365TRUST

What 365TRUST does

365TRUST is a Milan-headquartered professional consultancy firm specializing in privacy, data protection, cybersecurity, and regulatory compliance services. Founded in 2013 and reorganized into its current form in 2021, the company operates through a network of approximately 30 offices spanning more than 25 countries across Europe, North America, Asia, and Africa. It serves six primary verticals: healthcare and life sciences, banking/insurance/fintech, industrial firms and SMEs, individual professionals and associations, education and universities, and public administration. Its service portfolio is organized into six business units — Legal & Compliance, Privacy & Data Protection, Cyber & Intelligence, Audit & Certification, Governance & Awareness, and Training & Knowledge — covering advisory, managed security (CISO-as-a-Service, SOC-as-a-Service), audit (ISO/IEC 27001, PCI-DSS, ISDP©10003), training courses, and DPO appointments.

Underlying the service portfolio are patented technologies for ethical data processing held by the firm, alongside an ISDP©10003 GDPR certification scheme accredited under ISO/IEC 17065:2012 and personnel certified under ISO/IEC 17024:2012 for Lead Auditor, Privacy Officer, and Privacy Consultant qualifications. The firm's deliverables are primarily professional services rather than packaged software, though it operates a Privacy Support Center web portal integrated with client websites and delivers recurring managed-security and threat-intelligence subscriptions.

365TRUST's revenue model is professional services fee-for-engagement, with pricing not publicly disclosed and quotations issued per project. Go-to-market is direct enterprise field sales, supported by content marketing (multilingual news portal, cyber alerts, newsletter), social media presence on LinkedIn/Twitter/Facebook, and participation in industry events such as Privacy Day Forum and EXPO 2025 Osaka. The company is privately held (legal entity: 365TRUST EUROPE SRL, Italy), with no disclosed funding rounds, parent entity, or institutional investors, and relies on a 200+ professional network augmented by a leaner core staff of 11-50.

Name

365TRUST

Legal name

365TRUST EUROPE SRL

Website

https://365trust.me

Company type

Private

Founded year

2013

Operating status

Operating

Headcount range

11–50 employees

Short description

365TRUST is a Milan-based professional consultancy founded in 2013 that delivers privacy, data protection, cybersecurity, audit, certification, and training services across 25+ countries, serving healthcare, finance, public sector, and enterprise clients.

Ownership category

akta.pro rank

Product category

Privacy and Data Protection Consulting Services

SIC

Services-Management Services (8741)

akta.pro primary industry

Privacy Governance & Consent Management (HDADAIAI)

akta.pro secondary industries

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH), Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL), Data Privacy & Data Protection (e.g., GDPR/CCPA) (EDABADAC), Legal, Governance, Privacy & Audit Certifications (EDAAANAN)

Keywords

• Privacy compliance consulting
• Data protection services
• Cybersecurity advisory
• GDPR audit certification
• Information security training

Headquarters

HQ city

Milano

HQ country

Italy

HQ region

Europe

Offices30 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Professional Consultancy Services: Consultancy services across privacy, data protection, cybersecurity, legal compliance, and governance domains. Services are delivered through a global network of professionals in 25+ countries.
2. Training and Knowledge Services: Training courses including ISO/IEC 27001, GDPR, and Social Engineering awareness training for professionals.
3. Audit and Certification Services: Audit services for GDPR compliance, ISO/IEC 27001, and certification schemes including ISDP©10003 and PCI-DSS.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels5 records

Core offering

365TRUST is a professional consultancy delivering privacy, data protection, cybersecurity, audit, certification, and training services to organizations across 25+ countries. Service offerings span six business units: Legal & Compliance, Privacy & Data Protection, Cyber & Intelligence, Audit & Certification, Governance & Awareness, and Training & Knowledge, with a network of 200+ professionals.

Product overview

365TRUST is a professional consultancy firm offering a comprehensive portfolio of privacy, data protection, cybersecurity, compliance, and governance services. The company operates across six main business units: Legal & Compliance (advisory on EU regulations including GDPR, Whistleblowing, Italian law), Privacy & Data Protection (Privacy Support Center, DPO services, consultancy), Cyber & Intelligence (CISO as a Service, SOC as a Service, threat intelligence, penetration testing, TSCM), Audit & Certification (PCI-DSS, ISDP©10003 GDPR certification, ISO 27001 audits), Governance & Awareness (data governance, architecture, quality, big data), and Training & Knowledge (ISO 27001, GDPR, and Social Engineering courses). 365TRUST provides these services through a global network spanning more than 25 countries with over 200 professionals. The offerings are primarily professional services rather than software products, including both advisory consulting and certification services.

Differentiator

Problem solved

Functional benefit

Products and services

• Privacy Support Center A centralized service providing organizations with a single point of reference on personal data protection and information security through a dedicated web portal integrated with the client's institutional website.
• Data Protection Officer Service Service to assist controllers and processors in appointing and fulfilling the obligations of a Data Protection Officer (DPO) as required by data protection regulations.
• Representative in the Territory Service for controllers and processors not established in specific territories to appoint a representative to represent them vis-à-vis data subjects and national supervisory authorities.
• Consultancy on Data Protection Advisory service to help controllers and processors comply with data protection principles when processing personal data via websites or applications.
• CISO as a Service Provides organizations with access to high-level IT security expertise without the need to hire a full-time Chief Information Security Officer, particularly useful for small- and medium-sized enterprises.
• SOC as a Service Security Operations Centre as a Service is an outsourcing model for IT security management where an external provider monitors, detects, and responds to security incidents on behalf of the organization.
• Phishing Simulation & Awareness Service designed to raise awareness and train employees on the risks of phishing attacks by simulating attacks to assess vulnerability and provide targeted training.
• Smishing Simulation & Awareness Service focusing on raising awareness and training employees on risks associated with smishing (phishing via SMS) to protect organizations against social engineering attacks.
• Cyber Threat Intelligence (CTI) Service focused on collection, analysis, and utilization of cyber threat intelligence information to provide organizations with an in-depth understanding of current and potential threats.
• Domain Threat Intelligence (DTI) Service focused on collecting, analyzing, and utilizing information about threats associated with Internet domains to help organizations identify and mitigate threats exploiting domains for malicious activities.
• Penetration Testing (PT) Computer security service that simulates real attacks on an organization's computer systems to identify and assess vulnerabilities that can be exploited by attackers.
• Vulnerability Assessment (VA) Information security service aimed at identifying, classifying, and assessing vulnerabilities in a computer system to understand and mitigate information security risks.
• TSCM - Electronic Surveillance Countermeasures Technical Surveillance Counter-Measures (TSCM) including activities designed to detect devices capable of fraudulently capturing information (audio, video, data) in a given environment.
• Smartphone and Tablet Electronic Countermeasures Electronic countermeasure service for mobile devices to detect and mitigate fraudulent information capture capabilities.
• Certification PCI-DSS Service assisting companies in achieving compliance with the Payment Card Industry Data Security Standard for protecting consumer payment and financial data.
• Certification GDPR – ISDP©10003 Voluntary certification tool for assessing and demonstrating compliance with GDPR regarding personal data processing, providing a guarantee to customers.
• Audit ISO/IEC 27001 Auditing service for compliance with requirements to establish, implement, maintain, and continuously improve an information security management system per ISO/IEC 27001:2022 standard.
• Audit Regulation (UE) 2016/679 Audit service for compliance of company products, processes, or services with the principles of GDPR on protection of natural persons regarding data processing.
• Audit Whistleblowing Regulation Compliance audit service for correct enforcement of EU Directive 2019/1937 on protection of persons reporting breaches of Union law.
• Audit Italian Administrative Liabilities – MOG 231 Compliance audit service for correct implementation of Legislative Decree No. 231/2001 on administrative liability of legal persons and companies.
• Data Governance Service covering the exercise of authority and control in planning, monitoring, and implementation of data asset management.
• Data Architecture Service covering organized arrangement of components for optimizing function, performance, feasibility, costs, and aesthetics of data structures and systems.
• Data Quality Service covering complex and interrelated processes enabling organizations to use data to achieve strategic objectives, including design, storage, and secure access.
• Big Data and Data Science Service using Data Science techniques to provide predictive, real-time, or model-based capabilities for understanding organizational future trajectories.
• ISO/IEC 27001 Training Course Training course designed to help organizations understand and implement the ISO/IEC 27001 standard requirements for an information security management system (ISMS).
• GDPR Training Course Training course designed to help organizations and employees understand and comply with the European Union's General Data Protection Regulation.
• Training Course in Social Engineering Training course educating employees on social engineering techniques used by cyber criminals to manipulate people and obtain confidential information.
• Regulation (EU) 2016/679 – GDPR Advisory Advisory service on implementation of GDPR to help organisations understand, implement, and maintain compliance with European data protection regulations applicable from 25 May 2018.
• Whistleblowing Regulation Advisory Advisory service on Legislative Decree No. 24/2023 implementing EU Directive 2019/1937 on protection of persons reporting breaches of Union Law.
• Italian Anticorruption Law Advisory Advisory service on Law No. 190/2012 for prevention and suppression of corruption and illegality in Italian public administration.

Segments6 records

Ideal customer profiles6 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

One partnership is on record.

• EXPO 2025 OsakaflagshipStrategic or Co-development Partner · 10 March 2025365TRUST was an Official Partner of EXPO 2025 Osaka, with a dedicated pavilion for San Marino representing their presence at this major international event.

Scale indicators2 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Bureau Veritas: Major global TIC firm with a dedicated cybersecurity and privacy practice including GDPR/ISO 27001 audits, certification, and compliance services. Closely comparable in the audit-and-certification leg of 365TRUST's portfolio.
• Advisera: Compliance and standards training/e-learning company specializing in ISO 27001, GDPR, and other privacy/security curricula — direct comparability on the training-leg of 365TRUST's revenue, including GDPR and Social Engineering courses.
• DNV: Global TIC organization running accredited ISO 27001, GDPR, and cybersecurity certification schemes — a near-direct functional overlap with 365TRUST's ISDP©10003 and ISO/IEC 27001 audit/certification services.
• TÜV SÜD: Global TIC organization with cybersecurity testing, ISO 27001 certification, GDPR-related advisory and training services across multiple industries. Operates the same combination of audit, certification, and managed security offerings that 365TRUST provides, often competing head-to-head on ISO and cybersecurity mandates.
• RINA Services: Italian-headquartered TIC firm offering certification, audit, and conformity-assessment services globally. Closely comparable in origin and service mix; competes with 365TRUST on Italian/European certification engagements, including cybersecurity-adjacent ones.
• BSI Group: UK-based testing, inspection and certification (TIC) firm with a strong cybersecurity and information-security line (ISO 27001 audits, training, and managed services). BSI is one of the closest comparables for 365TRUST's audit/certification + training + consulting mix, particularly in ISO standards.

Emerging players

• TrustArc: Privacy compliance platform offering consent management, privacy program automation, and professional services for GDPR/CCPA. Useful benchmark for how a privacy services firm can attach software to consulting engagements.
• OneTrust: Privacy, security and governance software platform that has expanded into adjacent professional services for privacy program implementation — represents the SaaS productization path that 365TRUST's patented ethical data-processing technology could follow.

Broad incumbents

• Deloitte (Cyber & Privacy practice): Big 4 advisory firm with a global cyber risk, privacy, and data protection practice delivering GDPR/CCPA advisory, ISO 27001, and managed security services. The dominant incumbent 365TRUST competes against on enterprise-mandate scale.
• KPMG (Privacy/Data Protection services): Big 4 firm with a global privacy advisory practice covering GDPR compliance, DPO services, and information-security certifications. Represents the scaled, multi-country alternative that mid-size consultancies must displace.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/365TRUSTme
• Facebookfacebook.com/365TRUST
• LinkedInlinkedin.com/company/365trust

Compliance15 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about 365TRUST