What bits+bytes it-solutions does

bits+bytes it-solutions GmbH & Co. KG is a Germany-based, privately held provider of data protection, information security, and compliance services headquartered in Freudenberg and operating under the Avallon group brand. The firm offers outsourced external Data Protection Officer (DPO) and Information Security Officer (ISB) services, data protection audits, and the establishment and operation of Data Protection Management Systems (DSMS) and Information Security Management Systems (ISMS). It supports clients pursuing ISO 27001, BSI IT-Grundschutz, and TISAX certifications, and offers security testing (penetration testing, vulnerability management), attack detection and defense (via partners CrowdStrike and Vectra AI), and IT security awareness/e-learning programs.

The product surface is anchored by konforo, a proprietary compliance management platform that consolidates whistleblowing, e-learning, data protection, and information security workflows — including process documentation and evidence/nachweis management — into a single interface. Surrounding konforo are specialized service lines for emerging regulations including NIS2, the EU AI Act (KI-Verordnung), the EU Deforestation Regulation (EUDR), and the German Pay Transparency Act (Entgelttransparenzgesetz). Partnerships with CrowdStrike, Vectra AI, Cybertise, and membership in the BSI Alliance for Cyber Security and GDD extend the firm's delivery ecosystem.

Commercially, the firm operates a sales-led, consultation-based go-to-market targeting German B2B clients (primarily SMB and mid-market), with quote-based multi-year contracts bundling advisory services and konforo software. Distribution is regional and direct, with multiple branded entities (bits+bytes, bITs, Avallon Nordwest, Mauß Datenschutz) providing coverage across Germany. Cumulative scale signals include 700+ completed data protection and information security projects, 40,000+ employees trained in client awareness/ISS/compliance programs, and a stated zero-fines track record among clients, supported by 30 years of continuous market presence.

Name

bits+bytes it-solutions

Legal name

bits + bytes it-solutions GmbH & Co. KG

Website

https://bits-bytes.de

Company type

Private

Operating status

Operating

Headcount range

1–10 employees

Short description

bits+bytes it-solutions, operating under the Avallon brand, is a German B2B provider of outsourced data protection, information security, and compliance services — including external DPO/ISB roles, ISO 27001/TISAX certification support, NIS2/KI-Verordnung implementation, and the konforo compliance management platform.

Ownership category

akta.pro rank

Product category

Compliance and Information Security Consulting

NAICS

Computer Systems Design and Related Services (54151), Security Systems Services (except Locksmiths) (561621), Custom Computer Programming Services (541511)

SIC

Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)

akta.pro secondary industries

Records Management, Information Governance & Retention (BPAEAPAO), Identity Threat Detection & Response (ITDR) (HDAEAJAH)

Keywords

• Data protection services
• Information security consulting
• Compliance management software
• NIS2 implementation support
• Cybersecurity penetration testing

Headquarters

HQ city

Freudenberg

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Professional Consulting Services: Ongoing consulting and advisory services including external data protection officer, information security officer, compliance officer roles, audits, gap analyses, and implementation support for regulations like NIS2 and KI-Verordnung.
2. Compliance Software (konforo): Proprietary compliance software platform providing centralized workflow management for data protection, information security, whistleblowing, and e-learning. Sold as part of service packages or potentially as standalone subscription.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

bits+bytes it-solutions delivers external data protection officer, information security officer, and compliance officer services to German businesses, including audits, gap analyses, certification support (ISO 27001, BSI IT-Grundschutz, TISAX), NIS2 and KI-Verordnung implementation, penetration testing, and employee awareness training. These professional services are anchored by konforo, the company's proprietary compliance management platform that consolidates whistleblowing, e-learning, data protection, and information security workflows in a single interface.

Product overview

bits+bytes it-solutions operates under the Avallon brand as a unified compliance and information security service provider. The portfolio centers on konforo, a proprietary compliance management platform that consolidates whistleblowing, e-learning, data protection, and information security into a single interface. Surrounding this core platform are specialized service offerings including: external data protection officer and consulting services; information security officer services with certification support (ISO 27001, BSI IT-Grundschutz, TISAX); attack detection and defense using third-party security tools; security testing and penetration testing; employee awareness and e-learning programs; and compliance management with NIS2 implementation support. The offering is structured as a platform-plus-services model where konforo serves as the central hub for compliance processes while specialized expertise services address specific regulatory and security requirements.

Differentiator

Problem solved

Functional benefit

Products and services

• konforo Compliance Management Platform Proprietary all-in-one compliance software that consolidates whistleblowing, e-learning, data protection, and information security processes in a single location, providing centralized workflow management, process documentation, and evidence/nachweis management for regulatory requirements. Sold to German businesses needing unified compliance tooling.
• External Data Protection Officer Services Outsourced data protection officer (DPO) services including ongoing data protection consulting, data protection audits, and establishment/operation of a Data Protection Management System (DSMS) either organizationally or software-supported. Targeted at German businesses requiring external DPO coverage and audit support.
• External Information Security Officer Services External Information Security Officer (ISB) services including support for ISO 27001, BSI IT-Grundschutz, and TISAX certifications, technical system protection, vulnerability management, patch management, and password management. Targeted at German businesses pursuing recognized security certifications or needing ongoing ISB coverage.
• Attack Detection and Defense Managed attack detection and defense solutions that leverage CrowdStrike EDR for endpoint detection, Vectra AI for network detection and response, and honeypot technologies to detect and defend against cyber attacks. Targeted at German businesses seeking outsourced detection and response capabilities.
• Security Testing (Penetration Testing) Penetration testing services, Defenderbox security assessment, and dark web monitoring designed to identify and evaluate security vulnerabilities in client environments. Targeted at German businesses needing third-party security validation.
• Employee Security Awareness Training IT security awareness training and e-learning programs designed to educate client employees about security best practices and regulatory compliance requirements. Targeted at German businesses needing to raise security awareness across their workforce.
• Compliance Services (NIS2 and Regulatory Implementation) External compliance officer services plus NIS2 implementation support (applicability analysis, gap analysis, implementation assistance) and regulatory compliance advisory for AI Ordinance (KI-Verordnung), EUDR, Pay Transparency Act (Entgelttransparenzgesetz), and other regulations. Targeted at German businesses facing expanding regulatory obligations.

Quantifiable outcome

• 40,000+ employees trained in awareness, ISS, and compliance programs
• +2 more outcomes

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

One partnership is on record.

• GDD (Gesellschaft für Datenschutz und Datensicherheit e.V.)minorStrategic or Co-development PartnerMembership in the German Association for Data Protection and Data Security, indicating industry alignment and participation in data protection professional community.

Scale indicators4 records

Recent moves5 records

Expansion highlights5 records

Emerging players

• OneTrust: Global privacy, security, and GRC software platform used by enterprises to manage GDPR, NIS2-style, and AI-governance programs. Represents the platform-only competitive threat that could reduce external-services demand for boutique consultancies.
• Securiti: AI-driven data security and compliance platform covering privacy management, data governance, and GRC. Comparable to konforo's positioning as a unified compliance technology stack and a direct software competitor for clients evaluating in-house tooling.

Broad incumbents

• EY (Ernst & Young) Germany: Global advisory with a German cyber, privacy, and risk consulting practice covering NIS2 readiness, AI governance, and ISO 27001. Directly competes for large compliance engagements that bits+bytes targets in the mid-market segment.
• PwC Germany: Big 4 advisory with a German cybersecurity, privacy, and compliance practice covering GDPR, NIS2, and ISO 27001. Represents the high-touch incumbent competitor at the upper end of the market, often winning enterprise mandates away from boutique firms.
• TÜV SÜD: Large German certification and testing body offering ISO 27001, TISAX, and broader compliance services. Overlaps with bits+bytes' certification-support and audit practices and represents an established incumbent threat for enterprise compliance contracts.
• SAP GRC: Enterprise GRC software suite used by large German organizations to manage access, risk, and compliance controls. Represents the incumbent enterprise-software alternative for compliance functions that konforo and similar platforms compete against.
• DEKRA: Major German testing, inspection, and certification organization offering ISO 27001 and TISAX certification plus information security consulting. Overlaps with bits+bytes' InfoSec certification support services and brings significant brand equity.

Direct peers

• Datenschutzkanzlei: Germany-focused data protection law firm and consultancy providing external DPO services, GDPR audits, and DSMS support. Comparable head-to-head competitor for external DPO mandates in the same German SMB/mid-market segment.
• intersoft consulting: German data protection and compliance consultancy offering external DPO services, DSMS implementation, and IT security consulting. Closely comparable to bits+bytes on customer base (German Mittelstand), service portfolio (DPO + InfoSec), and consulting-led GTM.
• 2B Advice: German consultancy providing external data protection officer services, GDPR consulting, and compliance training. Directly competes for outsourced DPO engagements with German mid-market customers.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about bits+bytes it-solutions