CONFDNT

What CONFDNT does

CONFDNT is a Munich-based, privately held SaaS company founded in 2021 that operates an integrated compliance platform marketed under the Compliance.One brand for small and medium-sized enterprises (KMU) in Germany. Its platform aggregates multiple mandatory-compliance use cases into a single product surface: a Learning Management System for compliance training (data protection, information security, AI), whistleblower reporting systems aligned with HinSchG / LkSG / AGG / DSA, external data protection officer services and GDPR templates/documentation, an AI Officer module for EU AI Act risk analysis and documentation, policy management, and certification/attestation tooling. The product is delivered as a cloud-based subscription with optional bundled professional services (outsourced ombudsman / reporting office, external DPOs, and law-firm-backed support), and is positioned around plain-language, pragmatic compliance execution rather than legal-technical depth.

The underlying technology is a cloud-hosted compliance platform whose primary differentiator is breadth of regulatory coverage (HinSchG, AI Act, GDPR, BFSG, AGG, NIS2, DDG, DORA, ArbSchG) combined with curated templates, training content and documentation workflows. No proprietary AI/ML models, APIs, SDKs, or integrations are disclosed; the platform is workflow- and content-led rather than model-led. The go-to-market is sales-led with a consultation-based closing motion ('Beratung vereinbaren' / 'Book Demo'), supported by SEO-optimized regulation topic pages, a 'Compliance Magazine' content hub, an email newsletter, and organic social on LinkedIn, Facebook and Instagram. Pricing is not publicly disclosed.

Revenue mechanics are subscription-based recurring SaaS, augmented by attached professional services (DPO-as-a-Service, ombudsman, certification). The company has not disclosed funding, revenue, headcount beyond a 1–10 employee range, named customers, ownership structure, or management team. Distribution is single-country (Germany) and horizontal across SMBs, with no evidence of partnerships, channel resellers, M&A, or geographic expansion beyond DACH.

Name

CONFDNT

Website

https://confdnt.com

Company type

Private

Founded year

2021

Headcount range

1–10 employees

Short description

CONFDNT, operating as Compliance.One, is a Munich-based SaaS platform that helps German small and medium businesses comply with EU and German regulations including whistleblower protection, GDPR, the AI Act, NIS2 and DORA via subscription software with bundled professional services.

Ownership category

akta.pro rank

Product category

Compliance Management Software

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (51821)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)

akta.pro secondary industry

Sustainability & ESG Consulting (BPAHACAK)

Keywords

• Compliance management software
• Whistleblower protection platform
• GDPR compliance tools
• AI Act compliance
• Regulatory compliance training

Headquarters

HQ city

Munich

HQ country

Germany

HQ region

Europe

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Compliance Platform Subscription: Subscription-based access to the integrated compliance platform covering training, whistleblower systems, data protection tools, and AI compliance services

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

CONFDNT is a SaaS compliance platform that provides small and medium-sized businesses in Germany with an integrated suite covering whistleblower reporting systems, GDPR / data protection tools, AI Act compliance support, compliance training with a Learning Management System, and policy management. The platform consolidates fragmented regulatory requirements—including HinSchG, KI-VO, DSGVO, BFSG, AGG, NIS2, DDG, DORA, and ArbSchG—into a single cloud-based solution with clear, jargon-free language and pragmatic, practice-oriented implementation.

Product overview

Compliance.One offers a unified compliance platform for small and medium enterprises in Germany. The platform combines multiple modules including Trainings & Schulungen (compliance training and LMS), Meldestellen & Hinweisgebersystem (whistleblower reporting systems), Datenschutz / DSGVO (data protection services with external DPO), KI Officer (AI Act compliance support), Richtlinien & Policy Management (policy management), and Zertifizierungen & Nachweise (certification services). The platform covers regulatory frameworks including Hinweisgeberschutzgesetz, KI-Verordnung, DSGVO, Barrierefreiheitsstärkungsgesetz, AGG, NIS2, Digitale Dienste Gesetz, Digital Operational Resilience Act, and Arbeitsschutzgesetz.

Differentiator

Problem solved

Functional benefit

Products and services

• Meldestellen & Hinweisgebersystem (Whistleblower Reporting Systems) Whistleblower reporting systems compliant with HinSchG, LkSG, AGG, and DSA regulations, including outsourced reporting office / ombudsman services. Designed for German SMBs needing to establish legally compliant whistleblower channels.
• Trainings & Schulungen (Compliance Training & LMS) Compliance training courses and integrated Learning Management System covering data protection, information security, artificial intelligence, and other regulatory topics, targeted at German SMBs needing to train staff on compliance obligations.
• Datenschutz / DSGVO (Data Protection / GDPR Services) External Data Protection Officer services with templates, documentation, and training for GDPR-compliant organizations. Designed for German SMBs needing outsourced DPO expertise.
• KI Officer (AI Officer / AI Act Compliance) AI compliance support and AI Act accompaniment including risk analysis, documentation, and optional AI Officer-as-a-Service. Designed for German SMBs needing to comply with the EU AI Act (KI-VO).
• Richtlinien & Policy Management Policy management tools for creating and maintaining compliance guidelines and corporate policies. Designed for SMBs needing to operationalize and document regulatory requirements.
• Zertifizierungen & Nachweise (Certifications & Attestations) Certification and compliance attestation services for regulatory requirements, supporting German SMBs in documenting and proving their compliance status to regulators, partners, and customers.

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Recent moves6 records

Expansion highlights5 records

Regional players

• audatis Consulting: German data protection specialist providing external DPO services and DSGVO tooling — overlaps with CONFDNT's GDPR/external DPO module in the same German SMB segment.

Broad incumbents

• SAP GRC: Enterprise governance, risk and compliance suite inside the SAP ecosystem; represents the large-platform threat for mid-market buyers extending SAP-based compliance programs into EU regulations.
• ServiceNow GRC: Enterprise Integrated Risk Management suite with policy, risk and compliance modules; long-term competitive threat as enterprise compliance platforms move down-market.
• Drata: Automated compliance and security posture platform with growing EU and GDPR exposure; comparable in SaaS delivery model and target buyer (compliance-burdened mid-market).
• Vanta: Compliance automation platform (SOC 2, ISO 27001, HIPAA) rapidly expanding into privacy/GDPR and AI governance — adjacent SaaS competitor vying for the same SaaS-tool budget from mid-market firms.
• OneTrust: Market-leading privacy, GRC and ethics platform with whistleblower, consent, GDPR and AI governance modules — overlaps directly with CONFDNT's compliance stack but at enterprise scale with much broader feature breadth.

Direct peers

• Whistleblower Software (European Dynamics): Specialized EU-focused HinSchG and EU Whistleblower Directive case management platform — narrow but direct overlap with CONFDNT's Meldestellen module for German SMEs.
• NAVEX Global (WhistleB): Global ethics and compliance SaaS combining whistleblower hotlines, policy management and training; WhistleB heritage gives explicit HinSchG compliance, directly paralleling CONFDNT's Meldestellen module.
• EQS Group (now EQS Compliance): Munich-based compliance and integrity platform with strong whistleblower (HinSchG) and corporate compliance offerings for German and European mid-market firms — the closest direct regional competitor.
• DataGuard: German privacy and compliance SaaS offering external DPO, data protection software and information security tooling — directly comparable on data protection/GDPR and German SMB focus.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights5 records

Customer concentration

• LinkedInlinkedin.com/company/confdnt

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CONFDNT