Cuccibu

What Cuccibu does

Cuccibu B.V. is a Dutch professional-services firm specializing in privacy and information security consulting, headquartered in Eindhoven with a secondary office in Rijswijk. Founded with over a decade of operating history, the firm employs more than 60 dedicated specialists and has completed more than 1,500 projects across Dutch government, healthcare, education, and private-sector clients. Its delivery model is organized into three pillars: Advisory (GDPR/AVG scans, DPIAs, AI Risico Scans, ISO 27001, NIS2, NEN 7510, ENSIA support), Interim (deployable Privacy Officers, Data Protection Officers/FGs, and CISOs), and Training (open-enrollment and in-company programs). The company holds ISO 27001 certification for its own information security management system through BC Certified and supports clients across frameworks including BIO, Wpg, and the EU AI Act.

Cuccibu's technology base is consultancy methodology rather than software. Core offerings are assessments, certification support, and GRC frameworks (Internal Audits per ISO 19011, IT Audit, BCM, Three Lines of Defense, ISO 31000) executed by certified personnel including Register EDP-Auditors. The firm also operates phishing simulation services (email, SMS, voice, QR) and an annual Cuccibu Conference as part of its ecosystem positioning. Distribution is direct via three named enterprise account managers (Dennis Baay, Levi van de Ven, Kim Hunnego) executing consultative, advisory-first sales to Dutch organizations.

The customer base spans municipal governments (Gemeente Breda, Helmond, Nijmegen), healthcare providers (GGD GHOR Nederland, Reinier de Graaf, Medux, Pleyade), universities (TU Eindhoven, Wageningen, Erasmus Rotterdam, Hogeschool Utrecht, HAS Hogeschool), financial institutions (de Volksbank, de Hypotheker), and large corporates including E.ON, Mercedes, and BAM. Revenue is generated through quote-based advisory and interim engagements, with discrete training priced at €595 per participant. Cuccibu is privately held by Cuccibu B.V. with a Holland Capital event reported on 2 December 2022; ownership is otherwise undisclosed.

Name

Cuccibu

Legal name

Cuccibu B.V.

Website

https://cuccibu.com

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

101–250 employees

Short description

Cuccibu B.V. is a Dutch privacy and information security consultancy providing advisory, interim specialist placement, and training services across GDPR/AVG, NIS2, ISO 27001, and NEN 7510 frameworks to government, healthcare, education, and enterprise clients in the Netherlands.

Ownership category

akta.pro rank

Headquarters

HQ city

Eindhoven

HQ country

Netherlands

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Marketing or Sales, Operations, Technology or R&D, Others

Revenue model

1. Professional Services - Advisory: Advisory services covering insight, policy, implementation, governance, and specific questions. Approach is always compliant and tailored to the organization.
2. Professional Services - Interim Specialists: Deployment of immediately deployable specialists such as Privacy Officers, Data Protection Officers (FG), and CISOs who strengthen the client organization temporarily or structurally.
3. Training Programs: Practical training and awareness programs that anchor privacy and information security within client organizations. Offered as open enrollment (e.g., Training Interne Audits at €595 per participant, excl.) and in-company sessions.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels7 records

Core offering

Cuccibu is a Dutch consulting firm that delivers privacy and information security services across three pillars: Advisory (GDPR/AVG, NIS2, ISO 27001, NEN 7510, GRC, BCM, AI risk scans, audits), Interim placement of Privacy Officers, Data Protection Officers, and CISOs, and Training/awareness programs. Services are delivered by 60+ in-house specialists to Dutch government, healthcare, education, and private enterprise clients, with 1,500+ projects completed over 10+ years.

Product overview

Cuccibu is a Dutch consulting firm specializing in Privacy & Information Security advisory, interim staffing, and training services. The company offers a portfolio of assessment and certification support services including Privacy Advisory (AVG Scan, DPIA, AI Risico Scan), Information Security Services (NIS2, ISO 27001, NEN 7510, CISO), and GRC services (Internal Audits, IT Audit, WPG Audit, Business Continuity Management). Their offerings are organized around three core pillars: Advisory (policy, implementation, governance), Interim (deployable specialists like Privacy Officers and CISOs), and Training. The company also provides specialized services such as Phishing simulations, ENSIA support for government organizations, and ISO 31000 risk management frameworks. Cuccibu operates across sectors including government, healthcare, education, and profit organizations, supported by 60+ specialists with 10+ years of experience and 1,500+ completed projects.

Differentiator

Problem solved

Functional benefit

Products and services

• Privacy Advisory Services Advisory services covering insight, policy development, implementation, governance, and specific privacy questions to ensure compliance with GDPR/AVG and other privacy regulations. Targeted at Dutch organizations needing structured privacy advice.
• Interim Privacy Officer & Functionaris Gegevensbescherming (DPO) Placement Immediately deployable Privacy Officers and Data Protection Officers (Functionarissen Gegevensbescherming / FG) who strengthen client organizations on a temporary or structural basis. For Dutch organizations that need senior privacy leadership without permanent headcount.
• Information Security Advisory & Interim Services Information security advisory and interim services covering NIS2 compliance, CISO placement, ISO 27001 and NEN 7510 certification support, and security/privacy awareness programs. For Dutch organizations needing senior information security leadership and certification guidance.
• Training & Awareness Programs Practical training programs and awareness campaigns that anchor privacy and information security within client organizations. Includes open-enrollment courses (e.g., Training Interne Audits at €595 per participant) and in-company customized sessions on ISO standards and regulatory topics.
• AVG (GDPR) Privacy Scan A diagnostic scan to assess the current privacy and data protection status within an organization as a starting point for GDPR/AVG compliance work.
• DPIA (Data Protection Impact Assessment) Assessment required when processing activities are likely to result in high privacy risks, helping identify risks to individuals and measures to mitigate them, in line with GDPR Article 35.
• AI Risico Scan Risk scan for AI systems, comparable to an AI Impact Assessment (AIIA), to assess AI-related privacy and security risks for organizations deploying or using AI.
• NIS2 Compliance Advisory Advisory services for organizations to achieve compliance with the NIS2 Directive on network and information security, including gap analysis, program design, and implementation support.
• ISO 27001 Certification Support End-to-end support for ISO 27001 certification, the international standard for information security management systems — from gap analysis through implementation, internal audit, and external audit readiness.
• NEN 7510 Certification Support Certification support for NEN 7510, the Dutch standard for information security in healthcare, including gap analysis, implementation, and audit preparation for healthcare providers.
• Internal Audits Comprehensive examination of the quality and reliability of working methods and business processes within an organization, conducted according to ISO 19011 guidelines.
• IT Audit (DigiD, Suwinet, ISAE 3000/3402, SOC) IT audits covering DigiD assessments, Suwinet audits, ISAE 3000/ISAE 3402/SOC assessments, and WPG audits, performed by certified Register EDP-Auditors.
• WPG (Wet politiegegevens) Audit Audit services for organizations processing police data under the Wet politiegegevens (Wpg), including the external audits required every four years.
• Business Continuity Management (BCM) Services to help organizations identify threats to business continuity and implement measures (including BCP) to protect against disruptions and limit impact during serious disruptions.
• Phishing Simulation Service Phishing simulation service covering email phishing, SMS phishing (smishing), voice phishing (vishing), and QR-code phishing, used to test and raise employee security awareness.
• GRC (Governance, Risk & Compliance) Advisory GRC advisory covering Risk Management Frameworks, Risk Appetite Statements, Three Lines of Defense model design, and ISO 31000 implementation.
• ENSIA Support for Government

Quantifiable outcome

• 1,500+ projects successfully completed
• +2 more outcomes

Named customers31 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

One partnership is on record.

• SILFOminorOthersSILFO is an organization for BOA (Buitengewoon Opsporingsambtenaren) employers. Cuccibu supports SILFO with Wpg (Wet politiegegevens) audits and compliance advisory services. A testimonial from Petra de Bruijn, Board Member at SILFO, references positive collaboration with Cuccibu on privacy and security matters.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Duthler: Dutch boutique privacy and information-security consultancy that advises on AVG/GDPR and provides interim privacy officers to similar public-sector and regulated clients in the Netherlands. Direct overlap with Cuccibu's advisory and interim staffing model.
• Fox-IT (NCC Group): Delft-based specialist cybersecurity services firm (now part of NCC Group) providing Dutch enterprises and government with cyber consulting, incident response and managed security services. Comparable specialist Dutch cyber/infosec provider competing for similar buyers.
• Northwave: Utrecht-based cybersecurity consulting and managed detection/response firm serving Dutch enterprise and government. Directly comparable specialist Dutch information-security services peer to Cuccibu.
• Secura: Dutch cybersecurity firm specializing in information-security testing, ISO 27001 certification support and advisory for regulated industries. Overlaps directly with Cuccibu's information-security and certification practice.
• Hudson Cybertec: Netherlands-based specialist in OT/industrial information security and NIS2/Directive compliance consulting. Comparable specialist Dutch information-security consulting peer for industrial and regulated clients.

Broad incumbents

• TÜV Nederland: Large Dutch certification, auditing and testing body that performs ISO 27001, NEN 7510 and other compliance audits for the same Dutch buyers as Cuccibu. Broader incumbent competing for the certification support workflow.
• Deloitte Netherlands: Big 4 firm with a sizable Dutch Risk Advisory and cyber/privacy practice serving enterprise and government on GDPR, NIS2 and ISO programs. Broad incumbent competing for large multi-workstream tenders.
• KPMG Netherlands: Big 4 firm running a Dutch cyber security and privacy advisory practice that serves the same regulated buyers as Cuccibu on GDPR, NIS2 and ISO compliance. Broad incumbent at much larger scale.
• PwC Netherlands: Big 4 firm with a Dutch Risk & Regulatory practice delivering privacy, cyber and ISO 27001 advisory. Competes for enterprise and public-sector engagements that Cuccibu also pursues.
• EY Netherlands: Big 4 firm with a Dutch cybersecurity and privacy advisory practice serving regulated industries on GDPR, NIS2 and assurance. Broad incumbent competing for similar mid-market and enterprise buyers.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/de-esg-adviseurs
• Instagraminstagram.com/cuccibu

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cuccibu