DDSK

What DDSK does

DDSK GmbH is a Tettnang, Germany-based management-owned consulting firm (GmbH) specializing in information security, data protection, IT compliance, and Governance, Risk and Compliance (GRC) advisory services. The firm serves organizations across production, automotive, finance, healthcare, service/delivery, and energy verticals, helping them implement and operate management systems aligned with frameworks including ISO 27001, TISAX, NIS-2, EU-DSGVO, and ISO 27701. It also acts as an external data protection officer and information security officer for clients lacking in-house capacity, delivers training and qualification programs, and supports GRC software evaluation. Operations are led by five Geschäftsführer (Dominik Fünkner, Michael Heitele, Alexander Ingelheim, David Kuhn, Irina Weiß) with a team of approximately 14 people.

DDSK complements its consulting practice with proprietary technology. The flagship is iMS360, a standalone-branded GRC software platform (ims360.ai) covering risk management, business continuity management, data protection, and requirements management, positioned as both an internal consulting tool and a separately marketed product. The firm also operates its own whistleblowing portal with anonymity safeguards and documented audit processes to meet EU/German Hinweisgeberschutzgesetz requirements, and offers a dedicated AI/genAI advisory line covering secure AI environment setup, prompt engineering, and AI Act/works-council compliance.

The business model is professional services-led with direct enterprise sales and quote-based engagements; no public pricing exists. Distribution is direct consulting, augmented by a content/website presence and LinkedIn/XING profiles for visibility and recruitment. Geographic scope is Europe-wide (per professional liability coverage), though the headquarters in Tettnang and the firm's German-language first-party material indicate DACH as the primary market. There are no external investors, no funding rounds, and no public revenue disclosure; growth appears to be funded organically from consulting margins.

Name

DDSK

Legal name

DDSK GmbH

Website

https://ddsk.gmbh

Company type

Private

Operating status

Operating

Headcount range

11–50 employees

Short description

DDSK GmbH is a Tettnang, Germany-based consulting firm delivering information security, data protection, IT compliance, and GRC advisory services to enterprises across production, automotive, finance, healthcare, and energy verticals, complemented by its proprietary iMS360 software platform and AI compliance practice.

Ownership category

akta.pro rank

Headquarters

HQ city

Tettnang

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Others

Revenue model

1. Consulting Services: Professional consulting services for information security, data protection, IT compliance, and GRC. Services include implementation and operation of management systems, external DPO (Data Protection Officer) services, auditor roles, and training/qualification programs.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

DDSK is a German consulting GmbH that advises organizations on information security, data protection, IT compliance, and GRC, including the implementation and operation of management systems, external data protection officer and information security officer services, auditor roles, and training programs. The firm supplements its advisory work with a proprietary GRC software platform, iMS360, and operates its own whistleblowing portal for EU/German compliance. DDSK also offers AI/GenAI consulting covering both technical implementation and regulatory requirements.

Product overview

DDSK is a consulting firm (GmbH) based in Tettnang, Germany, offering advisory services in information security, data protection, IT compliance, and related GRC requirements. Its core offering is GRC consulting, supplemented by its proprietary software platform iMS360, which provides the structural methodology and tooling for compliance management. The consulting services and the iMS360 software are presented as complementary — the consulting team uses and recommends iMS360 as the software component of their GRC offering.

Differentiator

Problem solved

Functional benefit

Brands

• iMS360: Own GRC (Governance, Risk and Compliance) software solution for compliance structures

Products and services

• DDSK GRC Beratung
• iMS360 GRC software platform

Segments6 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Four partnerships are on record, tiered minor.

• LinkedIn Ireland Unlimited CompanyminorGTM or Marketing PartnerSocial media presence. DDSK maintains a corporate profile on LinkedIn for visibility, recruitment, and interaction with potential clients and employees. Data transfers to USA are covered by standard contractual clauses.
• New Work SE (XING)minorGTM or Marketing PartnerSocial media presence. DDSK maintains a corporate profile on XING for visibility and recruitment purposes.
• 7summitminorImplementation/ SI/ Consulting PartnerPartner for centralized administration and management, synergy effects, cost savings, and effectiveness improvement.
• R+V Allgemeine Versicherung AGminorOthersProfessional liability insurance provider for external data protection officers. Policy covers Europe-wide with coverage through R+V Allgemeine Versicherung AG, Raiffeisenplatz 1, D-65189 Wiesbaden.

Scale indicators1 record

Recent moves6 records

Expansion highlights5 records

Direct peers

• DataGuard GmbH: German data protection and information security consulting firm offering DPO-as-a-service, ISO 27001 implementation, and GRC software — almost identical value proposition to DDSK. Direct head-to-head competitor in the German-speaking mid-market.
• OneTrust: Global GRC and privacy management software platform. Directly comparable to iMS360 as a GRC tooling alternative, and adjacent to DDSK's consulting practice as enterprises choose between buy (OneTrust) and buy-plus-consult (DDSK).
• DQS Holding GmbH: German certification body and GRC consulting firm offering ISO 27001, TISAX, and information security audits. Competes with DDSK in the same German certification and consulting market, with a similar mid-market focus.
• EQS Group AG: German-listed provider of whistleblower hotline, compliance, and investor relations software. Comparable on the whistleblowing portal side and on GRC compliance tooling, with DDSK's iMS360 plus portal overlapping with EQS's compliance products.
• Securitum GmbH: Security and data protection consulting firm offering penetration testing, ISO 27001, and DPO services. Highly comparable boutique competitor in the German-speaking DACH market.

Regional players

• msg systems AG: German IT consulting and software firm with a regulated-industries and security practice. Larger and broader than DDSK, but comparable on enterprise IT compliance projects in finance, insurance, and automotive.
• TÜV SÜD Management Service GmbH: German certification and audit body offering ISO 27001, TISAX, and information security certification services. Comparable to DDSK on the certification/audit side, with deeper brand recognition but less software/AI consulting offering.

Broad incumbents

• KPMG Germany: Big 4 firm with large GRC, cybersecurity, and risk advisory practice in Germany. Competes with DDSK for enterprise mandates but typically on multi-million-euro transformation engagements that DDSK cannot staff.
• ServiceNow: Enterprise platform with a dedicated GRC/IRM module that competes directly with iMS360. ServiceNow's broader platform and ecosystem make it a default large-enterprise choice that DDSK must displace or integrate with.

Others

• Link11 (Akamai): European cybersecurity vendor (now part of Akamai) with German roots. Not a direct GRC competitor, but adjacent in the German enterprise security ecosystem and a potential ecosystem partner or indirect competitor for compliance-related security projects.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/ddsk

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about DDSK