustArc: Long-standing privacy compliance platform covering consent, DSAR, ROPA and assessments; competes with Legit for the same enterprise and mid-market privacy buyer.
- BigID: Data intelligence platform for data discovery, classification and privacy — overlaps directly with Legit's Personal Data Discovery pillar and broader privacy automation stack.
- DataGrail: Privacy automation platform focused on DSR, consent and data mapping; targets the same mid-market and enterprise buyer as Legit with a similar automation-led value proposition.
Broad incumbents
- IBM: Large incumbent offering privacy and data governance capabilities within its broader security, data and AI portfolio; competes for enterprise RFPs that bundle privacy with broader data programs.
- SAP: Enterprise software incumbent with data privacy and GRC capabilities embedded in its ERP and data cloud platforms; competes as part of larger enterprise deals rather than as a specialist vendor.
- Collibra: Enterprise data governance and catalog platform that has expanded into privacy use cases; competes with Legit at the data-governance layer but serves a much broader data/AI buyer.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights7 records
Customer concentration
Legit social profiles
Digital presenceLegit compliance and trust
Trust signalCompliance3 records
Legit financial estimates
Financial estimateRevenue estimate
Valuation estimate
Legit leadership team
Management profileNumber of profiles
Profiles4 records
Legit funding detail
Funding detailFunding overview
Funding rounds2 records
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Legit M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Legit
What does Legit do?
Legit develops and sells the Data Privacy Manager (DPM), a modular SaaS platform that helps organizations run their privacy program end-to-end, including records of processing activities, data protection impact assessments, vendor risk, cookie compliance, and AI Act readiness. It also delivers SOPA and SOPA+ Data Protection Impact Assessments as a combined software-plus-services offering for smaller organizations.
Is Legit a public or private company?
Legit is a private company. It is classified as venture growth investor backed and is currently operating.
When was Legit founded?
Legit was founded in 2017. It employs 1 to 10 people.
Where is Legit based?
Legit is headquartered in Zagreb, Croatia, in the Europe region.
How does Legit make money?
One revenue line is on record: saaS Subscription - Data Privacy Manager.
Who are Legit's main competitors?
Direct peers on record are Didomi, OneTrust, Securiti, Usercentrics, TrustArc, BigID and DataGrail. Broad incumbents are IBM, SAP and Collibra.
Does Legit have an API?
No public API is recorded for Legit.
What industry is Legit in?
Legit's product category is Privacy Governance Software. Its primary akta.pro industry code is HDADAFAH, Privacy Management (Consent, DSAR, RoPA). Its NAICS code is 5415 and its SIC code is 7372.