What Nextwork does

Nextwork GmbH is a Munich-based IT compliance and certification consultancy serving primarily German and DACH-region companies facing mandatory regulatory or customer-driven certification requirements. The firm specializes in advisory services for TISAX (automotive information security), ISO 27001, GDPR/DSGVO, NIS-2, DORA, the Cyber Resilience Act, EcoVadis sustainability ratings, and B Corp certification. Its core offerings include gap analysis, management system implementation, audit preparation, and ongoing external officer services (Information Security Officer, Data Protection Officer, Sustainability Officer, IT Officer, Quality Officer) delivered on a long-term retainer basis, supported by the Nextwork Academy e-learning platform and podcast.

The company differentiates through an interdisciplinary team that integrates IT, data protection, information security, sustainability, and quality management disciplines, allowing it to combine standards such as ISO 27001, TISAX, DORA, and NIS-2 into unified management systems. Nextwork itself is TISAX-certified (Participant-ID P51MCF), holds an EcoVadis Platinum medal (top 1% globally), and is B Corp certified, reinforcing credibility with prospective clients. The firm claims a 100% success rate at certification audits, supports approximately 200 companies annually, and maintains 150+ long-term clients across automotive suppliers, mid-market firms, and enterprises subject to European regulatory mandates.

Nextwork's revenue model is professional-services consulting with no public pricing; customer entry is via a free ~30-minute consultation booked through Calendly, followed by engagement-specific fee negotiation. The go-to-market is sales-led and direct, targeting automotive suppliers and mid-market/enterprise firms subject to NIS-2, DSGVO, and sustainability mandates, supported by content marketing (glossary, webinars, podcast, Academy). The firm is privately held, founded per firmographics in 2006 (with TISAX practice commencing in 2017), led by three Managing Directors (Marco Peters, André Willich, and Co-CEO Philipp Brändl), with no disclosed institutional funding.

Name

Nextwork

Legal name

Nextwork GmbH

Website

https://nextwork.de

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

Nextwork GmbH is a Munich-based IT compliance consultancy serving German and DACH-region companies with advisory and external officer services for TISAX, ISO 27001, DSGVO, NIS-2, DORA, EcoVadis, and B Corp certifications.

Ownership category

akta.pro rank

Product category

Compliance Consulting Services

NAICS

Management Consulting Services (54161), Management, Scientific, and Technical Consulting Services (5416)

SIC

Services-Management Consulting Services (8742), Services-Engineering, Accounting, Research, Management (8700)

akta.pro primary industry

Third-Party/Vendor Risk & Due Diligence (BPAHAFAG)

akta.pro secondary industries

EHS Management Systems & ISO Consulting (ISO 14001/45001) (BPAHAJAF), Third-Party Risk, Vendor Due Diligence & Supply Chain Compliance (BPAEAPAG), Compliance Obligations Management (Permits-to-Controls Mapping) (EUAHAIAK)

Keywords

• Compliance consulting services
• Information security consulting
• Data protection consulting
• Sustainability certification consulting
• IT managed services

Headquarters

HQ city

München

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Professional Consulting Services: Consulting fees for advisory services covering TISAX certification, ISO 27001, NIS-2, DORA, Cyber Resilience Act, DSGVO/Datenschutz, EcoVadis rating, B Corp certification, IT security, IT support, and sustainability management. Services include gap analysis, ISMS development, audit preparation, external officer roles (ISB, DSB, NHB), and training.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels6 records

Core offering

Nextwork advises and supports German-speaking businesses in achieving and maintaining compliance certifications (TISAX, ISO 27001, DSGVO, EcoVadis, B Corp, NIS-2, DORA, Cyber Resilience Act), acts as an external officer (information security, data protection, sustainability, quality, ITB), and provides managed IT services. The firm combines consulting, officer placement, and IT operations into a single engagement model for mid-market and enterprise clients.

Product overview

Nextwork is a German consulting firm offering advisory services across information security, data protection, IT infrastructure, and sustainability. Their portfolio consists of core consulting services for TISAX and ISO 27001 certification, GDPR compliance, EcoVadis and B Corp sustainability ratings, complemented by modular services including external officer appointments (ISB, DSB, NHB, ITB, QMB), specialized IT security assessments, compliance management systems, and the Nextwork Academy e-learning platform. The company claims a 100% success rate for certifications and supports approximately 200 companies annually with their services.

Differentiator

Problem solved

Functional benefit

Brands

• Nextwork Academy: E-Learning platform providing training on information security, data protection, and compliance topics
• Nextwork Academy Schulungsplattform

Products and services

• TISAX Consulting Advisory and project delivery to prepare automotive suppliers and other organisations for the TISAX assessment, including scoping, ISMS implementation, gap analysis, and audit support. Targeted at companies in the automotive supply chain that must demonstrate information security to OEMs.
• ISO 27001 Consulting
• DSGVO (GDPR) Consulting
• EcoVadis Consulting
• B Corp Certification Consulting
• NIS-2 Consulting
• DORA Consulting
• Cyber Resilience Act Consulting
• External Officer Services
• IT-Betreuung (IT Managed Services)
• Nextwork Academy

Quantifiable outcome

• 100% success rate at all relevant standards in information security, data protection, quality, and sustainability
• +2 more outcomes

Named customers1 record

Segments3 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

One partnership is on record.

• ENX AssociationcoreOthersENX Association operates the TISAX certification system on behalf of the German Association of the Automotive Industry (VDA). Nextwork is registered as a TISAX participant (Participant-ID: P51MCF) and subject to ENX oversight and audit provider criteria. ENX maintains and monitors compliance with TISAX Audit Provider Criteria and Assessment Requirements (TISAX ACAR).

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• PwC Germany (Information Security / GRC practice): Big 4 firm with a substantial German cybersecurity, GDPR, and ISO consulting practice. Competes for the same enterprise mandates on NIS-2, DORA, and ISO 27001 but as part of a much broader portfolio.
• TÜV Rheinland Group: Global certification and testing giant providing ISO certification, cybersecurity, and sustainability services. Direct overlap on ISO 27001, ISO 14001, and EcoVadis readiness advisory at a much larger scale.
• EY Germany (Cybersecurity / Privacy practice): Big 4 firm with established German cybersecurity, TISAX-adjacent, ISO 27001, and DSGVO advisory practices. Comparable offering targeting enterprise and mid-market German clients.
• DQS GmbH: Frankfurt-based certification body providing ISO management system certification and consulting services across information security, quality, and sustainability. Comparable services but at significantly larger scale and broader geographic reach.
• TÜV SÜD Management Service GmbH: Large German certification body offering ISO 27001, ISO 14001, TISAX-related advisory, and broader management-system consulting. Overlaps on ISO consulting but operates at much greater scale across multiple standards.

Direct peers

• SRC Security Research & Consulting GmbH: German security and risk consultancy specializing in TISAX, ISO 27001, and information security advisory. Closest direct peer given overlap on TISAX consulting, mid-market German client base, and similar service portfolio.
• anykey GmbH: German compliance and information security consultancy focused on TISAX, ISO 27001, and NIS-2 advisory for mid-market clients. Comparable niche specialist positioning and German regulatory expertise.
• secuvera GmbH: German TISAX assessment preparation and information security consultancy serving automotive suppliers. Directly comparable on TISAX readiness, ISO 27001 consulting, and automotive-vertical focus.
• DataGuard GmbH: Munich-based compliance and privacy firm offering GDPR, information security, and sustainability advisory to mid-market companies. Overlaps with Nextwork on external DSB, GDPR consulting, and German mid-market segment.

Emerging players

• protectnow GmbH: Smaller German TISAX and information security consulting boutique. Comparable focus on TISAX gap analysis and ISO 27001 readiness for SMEs and mid-market suppliers.

Market position

Strengths5 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Nextwork