DS EXTERN
DS EXTERN GmbH is a Hamburg-based compliance consultancy founded in 2003 that provides external data protection officer services, DSGVO/GDPR and NIS2 advisory, and ISMS/DSMS consulting to over 100 German Mittelstand and mid-market companies, anchored by its proprietary DSdoku compliance documentation platform.
- Company typePrivate
- Founded2003
- HeadquartersHamburg, Germany
- Headcount1–10
- GTM typeB2B
- OfferingServices
What DS EXTERN does
DS EXTERN GmbH is a Hamburg-based, founder-led compliance consultancy founded in April 2003 by Marc Althaus, specializing in external data protection officer (Datenschutzbeauftragter) services, GDPR/DSGVO advisory, and information security management for the German Mittelstand and mid-market corporations. The firm operates with 1-10 employees, anchored by Managing Director Marc Althaus (over 20 years of DPO experience across 100+ companies), Senior Consultant Martin Schwöbel (LLM-qualified legal specialist), and Senior Consultant Markus d'Aße (management systems auditor), serving a stated customer base of more than 100 mid-market companies across diverse industries including audio equipment (Sennheiser), beverages (Messmer Tee), hospitality (DSR Hotel Group), logistics (Buss Group), building materials (ARDEX), and insurance (Martens & Prahl).
The firm's core product is DSdoku, a proprietary web-based compliance documentation platform that centralizes data protection concepts, processing activity registers, data processing agreements, and DSMS/ISMS documentation, with multi-standard support spanning GDPR, NIS2 (via VdS 10100), ISO 27001, ISO 9001, ISO 14001, DIN SPEC 27076, and VDA ISA/TISAX. DSdoku's basic version is bundled at no additional cost with consulting engagements, while an integrated Employee Compliance Module enables training scheduling, digital document signing, and policy acknowledgement tracking. Service revenue is generated through multi-year external DPO engagements (quote-based, sized by company complexity), discrete DSMS/ISMS implementation projects grounded in VdS 10000/10010, and training/awareness programs delivered via e-learning, webinars, and on-site sessions.
The go-to-market is sales-led direct consulting, supported by the company website (dsextern.de) and a complimentary initial consultation as lead conversion mechanism. The firm is privately held with no disclosed external investors, has a single Hamburg headquarters (Frapanweg 22), and operates in German and English with a focus on companies subject to GDPR regardless of geography. Revenue is not publicly disclosed; the business model is predominantly professional services revenue with a modest, sticky SaaS-style retention layer via the bundled DSdoku platform.
DS EXTERN firmographics
Firmographics- Name
- DS EXTERN
- Legal name
- DS EXTERN GmbH
- Website
- https://dsextern.de
- Company type
- Private
- Founded year
- 2003
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- DS EXTERN GmbH is a Hamburg-based compliance consultancy founded in 2003 that provides external data protection officer services, DSGVO/GDPR and NIS2 advisory, and ISMS/DSMS consulting to over 100 German Mittelstand and mid-market companies, anchored by its proprietary DSdoku compliance documentation platform.
- Ownership category
- akta.pro rank
DS EXTERN industry classification
Industry- Product category
- Data Protection & Compliance Consulting
- NAICS
- All Other Business Support Services (561499), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182)
- SIC
- Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Data Access Governance & Entitlement Management (DSPM / CIEM-for-Data) (HDADAFAG)
- akta.pro secondary industry
- Document Management Systems (DMS) (HDAEAGAA)
Keywords
Where DS EXTERN is headquartered
LocationHeadquarters
- HQ city
- Hamburg
- HQ country
- Germany
- HQ region
- Europe
Offices1 record
Markets served
DS EXTERN business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Marketing or Sales
Revenue model
- External DPO Services: Providing external data protection officers to companies as required by GDPR. The service handles all legally mandated tasks of a company data protection officer.
- Compliance Consulting: Advisory services for DSMS/ISMS implementation, NIS2 compliance, and general data protection and information security consulting.
- DSdoku Platform Subscription: Web-based compliance documentation platform. Basic version included at no additional cost for clients; premium features available for advanced management system requirements.
- Training and Awareness Programs: E-learning, webinars, and in-person training sessions on data protection and IT security awareness, including AI usage training.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | One time | Initial Consultation |
| Subscription | Monthly | DSdoku Basic |
| Other | Multi-year contract | External DPO Services |
Go-to-market motion2 records
Distribution channels2 records
Marketing channels3 records
DS EXTERN product offering
Product offeringCore offering
DS EXTERN provides external data protection officer (Datenschutzbeauftragter) services and compliance consulting to small and mid-market companies under GDPR/DSGVO. The firm delivers structured DSMS and ISMS implementation based on VdS standards, NIS2 advisory, and training programs, supported by DSdoku, a proprietary web-based compliance documentation platform provided at no additional cost to consulting clients.
Product overview
DS EXTERN offers a portfolio of data protection and information security services centered around its core web-based compliance management platform, DSdoku, combined with consulting services. The DSdoku platform serves as the central documentation hub for compliance management, supporting multiple standards (GDPR, NIS2, ISO 27001, VdS standards). Alongside the platform, DS EXTERN provides external data protection officer services, DSMS/ISMS consulting based on VdS standards, and flexible training/awareness programs (e-learning, webinars, on-site) including AI-specific training. The company targets SMEs and corporations, operating for over 20 years.
Differentiator
Problem solved
Functional benefit
Brands
- DSdoku: A compliance web portal for managing and documenting data protection management, data protection concepts, processing activity registers, and data processing agreements. Also supports various management system standards including VdS 10000, VdS 10010, VdS 10100 (NIS2), ISO 27001, ISO 9001, ISO 14001, and others.
Products and services
- External Data Protection Officer Services External data protection officer services that take over all legally required tasks of an in-house data protection officer for client companies, ensuring GDPR/DSGVO compliance without the overhead of hiring full-time staff.
- Data Protection Management System (DSMS) Consulting Consulting services for building and continuously improving a data protection management system based on VdS 10010 standard, helping clients efficiently meet GDPR requirements, minimize legal risks, and reduce implementation costs.
- Information Security Management System (ISMS) & NIS2 Consulting Information security consulting services using VdS 10000 standard to establish effective ISMS structures and support clients on the path to NIS2 compliance and certification, including VdS 10100 NIS2 implementation.
- DSdoku Compliance-Web-Portal Proprietary web-based compliance documentation platform for managing data protection processes, processing activity registers, data processing agreements, and other privacy-relevant documents. Supports VdS 10000, VdS 10010, VdS 10100 (NIS2), ISO 27001, ISO 9001, ISO 14001, DIN SPEC 27076, and VDA ISA/TISAX standards.
- Training and Awareness Programs Data protection and IT security awareness training delivered via e-learning platform, webinars, or on-site training, including AI-specific training to sensitize teams to responsible use of artificial intelligence. Supports SCORM-format custom training integration.
Quantifiable outcome
- Over 100 mid-market companies served across various industries
- +2 more outcomes
Companies that use DS EXTERN
Customer profileNamed customers12 records
Segments5 records
Ideal customer profiles4 records
DS EXTERN technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature3 records
DS EXTERN partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- VdS Schadenverhütung GmbHcoreDS EXTERN works extensively with VdS standards for information security and data protection management. The company implements VdS 10000 (ISMS for SMEs), VdS 10010 (DSMS for SMEs), and VdS 10100 (NIS2 implementation) standards. DS EXTERN's internal information security follows VdS 10000 guidelines, and the DSdoku platform supports documentation for these standards.
Scale indicators4 records
Recent moves7 records
Expansion highlights5 records
DS EXTERN competitors and assessment
Company assessmentDirect peers
- Proliance: German data protection management software provider targeting SMEs with workflow tooling for DSGVO documentation — a direct competitor to DS EXTERN's DSdoku platform component.
- DataGuard: Munich-based privacy and compliance SaaS that combines a software platform with external DPO services for SMEs and mid-market companies in the DACH region — directly overlapping DS EXTERN's Mittelstand value proposition.
- Securys: UK-based data privacy and cybersecurity consultancy offering DPO-as-a-service and ISO 27001/NIS2 advisory — comparable services model targeting European mid-market clients.
- Datenschutz Nord GmbH: German external data protection officer and DSMS consultancy serving SMEs and mid-market with similar DSGVO compliance offerings, headquartered in northern Germany.
Broad incumbents
- TrustArc: US-headquartered privacy management SaaS with European operations covering DSGVO program management — a broader incumbent competing for the same mid-market compliance budget.
- KPMG: Big 4 firm with a substantial German privacy and cybersecurity advisory practice serving mid-market and enterprise NIS2/GDPR engagements — an adjacent incumbent competing for the same buyers.
- OneTrust: Global privacy management platform with strong EU presence, offering consent, DPO workflow, and DSGVO automation — overlaps with DS EXTERN's DSdoku value proposition at a much larger scale.
- TÜV SÜD: Global testing, inspection, and certification body offering DSGVO and ISO 27001 advisory and certification — a larger-scale incumbent competing in compliance consulting.
- EQS Group: Publicly listed German compliance SaaS provider offering broader regulatory compliance, integrity line, and data protection tooling; competes with DS EXTERN in mid-market and enterprise compliance documentation.
Emerging players
- Secfix: Berlin-based compliance automation SaaS focused on ISO 27001 and NIS2 for SMEs — an emerging competitor targeting the same Mittelstand compliance workflow DS EXTERN serves.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
DS EXTERN social profiles
Digital presenceDS EXTERN compliance and trust
Trust signalCompliance9 records
DS EXTERN financial estimates
Financial estimateRevenue estimate
Valuation estimate
DS EXTERN leadership team
Management profileNumber of profiles
Profiles3 records
DS EXTERN funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
DS EXTERN M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about DS EXTERN
What does DS EXTERN do?
DS EXTERN provides external data protection officer (Datenschutzbeauftragter) services and compliance consulting to small and mid-market companies under GDPR/DSGVO. The firm delivers structured DSMS and ISMS implementation based on VdS standards, NIS2 advisory, and training programs, supported by DSdoku, a proprietary web-based compliance documentation platform provided at no additional cost to consulting clients.
Is DS EXTERN a public or private company?
DS EXTERN is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was DS EXTERN founded?
DS EXTERN was founded in 2003. It employs 1 to 10 people.
Where is DS EXTERN based?
DS EXTERN is headquartered in Hamburg, Germany, in the Europe region.
How does DS EXTERN make money?
Four revenue lines are on record. External DPO Services are the primary driver. The others are compliance Consulting, DSdoku Platform Subscription and training and Awareness Programs.
Who are DS EXTERN's main competitors?
Direct peers on record are Proliance, DataGuard, Securys and Datenschutz Nord GmbH. Broad incumbents are TrustArc, KPMG, OneTrust, TÜV SÜD and EQS Group. Secfix is listed as an emerging player.
Does DS EXTERN have an API?
No public API is recorded for DS EXTERN.
What industry is DS EXTERN in?
DS EXTERN's product category is Data Protection & Compliance Consulting. Its primary akta.pro industry code is HDADAFAG, Data Access Governance & Entitlement Management (DSPM / CIEM-for-Data), with a secondary code of HDAEAGAA, Document Management Systems (DMS). Its NAICS code is 561499 and its SIC code is 7370.