What Bit Informatik GmbH does

Bit Informatik GmbH is a privately held German software company headquartered at Am Wissenschaftspark 32, Trier, and registered as bit Informatik GmbH at Amtsgericht Wittlich (14 HRB 3450). The company sells a single flagship product, bit-Compliance, a modular web-based compliance management platform with a shared workflow engine and database that links ten modules: Benutzerverwaltung (Identity & Access Management), Beziehungsmanagement, Datenschutzmanagement, Drittparteienmanagement, Informationssicherheit, Internes Kontrollsystem, IT-Betrieb, Notfallmanagement, Organisationshandbuch, and Projektmanagement. The platform is pre-configured for German and EU regulatory frameworks including MaRisk, DORA, NIS-2, BSI IT-Grundschutz, EBA guidelines, and DSGVO, with read/write integrations to Windows/Active Directory, HCL Domino, Microsoft 365 Teams, Microsoft Graph, and IMAP. bit-Compliance was first made productively available in 2020 and most recently released as Version 26.1 in June 2026.

The company monetizes bit-Compliance through annual subscription module licensing with a 20% annual maintenance fee, fixed-price professional services for implementation, data preparation, and test environment setup (EUR 300 to EUR 6,000 per service), and fee-based training workshops and webinars priced from EUR 250 (half-day) to EUR 1,000 (two-day basic training). Go-to-market is direct enterprise sales only, with no reseller or distributor channels, targeting banks and financial institutions as the primary segment and energy providers, healthcare organizations, and government agencies as secondary verticals, all within the DACH region. Marketing is driven by the corporate website, an active webinar series, and an annual Weiterentwicklungsworkshop for existing users.

Bit Informatik GmbH has over 30 years of operating experience in regulatory compliance, 11-50 employees, no disclosed parent company, subsidiaries, funding, or acquisitions, and is led by legal representative and Managing Director Roland Hein. Reference customers include Bank 1 Saar, BAG Bankaktiengesellschaft, and Sparkasse Merzig-Wadern, the last of which became the first credit institution in the German Drei-Säulen-Modell to upload its information register to the BaFin MVP portal using bit-Compliance in early 2025.

Name

Bit Informatik GmbH

Legal name

bit Informatik GmbH

Website

https://bit-informatik.de

Company type

Private

Operating status

Operating

Headcount range

11–50 employees

Short description

Bit Informatik GmbH is a privately held German software vendor selling bit-Compliance, a modular web-based platform that helps banks, energy providers, healthcare organizations, and government agencies in the DACH region implement MaRisk, DORA, NIS-2, BSI IT-Grundschutz, EBA, and DSGVO requirements.

Ownership category

akta.pro rank

Product category

Compliance Management Software

NAICS

Software Publishers (5132), Custom Computer Programming Services (541511)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming Services (7371)

akta.pro primary industry

Cloud Compliance, Audit & Continuous Controls Monitoring (CCM/GRC) (HDABAHAI)

akta.pro secondary industries

Fraud, Risk, KYC/AML & Compliance Platforms (BPAMAFAI), Key Management Systems (KMS) & Key Lifecycle (HDADAFAC)

Keywords

• Compliance management software
• Governance risk compliance
• Regulatory compliance platform
• Identity access management
• Internal control systems

Headquarters

HQ city

Trier

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Software Licenses/Subscriptions: Annual subscription model for bit-Compliance modules. Modules are priced by billing tier with annual maintenance contracts at 20% of the current list/module price. Customers select modules based on their regulatory requirements.
2. Professional Services - Implementation: One-time fees for software implementation, data migration, and configuration services. Includes data preparation (3,600 EUR), implementation (2,400 EUR), and test environment setup (300 EUR).
3. Training and Webinars: Fee-based training workshops and webinars on bit-Compliance modules. Pricing ranges from 250 EUR for half-day sessions to 1,000 EUR for two-day basic training courses.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

Bit Informatik GmbH develops and sells bit-Compliance, a modular web-based compliance management platform covering German and EU regulatory frameworks (MaRisk, DORA, NIS-2, BSI IT-Grundschutz, EBA guidelines, DSGVO/GDPR). The platform consists of ten integrated modules covering user administration, relationship management, data protection, third-party management, information security, internal control systems, IT operations, emergency management, organizational documentation, and project management, sold via annual subscriptions with implementation, training, and data migration services.

Product overview

bit-Compliance is a modular web-based compliance management platform developed by Bit Informatik GmbH. The platform consists of a core system with 10 integrated modules: Benutzerverwaltung (User Administration/Identity & Access Management), Beziehungsmanagement (Relationship Management), Datenschutzmanagement (Data Protection Management), Drittparteienmanagement (Third-Party Management), Informationssicherheit (Information Security), Internes Kontrollsystem (Internal Control System), IT-Betrieb (IT Operations), Notfallmanagement (Emergency Management), Organisationshandbuch (Organizational Handbook), and Projektmanagement (Project Management). The modules share a common workflow engine and database, allowing cross-module linking of resources like business processes, applications, IT systems, contracts, and projects. The platform supports regulatory frameworks including MaRisk, DORA, NIS-2, BSI IT-Grundschutz, EBA guidelines, and DSGVO across banking, energy, healthcare, and government sectors.

Differentiator

Problem solved

Functional benefit

Products and services

• bit-Compliance A modular web-based compliance management platform supporting regulatory requirements including MaRisk, DORA, NIS-2, BSI IT-Grundschutz, and DSGVO across banking, energy, healthcare, and government sectors. Sold via annual module subscriptions with add-on services.
• Benutzerverwaltung (User Administration Module) Identity and access management module with cross-application target role concept (Soll-Rollenkonzept), supporting personnel changes, periodic recertification of permissions, and target-actual (IST/SOLL) comparison of access rights.
• Beziehungsmanagement (Relationship Management Module) Central management of B2B relationships with revision-safe archiving of business communication, including companies, contacts, contact information, and communication entries.
• Datenschutzmanagement (Data Protection Management Module) Data protection requirements module featuring processing activity directory aligned to business processes, data protection impact assessment with threshold analysis and risk assessment, and documentation of completed legitimate interest assessments.
• Drittparteienmanagement (Third-Party Management Module) Central outsourcing management and operational third-party control with contract management, SLA tracking, service level reporting, risk analysis for service relationships, and creation of outsourcing registers per MaRisk AT 9 and DORA information registers.
• Informationssicherheit (Information Security Module) Information security module covering information pool mapping, protection needs determination, risk-oriented measure catalogs, and support for BSI IT-Grundschutz methodology for protecting critical infrastructures.
• Internes Kontrollsystem (Internal Control System Module) Module for identifying, avoiding, and controlling risks in internal processes with business process mapping, risk assessment, control definitions, and control tests covering first, second, and third lines of defense.
• IT-Betrieb (IT Operations Module) Module for managing IT hardware inventory including ticket system for internal/external error and disturbance handling with status and priority management.
• Notfallmanagement (Emergency Management Module) Business Continuity Management module with Business Impact Analysis (BIA), scenario-based emergency concepts, emergency simulation documentation, and automated annual exercise planning.
• Organisationshandbuch (Organizational Handbook Module) Documentation module for organizational policies, guidelines, work instructions, board decisions, internal processes, and regulatory requirements (MaRisk and DORA) with revision control.
• Projektmanagement (Project Management Module) Project planning module considering risk landscape in critical infrastructure (KRITIS) with project/task management, Gantt charts, risk and measure considerations, and links to resources from other modules.
• bit-Compliance Implementation and Data Migration Services One-time professional services for installing bit-Compliance, configuring workflows, migrating legacy compliance data from prior systems (e.g., RiMaGo), and setting up test environments for evaluating new modules and version updates.
• bit-Compliance Training Workshops and Webinars Paid training workshops and webinars covering bit-Compliance modules and regulatory topics (e.g., Benutzerverwaltung, Informationssicherheit, Internes Kontrollsystem), delivered by company instructors including Roland Hein, Thomas Brausch, Matthias Dahm, and Niels Liégeois.

Named customers3 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

AI capability1 record

Feature4 records

Partnerships

One partnership is on record.

• S-FinanzgruppecoreTechnology or IntegrationPre-configured integration with the S-Finanzgruppe (German Savings Banks Finance Group). The Benutzerverwaltung module is delivered pre-configured with 137 applications from the S-Finanzgruppe and cooperative financial group (Genossenschaftsbanken).

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Onspring: Onspring is a no-code GRC platform offering risk, compliance, audit, and vendor management modules with workflow automation — closely comparable to bit-Compliance's modular, configurable compliance approach. Both target mid-market and enterprise regulated buyers with web-based deployment and workflow engines.
• LogicGate: LogicGate's Risk Cloud is a modular GRC platform with workflow-driven apps for compliance, risk, third-party, and internal controls. The no-code configurability and module library align tightly with bit-Compliance's ten-module workflow architecture.

Broad incumbents

• SAP GRC: SAP GRC and Process Control provide access management, segregation of duties, and audit/compliance modules integrated into the SAP ecosystem — a direct incumbent in the German enterprise and banking market that bit-Compliance competes against for IAM and MaRisk projects.
• RSA Archer: RSA Archer is an established enterprise GRC platform with operational risk, regulatory compliance, and IT risk modules — a broad incumbent that competes for the same regulated-enterprise buyers as bit-Compliance, particularly in financial services.
• Diligent (GRC): Diligent offers a broad GRC suite including entity governance, audit, risk, and compliance modules. It is a larger incumbent with board and enterprise governance breadth beyond bit-Compliance's narrower regulatory focus, but overlaps on internal controls and compliance workflows.
• ServiceNow GRC: ServiceNow's Integrated Risk Management (IRM) and compliance products offer policy, risk, audit, and regulatory compliance workflows as part of a broader enterprise platform. Represents the integrated-suite competitive threat to standalone GRC vendors like Bit Informatik.

Emerging players

• OneTrust: OneTrust's privacy, GRC, and ethics modules cover data protection, third-party risk, and compliance — overlapping directly with bit-Compliance's Datenschutzmanagement and Drittparteienmanagement modules. It is a broader, faster-scaling peer with stronger AI and international footprint.
• Vanta: Vanta automates compliance evidence collection and continuous monitoring for SOC 2, ISO 27001, HIPAA, and GDPR — adjacent to bit-Compliance's continuous controls/audit support but with stronger AI-driven automation and a global customer base.
• Drata: Drata is an automated compliance platform for SOC 2, ISO 27001, and adjacent frameworks with continuous controls monitoring. While more focused on tech/SaaS audits than MaRisk/DORA, its automation-led GRC approach is an emerging competitive model for compliance buyers.

Regional players

• Corporate Trust: Corporate Trust is a Germany-based risk, compliance, and sanctions screening service provider serving banks and corporates — a regional peer competing in DACH for similar banking-compliance budgets and with comparable DACH regulatory depth.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/bit-informatik

Compliance6 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Bit Informatik GmbH