Trustsis
Trustsis is a Brazilian consulting firm (est. 2009) specializing in SAP and Microsoft-based GRC, identity and access management, audit, and security services. It serves 300+ enterprise clients across Brazil, Latin America, North America, Asia, and Europe via GRC projects, AMS managed services, and AI-augmented SoD reviews.
- Company typePrivate
- Founded2009
- HeadquartersSão Paulo, Brazil
- Headcount51–100
- GTM typeB2B
- OfferingServices
What Trustsis does
Trustsis (legal name TrustSis Consultoria) is a privately held Brazilian consulting firm founded in 2009, headquartered in Jundiaí, São Paulo, with regional offices in Rio de Janeiro, Latin American affiliates, and a European business unit opened in 2022. The firm specializes in Governance, Risk and Compliance (GRC), Identity and Access Management (I&AM), audit management (AIS), authorizations, and SAP and Microsoft security services delivered to enterprise customers running SAP ERP, S/4HANA, and Microsoft Entra environments. Trustsis reports having served 300+ customers across more than 600 projects over 15 years, with a horizontal segmentation across industries regulated under LGPD, GDPR, SOx, COSO, and COBIT.
The firm's core technology stack centers on SAP GRC (Access Control, Process Control, Risk Management, Identity Management, Audit Management, SSO) integrated with Microsoft Entra ID, SAP Cloud Identity Services, SAP BTP, SAP IAG, and SAP S/4HANA, supplemented by proprietary tools including GDS Studio (AI-augmented SoD risk matrix calibration across SAP, TOTVS, Cyberbank, PeopleSoft, and PIMS), the Compliance Operator AMS framework for continuous compliance, and the BlueBox SAP penetration testing methodology. Trustsis maintains VPN-accessible training infrastructure with live SAP ERP, GRC, and Microsoft installations to support project accelerators and the TrustSis University training program. It holds SAP Gold Partner status, SAP Recognized Expertise (REx) in GRC (only niche firm in LatAm), and ISO 27001/27017/27018 references alongside documented GDPR and LGPD compliance practices.
Trustsis monetizes through project-based professional services and multi-year managed services (AMS) contracts priced via direct, quote-based negotiations. Go-to-market is enterprise field sales driven by inbound web, WhatsApp (+55 11 93019-1930), and email inquiries ([email protected], [email protected]), reinforced by content marketing through the firm blog and LinkedIn and event participation such as AI Festival 2026. Distribution is direct-only with no reseller or marketplace channel; service delivery combines remote VPN-enabled work with on-site engagements across Brazil, Latin America, North America, Asia, and Europe. Trusted certifications and the TrustSis University pipeline function as the main demand-generation assets.
Trustsis firmographics
Firmographics- Name
- Trustsis
- Legal name
- TrustSis Consultoria
- Website
- https://trustsis.com
- Company type
- Private
- Founded year
- 2009
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Trustsis is a Brazilian consulting firm (est. 2009) specializing in SAP and Microsoft-based GRC, identity and access management, audit, and security services. It serves 300+ enterprise clients across Brazil, Latin America, North America, Asia, and Europe via GRC projects, AMS managed services, and AI-augmented SoD reviews.
- Ownership category
- akta.pro rank
Where Trustsis is headquartered
LocationHeadquarters
- HQ city
- São Paulo
- HQ country
- Brazil
- HQ region
- Latin America
Offices4 records
Markets served
Trustsis business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure
Revenue model
- GRC Consulting and Implementation Projects: Project-based professional services for implementation, improvement, and review of SAP GRC solutions including Access Control, Process Control, Risk Management, Identity Management, Audit Management, and Single Sign-On. Also covers projects involving Microsoft Entra ID integration with SAP GRC, and SAP S/4HANA security migration (Greenfield, Brownfield, Bluefield approaches).
- AMS (Application Management Services) Support: Ongoing specialized support services for SAP Security and GRC environments, delivered through the proprietary 'Compliance Operator' framework. Includes continuous compliance monitoring, problem fixes, planned improvements, and preventive operation. Segregated from functional/technical SAP support to maintain governance standards.
- Specialized Training and Certification Programs: Customized training programs delivered through TrustSis University for SAP GRC, Security, Access Profiles, and Microsoft Entra. Includes real-project training, customized client sessions, and internal team update programs. Covers courses on SAP GRC Access Control 12.0, Process Control 12.0, Risk Management 12.0, SAP Audit Management, SAP Security, SAP Identity Management, and SAP Single Sign-On.
- SoD Risk Matrix Review and AI-Driven Calibration Services: Specialized consulting engagements for SoD risk matrix review and calibration using the proprietary GDS Studio AI tool, covering multiple ERP platforms (SAP, TOTVS, Cyberbank, PeopleSoft, PIMS, among others). Includes definition of SoD risk rules, identification of sensitive access transactions, and establishment of compensating controls.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Custom professional services engagements — quote-based pricing |
Go-to-market motion2 records
Distribution channels2 records
Marketing channels6 records
Trustsis product offering
Product offeringCore offering
TrustSis is a specialized B2B consulting firm that delivers Governance, Risk and Compliance (GRC), Identity and Access Management (IAM), and SAP/Microsoft Security services to enterprise clients running SAP ERP (ECC, S/4HANA, HANA) and Microsoft environments. Core offerings include GRC consulting and implementation projects (Access Control, Process Control, Risk Management, Identity Management, Audit Management), AMS support via the proprietary Compliance Operator methodology, AI-augmented SoD risk matrix review through GDS Studio, BLUEBOX penetration testing, and structured training programs via TrustSis University.
Product overview
Trustsis is a specialized GRC and identity management consulting firm offering a portfolio of services and proprietary methodologies built around SAP GRC and Microsoft platforms. The core offering centers on GRC Consulting Services (strategy, implementation, support) alongside specialized services including SAP Access Profile Modeling and Redesign, AMS Support via the Compliance Operator methodology, SoD Risk Matrix Review augmented with AI (GDS Studio), and the proprietary BLUEBOX penetration testing framework. The company also delivers Identity Management (IDM/IAM/IGA), ESG, and Single Sign-On services. TrustSis University provides internal training to sustain its SAP GOLD and REx certifications. All offerings are delivered by a team of certified specialists using SAP and Microsoft as primary technology platforms, with proprietary tools and methodologies as differentiators.
Differentiator
Problem solved
Functional benefit
Brands
- TrustSis University: Professional training and development division focused on corporate culture in Governance, Risks and Compliance (GRC) and information security.
- TrustSis BLUEBOX
- Compliance Operator
- GDS Studio
Quantifiable outcome
- 300+ customers served across Brazil, Latin America, and internationally
- +4 more outcomes
Companies that use Trustsis
Customer profileNamed customers1 record
Segments3 records
Ideal customer profiles3 records
Trustsis technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration11 records
AI capability5 records
Feature4 records
Trustsis partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- SAPcoreSAP is TrustSis's primary technology platform partner. TrustSis holds SAP Gold Partner status (the first company worldwide to achieve SAP GOLD in GRC services) and SAP Recognized Expertise (REx) in GRC (the only niche company in Latin America with this certification). The partnership covers the full portfolio of SAP GRC solutions including SAP Access Control, SAP Process Control, SAP Risk Management, SAP Identity Management, SAP Audit Management, SAP Single Sign-On, SAP Cloud Identity Access Governance (IAG), and SAP S/4HANA security. TrustSis maintains installed SAP ERP, GRC, and BTP environments for training and project accelerators, and leverages SAP Discovery Center, SAP Help Portal, and SAP Community resources.
Scale indicators7 records
Recent moves10 records
Expansion highlights6 records
Trustsis competitors and assessment
Company assessmentBroad incumbents
- Capgemini (SAP Practice): Global systems integrator with substantial SAP S/4HANA and GRC delivery capability — competes in large enterprise GRC implementation projects as a scaled alternative.
- Deloitte (SAP GRC practice): Big Four firm with a large SAP GRC, IAG, and identity consulting practice — competes for enterprise SAP GRC transformation mandates with vastly greater scale than TrustSis.
- Avanade: Accenture/Microsoft joint venture with a significant SAP and Microsoft identity/governance practice — a large incumbent frequently competing for the same SAP GRC and Microsoft Entra engagements globally.
- PwC (SAP GRC practice): Big Four firm delivering SAP GRC, audit, and risk consulting — competes in enterprise SAP risk transformation engagements globally at significantly larger scale.
Direct peers
- Soterion: South Africa-headquartered SAP GRC consulting firm specializing in access control, SoD risk, and S/4HANA GRC migrations — directly comparable niche player with similar delivery model and SAP GRC specialization as TrustSis.
- Bowbridge Software: SAP-focused security and GRC software/consulting provider offering ABAP code scanning and access risk tooling — overlapping the SAP GRC niche and competing for similar SAP-using clients.
- Layer Seven Security: SAP cybersecurity consulting firm delivering SAP penetration testing, ABAP code analysis, and GRC support — closely aligned with TrustSis's BLUEBOX penetration methodology and SAP GRC service portfolio.
- Protect4S: SAP-specific automated security scanning vendor for vulnerability assessment and compliance — competes directly in the SAP cybersecurity/GRC tooling adjacent to TrustSis's risk services.
Emerging players
- Onapsis: Product-led SAP cybersecurity and compliance platform — increasingly competing for SAP security and GRC monitoring budget, though TrustSis's services-led approach remains complementary in many accounts.
- Pathlock: Provider of access governance and SoD controls for SAP and other ERPs — a product-led competitor in the same SoD risk and identity governance category that TrustSis services.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks5 records
Key highlights6 records
Customer concentration
Trustsis social profiles
Digital presenceTrustsis compliance and trust
Trust signalCompliance8 records
Trustsis financial estimates
Financial estimateRevenue estimate
Valuation estimate
Trustsis leadership team
Management profileNumber of profiles
Profiles2 records
Trustsis funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Trustsis M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Trustsis
What does Trustsis do?
TrustSis is a specialized B2B consulting firm that delivers Governance, Risk and Compliance (GRC), Identity and Access Management (IAM), and SAP/Microsoft Security services to enterprise clients running SAP ERP (ECC, S/4HANA, HANA) and Microsoft environments. Core offerings include GRC consulting and implementation projects (Access Control, Process Control, Risk Management, Identity Management, Audit Management), AMS support via the proprietary Compliance Operator methodology, AI-augmented SoD risk matrix review through GDS Studio, BLUEBOX penetration testing, and structured training programs via TrustSis University.
Is Trustsis a public or private company?
Trustsis is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Trustsis founded?
Trustsis was founded in 2009. It employs 51 to 100 people.
Where is Trustsis based?
Trustsis is headquartered in São Paulo, Brazil, in the Latin America region.
How does Trustsis make money?
Four revenue lines are on record. GRC Consulting and Implementation Projects are the primary driver. The others are AMS (Application Management Services) Support, specialized Training and Certification Programs and soD Risk Matrix Review and AI-Driven Calibration Services.
Who are Trustsis's main competitors?
Broad incumbents on record are Capgemini (SAP Practice), Deloitte (SAP GRC practice), Avanade and PwC (SAP GRC practice). Direct peers are Soterion, Bowbridge Software, Layer Seven Security and Protect4S. Emerging players are Onapsis and Pathlock.
Does Trustsis have an API?
No public API is recorded for Trustsis.