Ituso

What Ituso does

Ituso GmbH is a privately held German business consulting firm headquartered in Dachau near Munich, founded in 2015 and led by managing directors Mirko Tasch and Florian Padberg. The company provides advisory and outsourced compliance services centered on data protection (GDPR and German BDSG) and information security, serving primarily small and medium-sized enterprises (KMU) across the D-A-CH region (Germany, Austria, Switzerland). Its flagship offering is the External Data Protection Officer (Externer Datenschutzbeauftragter) service, in which certified professionals assume the legally mandated DPO role on behalf of clients that lack internal resources. The portfolio extends to data protection audits, a productized one-day Beratertag assessment engagement, ISO 27001 ISMS consulting, external information security officer services, Article 27 EU Representative services for non-EU firms, and employee training via seminars and webinars. A proprietary data protection management software (DSM-Online) centralizes documentation, process management, and compliance tracking for client engagements.

The underlying technology stack is process-and-people-centric rather than software-centric: DSM-Online serves as an internal/portal documentation layer, while delivery is handled by a distributed team of certified DPOs, coordinators, consultants, auditors, and project managers supported by a network of regional partners across German secondary cities (Hamburg, Berlin, Hannover, Stuttgart, Köln, Dresden). The Swiss market is served through a sister company, ituso Schweiz GmbH in Uster, which handles Switzerland- and Liechtenstein-specific matters including the nDSG regime effective September 2023. The company holds no disclosed patents or registered trademarks.

Revenue is generated through retainer-based recurring fees for ongoing external DPO engagements and project-based fees for consulting, audits, the Beratertag, and training services. Pricing is custom and tied to client size and scope, with multi-year contracts typical for DPO retainers; a free initial consultation (booked via Calendly) feeds a 48-hour customized proposal inside-sales motion. Marketing relies on local SEO-optimized service pages, a consent-based email newsletter for SMBs, organic social (LinkedIn, Facebook, Instagram, X), and Google Business Profile reviews. The firm is management-led with no institutional investors, funding rounds, or M&A activity disclosed in the source material.

Name

Ituso

Legal name

ituso GmbH

Website

https://ituso.de

Company type

Private

Founded year

2015

Operating status

Operating

Headcount range

11–50 employees

Short description

Ituso GmbH is a privately held German consulting firm, founded in 2015 and headquartered in Dachau, that provides outsourced data protection (GDPR/BDSG) and information security advisory services — chiefly external DPO retainers, audits, and ISO 27001 consulting — to small and medium-sized enterprises across the D-A-CH region.

Ownership category

akta.pro rank

Product category

Data Protection and Information Security Consulting

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

ITSM Governance, Compliance & Audit Readiness (BPAEAJAM)

akta.pro secondary industries

Service Desk & ITSM Outsourcing (BPAEAMAF), Certified Compliance & Reporting Services (R2/e-Stewards, Audit, ESG) (BPALAIAL), IT Service Management (ITSM) Platforms (HDAEALAA)

Keywords

• External data protection officer
• GDPR compliance consulting
• Information security consulting
• ISO 27001 ISMS
• Data protection audit

Headquarters

HQ city

Dachau

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D

Revenue model

1. External Data Protection Officer Services: Ongoing retainer-based services where Ituso provides certified external data protection officers who manage GDPR compliance for clients on a continuous basis. Pricing is customized based on company size and scope of services.
2. Data Protection Consulting: Project-based consulting engagements for data protection assessments, GDPR implementation, data protection audits, and employee training. Includes the Beratertag (consultation day) one-day assessment service.
3. Seminars and Webinars: Data protection training sessions and webinars for client employees. Conducted in-person or via platforms like Zoom, Webinaris, and MS Teams.
4. Newsletter Subscription: Free data protection practical tips newsletter for SMEs delivered via email, with consent-based marketing.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels4 records

Core offering

Ituso GmbH provides outsourced (external) data protection officer services (externer Datenschutzbeauftragter), data protection consulting and audits, information security consulting including ISO 27001 ISMS implementation, IT security advisory, and EU representation under Article 27 GDPR for small and mid-sized enterprises in the D-A-CH region. Service delivery is supported by a proprietary cloud platform called DSM-Online for data protection management.

Product overview

Ituso is a consulting firm (not a software company) offering a portfolio of data protection and information security services. The core offering is the External Data Protection Officer service (Externer Datenschutzbeauftragter), where certified professionals assume the legally mandated DPO role for client companies. Complementing this are consulting services including Datenschutzberatung (advisory), Datenschutz-Audit (compliance audits), and Beratertag (structured advisory day engagements). The company also provides EU Representative services for non-EU companies (Article 27 GDPR), employee training via events/webinars, and information security services including external Information Security Officers, IT Security consulting, and ISO 27001 ISMS implementation. A free Datenschutz-Newsletter delivers practical GDPR tips to subscribers. All services are delivered by experienced consultants through a network of regional offices across the DACH region (Germany, Austria, Switzerland).

Differentiator

Problem solved

Functional benefit

Products and services

• Externer Datenschutzbeauftragter (External Data Protection Officer) Outsourced (external) data protection officer service for small and mid-sized enterprises in Germany, Austria and Switzerland that are required to appoint a Datenschutzbeauftragter under GDPR (DSGVO). Ituso assumes the statutory DPO function on a recurring basis, providing ongoing compliance support, documentation, and regulatory contact.
• Datenschutzberatung (Data Protection Consulting) Project-based data protection consulting for SMB clients addressing specific GDPR/DSGVO questions, processing operations, and compliance projects on an as-needed basis.
• Datenschutz-Audit (Data Protection Audit) Standalone audit service that assesses a client's current GDPR (DSGVO) compliance posture, identifies gaps, and produces an audit report with remediation recommendations.
• Beratertag (Consultant Day) Day-rate consulting service that allows clients to purchase discrete days of senior data protection / information security consulting time for specific issues or projects.
• EU-Vertreter nach Art. 27 DSGVO (EU Representative Article 27) Designated EU representative service under Article 27 of the GDPR, provided to non-EU based controllers and processors that offer goods or services to EU data subjects or monitor their behavior and are required to appoint an EU-based representative.
• Externer Informationssicherheitsbeauftragter (External Information Security Officer) Outsourced information security officer function for SMB and mid-market clients, providing ongoing security governance, risk management, and security policy oversight without the cost of a full-time CISO hire.
• IT-Sicherheit (IT Security Consulting) IT security consulting service covering security assessments, controls hardening, and remediation guidance for SMB and mid-market organizations in the D-A-CH region.
• ISMS nach ISO 27001 End-to-end ISMS implementation and certification support per ISO 27001, including scope definition, risk assessment, controls mapping, policy documentation, and audit preparation for organizations seeking ISO 27001 certification.

Quantifiable outcome

• Complete GDPR compliance within short timeframes
• +2 more outcomes

Named customers3 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration8 records

Feature2 records

Partnerships

One partnership is on record.

• ituso Schweiz GmbHcoreStrategic or Co-development PartnerSister company located in Uster, Switzerland that serves clients in Switzerland and Liechtenstein. Handles Swiss-specific data protection matters including the new Swiss Data Protection Act (nDSG) effective September 2023. Allows ituso GmbH to serve the entire D-A-CH region.

Scale indicators3 records

Recent moves7 records

Expansion highlights5 records

Broad incumbents

• OneTrust: Global leader in privacy management software, offering automated GDPR compliance, DPO workflow tools, and consent management platforms. Represents a tech-enabled alternative to Ituso's manual DPO services; competes on the documentation/compliance side of the value chain.
• TrustArc: Established privacy compliance and risk management SaaS provider serving enterprises globally with GDPR, CCPA and other regulatory programs. Comparable to Ituso on the compliance management dimension but operates as a software platform rather than a consulting firm.
• KPMG (Privacy & Data Protection practice): Big Four advisory firm with a global privacy and data protection consulting practice offering DPO advisory, GDPR implementation, and compliance audits. Represents the scaled, brand-led incumbent alternative to Ituso's boutique offering.

Direct peers

• HiSolutions: German IT security and information security consulting firm offering ISO 27001 ISMS consulting, external CISO/InfoSec officer services, and security assessments. Directly comparable to Ituso's information security practice.
• Datenschutzkanzlei: German law firm and consultancy focused exclusively on data protection and GDPR compliance, serving SMEs across Germany. Comparable in dedicated DPO and GDPR advisory positioning, though with a stronger legal-practice angle than Ituso.
• GDD (Gesellschaft für Datenschutz und Datensicherheit): Long-established German data protection and data security society/consultancy offering DPO services, training, and compliance advisory. Comparable in core external DPO offering and SME/mid-market focus in the German market.
• Datenschutz Nord Group: Largest dedicated external DPO service provider in Germany, offering outsourced data protection officers and compliance consulting to SMEs and mid-market clients. Directly comparable to Ituso in core DPO-as-a-service model and SMB target segment.
• intersoft consulting: German consulting firm specializing in data protection and information security services, including external DPO offerings for SMEs. Comparable in target geography (Germany), customer profile, and service mix spanning GDPR and ISO 27001 work.

Emerging players

• DPOrganizer: Privacy management software platform purpose-built for DPOs and compliance teams to manage GDPR documentation, ROPA and DPIA workflows. Adjacent/competing offering to Ituso's DSM-Online tool, with potential channel-partner or substitute dynamics.
• Securys: UK-based data privacy and cybersecurity consultancy offering DPO-as-a-service, GDPR advisory and ISO 27001 consulting to SMEs. Comparable in service portfolio but operates in the UK market rather than D-A-CH.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Ituso