Zam

What Zam does

Founded in 2020, ZAM eG is a Germany-based cooperative that provides third-party management and IT-governance services to cooperative and private banks. It is embedded in the cooperative financial group of Volks- und Raiffeisenbanken but states that it acts neutrally and also serves banks outside the group. The company currently controls and monitors nine large IT service providers for more than 675 German banks.

Name

Zam

Legal name

ZAM eG

Website

https://zam-eg.de

Company type

Private

Founded year

2020

Operating status

Operating

Headcount range

11–50 employees

Short description

ZAM eG provides German cooperative and private banks with third-party management, IT governance, and regulatory compliance services through the multi-tenant ZAM-AR platform and FORUM-based IT-Regulatorik offering, under a cooperative, direct B2B model.

Ownership category

akta.pro rank

Product category

Banking Regulatory Compliance Software

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Management Services (8741), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Governance, Risk & Compliance (GRC) Platforms (BPAEAPAA)

akta.pro secondary industries

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK), Third-Party/Vendor Risk Management (TPRM/VRM) (HDADAIAE), Compliance Technology, GRC Platforms & Controls Automation Advisory (BPAHAFAO)

Keywords

• Third-party management
• Regulatory compliance services
• IT governance solutions
• Outsourcing register software
• Banking compliance software

Headquarters

HQ city

Neu Isenburg

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Drittparteienmanagement Services: Regulatory compliance services for managing and monitoring (IT) service providers in accordance with BaFin regulatory requirements for German banks. Operates as a cooperative serving member banks.
2. IT-Regulatorik (Verfahrenslieferant): Central provision of IT regulatory documentation and compliance support services. Information is pre-sorted, refined, evaluated, and periodically delivered as template data directly into banks' systems.
3. ZAM-AR Software Platform: Software-as-service platform for regulatory compliance, offered as white-label solution for banks.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

ZAM eG delivers BaFin-compliant third-party management and IT governance services to over 675 German cooperative and private banks, monitoring nine central large IT service providers and providing a multi-tenant software platform (ZAM-AR) as an outsourcing/information register. It also supplies the IT-Regulatorik (Verfahrenslieferant) service for information security management, ICT risk management, and emergency management, built on the FORUM-Softwaresuite.

Product overview

ZAM eG operates as a single-platform provider offering a unified regulatory compliance ecosystem. The core offerings include ZAM-AR (the multi-tenant software platform for third-party management and outsourcing registers), combined with the Verfahrenslieferant services for IT regulation covering information security management, ICT risk management, and emergency management. Supporting modules include the ZAM-Fassung quarterly video series and the Hinweisgebersystem 360 whistleblower system. All services are designed for the German banking sector, particularly embedded in the cooperative financial group of Volks- und Raiffeisenbanken.

Differentiator

Problem solved

Functional benefit

Brands

• ZAM-AR: Innovative, multi-tenant, modern software solution providing a unified platform for banks to fulfill supervisory requirements, functioning as outsourcing register/information register as a white-label solution
• Verfahrenslieferant (Procedure Supplier)
• Hinweisgebersystem 360

Products and services

• ZAM-AR Multi-tenant software platform offering a unified solution for banks to fulfill supervisory requirements, functioning as an outsourcing register / information register with white-label capability for all services.
• IT-Regulatorik (Verfahrenslieferant) Central procedure supplier service enabling banks to comprehensively fulfill IT regulatory requirements for information security management, ICT risk management, and emergency management, with an integrated tool solution based on FORUM-Softwaresuite.
• Drittparteienmanagement Third-party management service that controls and monitors (IT) service providers in compliance with BaFin regulatory requirements for German banking supervision, covering nine central large IT service providers for over 675 cooperative and private banks.
• Hinweisgebersystem 360 Whistleblower protection system established in cooperation with AWADO Rechtsanwaltsgesellschaft mbH, allowing customers, employees, and third parties to submit reports on legal violations and regulatory breaches, either named or anonymously.

Named customers2 records

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Three partnerships are on record, tiered core and supporting.

• Genossenschaftliche Finanzgruppe der Volks- und RaiffeisenbankencoreStrategic or Co-development PartnerZAM eG is embedded in the cooperative financial group of Volks- und Raiffeisenbanken, taking on tasks neutrally while also offering services to banks outside the cooperative financial group. This structural integration is fundamental to its business model.
• FORUM-SoftwaresuitecoreTechnology or IntegrationIT-Regulatorik (Verfahrenslieferant) services are built on the FORUM-Softwaresuite platform, which serves as the technical foundation for delivering standardized regulatory compliance solutions to banks.
• AWADO Rechtsanwaltsgesellschaft mbHsupportingImplementation/ SI/ Consulting PartnerAWADO lawyers collaborate with ZAM eG on the 'Hinweisgebersystem 360' whistleblower system, providing confidential handling of reports on legal violations and regulatory breaches.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Mitratech: Mitratech (including its Alyne/TeamMate GRC products) provides GRC and third-party risk management software for regulated industries, with strong penetration in financial services—overlapping with ZAM's regulatory compliance platform.
• ProcessUnity: ProcessUnity provides a third-party risk management and GRC platform used by financial institutions to manage vendor risk, due diligence, and regulatory compliance—directly overlapping with ZAM eG's Drittparteienmanagement and outsourcing register use cases.
• OneTrust: OneTrust offers a broad GRC and third-party risk platform used by enterprises including banks for vendor risk, regulatory compliance, and information governance—comparable scope to ZAM's combined TPRM and IT governance offerings.
• Regnology: Regnology (formerly BearingPoint RegTech / part of the former RSA Archer lineage) provides regulatory reporting and GRC solutions specifically designed for European banks—directly comparable to ZAM's BaFin-focused offerings.
• LogicGate: LogicGate offers a flexible GRC workflow platform including risk and compliance use cases relevant to banks; comparable positioning as a workflow-driven compliance platform similar to ZAM-AR.
• Prevalent: Prevalent specializes in third-party and vendor risk management software used heavily in banking and financial services for vendor assessments and regulatory compliance—comparable product category to ZAM-AR and Verfahrenslieferant services.
• Aravo (now part of Kroll): Aravo provides third-party risk and GRC solutions for global enterprises including financial institutions—comparable TPRM specialization to ZAM eG's Drittparteienmanagement service.

Broad incumbents

• SAP GRC: SAP's GRC and compliance solutions include access control, process control, and risk management modules deployed at major banks—representing an incumbent enterprise alternative to ZAM's specialized TPRM/IT regulatory platform.
• Wolters Kluwer (OneSumX for Regulatory Reporting): Wolters Kluwer provides regulatory compliance and reporting solutions for banks including vendor risk and operational risk—addressing the same BaFin-adjacent regulatory needs as ZAM, but as part of a much broader compliance portfolio.
• ServiceNow (GRC module): ServiceNow's Integrated Risk Management and GRC modules provide vendor risk, compliance, and audit capabilities used by global banks—a much broader incumbent platform overlapping with ZAM's core TPRM and IT governance offerings.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks7 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/zam-eg

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Zam