What PRODAT does

PRODAT (Consultores y Auditores Informáticos PRODAT, S.A.) is a Spanish data protection and regulatory compliance consulting firm founded in 1997 and headquartered in Madrid. It serves more than 35,000 public and private sector clients across Spain and Portugal through a network of over 20 offices covering every Spanish autonomous community plus Lisbon. Its core offerings center on GDPR (RGPD) and Spanish LOPDGDD compliance, external DPO (DPD) services, information security certification (ISO 27001, ENS for the Spanish public sector), and EU AI Regulation (RIA) governance advisory. Adjacent lines include an ethical whistleblowing channel (Canal Ético Prodat), anti-money laundering compliance, electronic commerce and IT law advisory, trademarks and patents, and electronic administration compliance.

The firm operates as a people-led professional services consultancy rather than a software vendor. It does not develop proprietary technology platforms; its core 'technology' is the codified regulatory expertise of its in-house consultants, supported by a client portal (clientes.prodat.es), a budget-request workflow on its website, and two productized adjacencies: Corebos CRM implementation and the SIGPAC geographic platform. Pricing is bespoke, contracts are multi-year, and customer acquisition is driven by direct enterprise field sales from the local offices, reinforced by an active content-marketing blog covering regulatory developments.

Revenue is generated through consulting engagements, recurring compliance advisory, and outsourced DPO mandates. The company holds no disclosed external funding, no parent company, and no M&A history, and is structured as a privately-held Spanish public limited company (Sociedad Anónima). Distribution is field-based rather than partner-led, with each regional office serving its local market. The customer base is horizontal across sectors and heavily skewed to long-tail SMEs and public administrations requiring localized compliance support.

Name

PRODAT

Legal name

Consultores y Auditores Informáticos PRODAT, S.A.

Website

https://www.prodat.es

Company type

Private

Founded year

1996

Operating status

Operating

Headcount range

251–500 employees

Short description

PRODAT is a Madrid-based data protection and regulatory compliance consulting firm founded in 1997, serving over 35,000 public and private sector clients across Spain and Portugal through 20+ offices with GDPR, LOPD, ISO 27001, and AI regulation advisory services.

Ownership category

akta.pro rank

Product category

Data Protection and Privacy Compliance Consulting

SIC

Services-Management Services (8741), Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

akta.pro secondary industry

Privacy Governance & Consent Management (HDADAIAI)

Keywords

• Data protection consulting
• GDPR compliance advisory
• Information security services
• External DPO services
• Regulatory compliance consulting

Headquarters

HQ city

Madrid

HQ country

Spain

HQ region

Europe

Offices21 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Professional Consulting and Advisory Services: PRODAT generates revenue through professional consulting engagements focused on data protection, privacy compliance, information security, AI governance, and regulatory adherence. Services are delivered by expert consultants across its network of over 20 offices in Spain and Portugal, serving more than 35,000 clients. Engagement types include ongoing compliance advisory, implementation projects, external DPO services, and training programs.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

PRODAT is a professional services firm that sells data protection, privacy, and information security consulting to organizations across Spain and Portugal. Its core offerings are compliance advisory on RGPD/GDPR, LOPD/LOPDGDD, ISO 27001, ENS, and the EU AI Regulation, plus outsourced external DPO services, an ethical whistleblowing channel, and professional training programs, delivered through a 20+ office national consulting network.

Product overview

PRODAT is a data protection and regulatory compliance consulting services company offering a portfolio of advisory and implementation services. The core offerings center on data protection and privacy compliance (including GDPR/RGPD and LOPDGDD), corporate compliance, and information security (ISO 27001, ENS). Supporting services include an ethical whistleblowing channel, external DPO services, AI regulation compliance advisory, electronic administration, e-commerce compliance, anti-money laundering, training, trademark/patent registration, IT law advisory, SIGPAC platform services, and Corebos CRM implementation. The company operates with 20+ offices across Spain and Portugal serving over 35,000 clients since 1997.

Differentiator

Problem solved

Functional benefit

Brands

• Pacto Digital: A digital pact initiative offered by PRODAT focusing on digital compliance and governance.
• Canal Ético Prodat
• Corebos
• Plataforma SIGPAC

Products and services

• Data Protection Services (Protección de Datos) Core data protection and privacy compliance consulting services including GDPR (RGPD) and LOPDGDD implementation, security measures, and ongoing compliance supervision for organizations handling personal data.
• Compliance Regulatory compliance services helping organizations meet legal requirements across areas including anti-money laundering, electronic commerce regulations, and corporate governance.
• Information Security / ISO 27001 (Seguridad de la Información) Information security management services including ISO 27001 certification support, implementation of security measures, and ENS (Esquema Nacional de Seguridad) compliance for Spanish public sector entities.
• Training (Formación) Professional training services on data protection regulations, compliance requirements, and privacy best practices for employees and management.
• Canal Ético Prodat (Ethical Channel / Whistleblowing Hotline) Internal whistleblowing channel service allowing clients, employees, and suppliers to report concerns about business conduct, regulatory compliance, or ethics confidentially, including anonymous reporting options.
• EU AI Regulation Compliance (RIA) Consulting Advisory services helping organizations understand and comply with the EU Artificial Intelligence Regulation (RIA), including guidance on AI governance and risk management.
• External Data Protection Officer (DPO / DPD Externalizado) Outsourced Data Protection Officer (DPO) services providing organizations with expert external compliance oversight as required by GDPR.
• IT Law (Derecho Informático) Legal advisory services covering IT law matters including technology contracts, software licensing, and digital rights.
• Web, App, and E-commerce Compliance Regulatory compliance services for websites, mobile applications, and e-commerce platforms covering LSSI (Ley de Servicios de la Sociedad de la Información) requirements and electronic commerce regulations.
• Electronic Administration (Administración Electrónica) Electronic administration services helping public entities comply with ENS (Esquema Nacional de Seguridad) and ENI (Esquema Nacional de Interoperabilidad) requirements.
• Trademarks and Patents (Marcas y Patentes) Intellectual property registration and protection services including trademarks and patents filing and management.
• Anti-Money Laundering Prevention (Prevención Blanqueo de Capitales) Anti-money laundering compliance services including implementation of prevention measures and procedures.
• RGPD and Nueva LOPD Advisory Specialized advisory on GDPR (EU) and the new Spanish Data Protection Act (LOPDGDD) compliance requirements.

Segments1 record

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Scale indicators3 records

Recent moves5 records

Expansion highlights4 records

Emerging players

• OneTrust: Leading global privacy, security, and GRC technology platform offering consent management, DSAR automation, and AI governance tooling. Comparable through overlap on the end-customers and underlying problem (GDPR compliance), but operates as a software vendor rather than consulting services — making it more of a substitute/partner than a like-for-like rival.
• Securitas (compliance / DPO services in Iberia): Security services group that bundles data protection officer outsourcing, RGPD compliance, and ethical channel services for organizations in Spain. Comparable to PRODAT in offering external DPO and compliance-as-a-service, though distribution sits within a broader security services platform rather than a pure-play privacy consultancy.

Direct peers

• ECIJA: One of the largest Spanish-speaking law firms, with a substantial data protection, IT law, and technology regulatory practice serving Spanish and Portuguese clients. Directly comparable to PRODAT in customer base (Spanish enterprises and public administrations), service scope (DPO, GDPR, cybersecurity advisory), and Iberian geographic footprint.
• Aphaia: Specialist European data protection and privacy advisory firm offering DPO-as-a-service, RGPD/UK GDPR consulting, and AI governance. Directly comparable to PRODAT in service scope (DPO outsourcing, regulatory compliance) with similar mid-market client orientation, though primarily serving UK/EU rather than Iberia.
• Lefebvre (compliance practice): Spanish professional information and compliance services group offering data protection, RGPD, ISO 27001, and AML advisory. Directly comparable to PRODAT as a horizontal privacy/compliance consultancy serving the same Spanish SME and corporate client base with multi-disciplinary compliance offerings.
• DPO Consulting (Grupo DPO): Spanish specialist firm dedicated to outsourced Data Protection Officer (DPO) services and RGPD compliance, with multi-region office presence in Spain. Closely comparable to PRODAT in core service (external DPO), regulatory focus (GDPR/LOPDGDD), and target mid-market customer.

Broad incumbents

• PwC Spain (Risk & Regulatory / Privacy practice): Big Four firm with a substantial data protection, cybersecurity, and regulatory compliance practice in Spain and Portugal. Competes for the larger end of PRODAT's market and bundles privacy into broader transformation and risk engagements; broader portfolio but overlapping on RGPD/ISO 27001/AEI advisory.
• Deloitte Spain (Risk Advisory — Privacy & Cyber): Global professional services firm with a sizable Iberian privacy and cyber risk practice addressing GDPR, NIS2, AI Act, and ISO 27001. Comparable service line-up to PRODAT's core offerings but typically competing for enterprise and public-sector accounts beyond PRODAT's SME sweet spot.
• KPMG Spain (Risk & Compliance): Big Four firm with established data protection, ESG, and ISO 27001 consulting practices in Spain and Portugal. Comparable on regulatory advisory (RGPD, ENS) but generally operates at larger enterprise scale and as part of broader audit/tax/risk engagements.
• Garrigues (data protection practice): Largest Spanish law firm with a deep data protection, technology, and regulatory practice. Comparable to PRODAT on regulatory advisory (GDPR, LOPD, AI Regulation) but typically serves large enterprises and multinationals and embeds privacy within broader legal mandates.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/prodat
• Facebookfacebook.com/PRODAT
• LinkedInlinkedin.com/company/prodat

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about PRODAT