icloudCompliance

What icloudCompliance does

icloudCompliance, legally Klab Corporate Project Management S.L., is a Spanish SaaS vendor that operates an integrated Governance, Risk, and Compliance (GRC) platform covering four functional pillars: corporate compliance (including a Ley 2/2023-compliant ethics channel, criminal compliance under UNE 19601:2025, GDPR, third-party screening, and conflict-of-interest management), IT security compliance (ISO 27001, NIS2, DORA, ENS), sustainability and ESG (carbon footprint per RD 214/2025, CSRD Omnibus I with double materiality, CS3D due diligence, EU Taxonomy), and quality and internal control (ISO 9001, ENAC-accredited laboratory management, calibration). The platform's architecture emphasizes cross-module reuse of controls and evidence — a single document or control can serve compliance, ESG, and security audits simultaneously — and includes proprietary elements such as a blockchain-based timestamp audit trail, anonymous bidirectional whistleblower communication, and automated regulatory-deadline tracking.

The company was founded in 2016 in Valencia and serves 500+ customers across 20+ countries, predominantly Spanish and EU-regulated mid-market organizations in industrial, technology, energy, financial services, automotive, and distribution sectors. Revenue is generated exclusively through direct sales of four tiered annual subscriptions (Entry for 50–250 employees, Growth for 100–500, Advanced for 250–1,000, and Enterprise for 1,000+) with quote-based pricing; go-to-market combines enterprise field sales for large accounts and inside sales with ROI-calculator and checklist-driven lead qualification for mid-market and SMB, supported by content marketing (blog, Brújula Compliance newsletter, LinkedIn, YouTube). The platform is distinguished from Anglo-Saxon GRC incumbents (SAP GRC, MetricStream) by native coverage of Spanish and EU regulations, faster activation (ethics channel in 72 hours), and accessible pricing for the underserved mid-market segment.

Operationally, the company is privately held and founder-led (Christian Crespo, CEO) with a small team (firmographic range 11–50 employees) composed of legal, sustainability, cybersecurity, and quality specialists who both advise customers and develop the product. Capital structure includes a 2021 angel round from Angels Capital and a 2025 growth round of approximately €2.29M led by HWK. The company holds ISO 37001, ISO 37301, and ISO 27001 certifications and is accredited for UNE 19601:2025 and UNE 19602, reinforcing credibility for buyers operating in heavily regulated environments.

Name

icloudCompliance

Legal name

Klab Corporate Project Management S.L.

Website

https://icloudcompliance.com

Company type

Private

Founded year

2016

Operating status

Operating

Headcount range

11–50 employees

Short description

icloudCompliance is a Valencia-based SaaS vendor that provides an integrated GRC platform covering corporate compliance, ESG/CSRD reporting, IT security (NIS2/DORA/ISO 27001), and quality management for 500+ Spanish and European mid-market and enterprise customers across 20+ countries.

Ownership category

akta.pro rank

Product category

Governance, Risk and Compliance Software

NAICS

Computer Systems Design and Related Services (5415)

SIC

Services-Prepackaged Software (7372)

akta.pro industry

PRIMARYHDAEALAK

IT Governance, Risk & Compliance (IT GRC) Platforms

Hardware, Technology & Telecom/Enterprise Platforms & Databases/Enterprise Service Management (ITSM/ESM) Platforms

SECONDARYBPAHAFAO

Compliance Technology, GRC Platforms & Controls Automation Advisory

Business & Public Services/Professional Services (Legal, Accounting, Consulting)/Risk, Compliance & Governance Advisory

SECONDARYHDADAIAB

Policy & Compliance Management

Hardware, Technology & Telecom/Cybersecurity/Governance, Risk & Compliance (GRC)

SECONDARYHDADAIAI

Privacy Governance & Consent Management

Hardware, Technology & Telecom/Cybersecurity/Governance, Risk & Compliance (GRC)

Keywords

• Governance risk compliance
• Regulatory compliance software
• Whistleblower channel solutions
• ESG sustainability software
• Information security compliance

Headquarters

HQ city

Valencia

HQ country

Spain

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. SaaS Subscription - Tiered Plans: Four tiered subscription plans (Entry, Growth, Advanced, Enterprise) targeting companies from 50 to 5000+ employees. Plans escalate in features, support level, and regulatory scope. Pricing not publicly disclosed - quote-based. Activation times: ethical channel in 72h, basic compliance in 2 weeks, full system in 4-8 weeks.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels7 records

Core offering

icloudCompliance sells a multi-tenant SaaS Governance, Risk, and Compliance (GRC) platform that unifies corporate compliance, sustainability/ESG, IT security, and quality management into a single system for Spanish and European regulatory frameworks. The platform provides modules for the Ley 2/2023 ethical channel, criminal compliance under UNE 19601:2025, GDPR, CSRD/CS3D sustainability reporting, ISO 27001/NIS2/DORA cybersecurity compliance, and ISO 9001 quality control. It is delivered as annual tiered subscriptions (Entry, Growth, Advanced, Enterprise) with quote-based pricing and integrated auditor/external stakeholder access.

Product overview

icloudCompliance is an all-in-one Governance, Risk, and Compliance (GRC) SaaS platform for Spanish and European regulatory compliance. The platform operates as an integrated suite with four core modules: Compliance Corporativo (corporate compliance covering ethics channel, criminal compliance, GDPR, and third-party screening), IT Security (ISO 27001, NIS2, DORA, ENS), Sostenibilidad & ESG (carbon footprint, CSRD, EU Taxonomy), and Control Interno & Calidad (ISO 9001, auditing, laboratory management). The platform is offered through four pricing tiers (Entry/Growth/Advanced/Enterprise) scaling from SMEs (50 employees) to large enterprises (5,000+ employees). Key differentiators include 72-hour ethics channel activation, integrated compliance training via LMS, and unified document management with blockchain-based audit trails.

Differentiator

Problem solved

Functional benefit

Products and services

• Compliance Corporativo Core corporate compliance module covering the ethics channel under Ley 2/2023, criminal compliance per UNE 19601:2025, GDPR, third-party screening, conflict of interest management, and certifiable compliance training delivered via an integrated LMS. Targeted at Compliance and Legal Directors in Spanish and European organizations of 50 to 5,000+ employees.
• Seguridad de la Información (IT Security & Compliance) Information security and cybersecurity compliance module supporting ISO 27001, NIS2, DORA (financial sector), and ENS (Spanish public sector) frameworks, with ICT risk management, automated 24-hour incident notification deadlines, vulnerability management, access control, and audit-ready documentation. Targeted at CISOs and IT Security Managers in regulated entities.
• Sostenibilidad & ESG Sustainability and ESG module covering carbon footprint calculation (Scopes 1–3) using MITECO 2024 emission factors per RD 214/2025, CSRD with double materiality assessment and EINF reporting, CS3D supply chain due diligence, EU Taxonomy classification, CBCR, and VSME for smaller enterprises. Targeted at Sustainability and ESG Directors in companies subject to EU sustainability regulations.
• Control Interno & Calidad Quality and internal control module supporting ISO 9001, internal auditing, CAPA-based finding management, risk mapping, equipment calibration, ENAC-accredited laboratory management (ISO/IEC 17025), and integrated document management. Targeted at Quality Directors and Internal Control Managers across industrial, automotive, and laboratory environments.
• Canal Ético Whistleblower reporting channel compliant with Ley 2/2023, providing anonymous reporting, end-to-end encrypted communication, auto-generated random user credentials for bidirectional anonymous dialogue, automated legal deadline tracking (7-day acknowledgment, 3-month resolution), and zero metadata capture. Used by Compliance and Legal Directors across all customer tiers, with a stated 72-hour activation from signing.
• Screening de Terceros Third-party due diligence module that continuously screens individuals and entities against Politically Exposed Persons (PEP) lists, international sanctions lists (OFAC, EU, UN), anti-money laundering databases, and FCPA / UK Bribery Act compliance requirements, with automated adverse news alerts. Targeted at Compliance and Procurement teams performing supplier and partner onboarding.

Quantifiable outcome

• −70% compliance management time vs manual processes
• +6 more outcomes

Named customers13 records

Segments8 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature7 records

Scale indicators10 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• MetricStream: Enterprise GRC platform offering integrated risk, compliance, audit, and regulatory management. Most directly comparable competitor — explicitly named in icloudCompliance's own competitive positioning as a higher-end alternative, and a customer testified to having evaluated it.
• Diligent (Galvanize/ACL): GRC platform covering board management, risk, compliance, audit, and ESG reporting. Comparable in scope (compliance + ESG + audit) and target market (enterprise to upper mid-market), though with greater board governance focus.
• OneTrust: Trust intelligence platform spanning privacy, GRC, ethics, ESG, and data governance. Direct overlap with icloudCompliance's compliance, third-party screening, and ESG modules; OneTrust typically targets larger global enterprises but is increasingly moving downmarket.
• LogicGate Risk Cloud: Mid-market GRC workflow automation platform covering risk, compliance, and audit use cases. Closely comparable in target customer (mid-market seeking GRC without enterprise-scale costs) and in workflow/no-code customization model.
• Vanta: Compliance automation platform focused on frameworks like SOC 2, ISO 27001, and HIPAA, with growing ESG capabilities. Highly comparable mid-market positioning, fast activation, and SaaS-led GTM — a US analogue of icloudCompliance's mid-market compliance thesis.
• Drata: Automated compliance and GRC platform for SOC 2, ISO 27001, HIPAA, and adjacent frameworks. Comparable SaaS-first, mid-market positioning and rapid activation model; competes on similar buyer personas (CISOs, compliance leads).
• Resolver (Kiteworks/Resolver): Risk and compliance management platform covering risk register, incident management, audit, and regulatory compliance. Comparable in mid-market enterprise targeting and in integrating risk, compliance, and audit workflows.

Broad incumbents

• SAP GRC: Enterprise-grade GRC suite embedded in the SAP ecosystem. icloudCompliance explicitly contrasts itself against SAP GRC's €180K+ pricing — SAP targets large enterprises with deep ERP integration, while icloudCompliance serves the underserved mid-market.
• ServiceNow Integrated Risk Management (IRM): Risk and compliance module within the broader ServiceNow platform. Comparable in addressing risk, compliance, and audit needs, but as part of a much larger enterprise workflow suite rather than a focused GRC product.
• Wolters Kluwer TeamMate / Enablon: Established GRC and audit technology suite (TeamMate for audit, Enablon for EHS/GRC) from a large information services vendor. Comparable scope across compliance, audit, and risk, and particularly strong in European/regulated markets where icloudCompliance also operates.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/@icloudComplianceGRC
• LinkedInlinkedin.com/company/icloudcompliance

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds2 records

Investors2 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about icloudCompliance