What Novedia AG does

M&H Novedia AG (M&H Group) is a privately held German IT services and software firm founded around 2001–2002 and operating from Berlin and Ohlsbach, Baden-Württemberg. Wholly owned by the family-run M&H Holding GmbH (managed by Hans-Peter and Monika Möschle), the group comprises three operating entities — M&H Novedia AG (IT consulting and software development), M&H IT-Security GmbH (security consulting and training), and M&H Novedia Finance AG — with 11–50 employees overall. The firm serves regulated industries across Germany — primarily banks, insurance carriers and municipal loss-adjustment pools, healthcare providers and statutory health bodies, and public administration — with custom web-based portal solutions and information-security services. Named customers include DKB, Berliner Volksbank, Weberbank, SCHOTT AG, ZF Friedrichshafen, gematik, KBV, Messe Berlin, KSA Bochum, HADG, and rnv, with reference outcomes including 350,000+ damages managed and 96,000+ vehicles processed in insurance portals.

The core proprietary product is NovaPath, a document and email classification software co-developed with Fraunhofer IAIS and Bundesdruckerei. NovaPath provides an in-Office classification assistant that maps information to confidentiality levels and triggers encryption and DLP via Microsoft RMS / Azure RMS, supporting ISO 27001, BSI IT-Grundschutz, trade-secret protection, and TISAX/VDA ISA compliance, available in seven languages. Beyond NovaPath, the firm builds custom web-portal workflows in Java (CDI/Spring/JPA, REST/SOAP) and .NET (C#/F#, WPF) stacks, including the PADtransfer secure medical-billing portal (asymmetric encryption, mTAN) and damage-data web services for transport operators. The M&H Academy delivers TÜV Rheinland- and DEKRA-certified training — ISO/IEC 27001 Foundation, Information Security Officer, T.I.S.P., IT-Grundschutz Practitioner/Consultant, and BCM Practitioner — anchoring a recurring services revenue stream.

The business model blends professional services (custom development, IT security consulting, ISMS implementation), subscription/recurring revenue (NovaPath licensing, banking maintenance contracts), and scheduled paid training (M&H Academy). Go-to-market is sales-led direct engagement with German Mittelstand and large enterprise, supported by event participation (it-sa, Potsdam Conference for National Cyber Security, TU Berlin career fairs), association memberships (SIBB, TeleTrusT, Allianz für Cybersicherheit), webinars, newsletter, and Google Ads. No public revenue, ARR, or funding figures are disclosed.

Name

Novedia AG

Legal name

M&H Novedia AG

Website

https://m-und-h.de

Company type

Private

Founded year

2002

Operating status

Operating

Headcount range

11–50 employees

Short description

M&H Novedia AG (M&H Group) is a German IT services firm that builds custom web-based portals, delivers information-security consulting, and licenses the NovaPath document-classification software, serving banks, insurers, healthcare providers, and public-sector clients across Germany.

Ownership category

akta.pro rank

Product category

IT Consulting & Software Development

NAICS

Custom Computer Programming Services (541511), Software Publishers (5132), Other Scientific and Technical Consulting Services (54169)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371), Services-Prepackaged Software (7372)

akta.pro primary industry

ITSM Governance, Compliance & Audit Readiness (BPAEAJAM)

akta.pro secondary industries

IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK), Data Access Governance & Entitlement Management (DSPM / CIEM-for-Data) (HDADAFAG)

Keywords

• IT security consulting
• Custom software development
• Web portal development
• Information classification software
• Cybersecurity training

Headquarters

HQ city

Berlin

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. IT Consulting Services: Professional consulting services for IT security, ISMS implementation (ISO 27001, BSI IT-Grundschutz), and information security advisory. Includes external Information Security Officer placement.
2. M&H Academy Training & Certifications: Certified training programs including Information Security Officer (ISB) since 2012, TeleTrusT Information Security Professional (T.I.S.P.) since 2019, IT-Grundschutz Practitioner and Consultant since 2020, ISO/IEC 27001 Foundation, BCM Practitioner, and Cybersecurity updates. Certifications issued in cooperation with TÜV Rheinland and DEKRA.
3. NovaPath Software Licensing: Proprietary document classification software NovaPath for information security and know-how protection. Licensed to enterprise customers for compliance with ISO 27001, business secret protection laws, and TISAX/VDA ISA requirements.
4. Custom Software Development: Custom web-based workflow applications and portal solutions for banks, insurance companies, and municipalities. Includes development, implementation, and maintenance of specialized business applications.
5. Software Maintenance & Support: Ongoing IT maintenance, training, and support services specifically for banking sector clients.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels7 records

Core offering

Novedia AG is an IT specialist focused on web-based business process portals, intranet and extranet solutions, and IT security consulting for regulated industries. The company delivers IT consulting, custom software development, and the proprietary NovaPath information classification software, alongside certified training programs through the M&H Academy. Its solutions serve banks, insurance companies, healthcare providers, public administration, automotive suppliers, and energy sector operators with security and compliance requirements.

Product overview

M&H Group (operating as M&H Novedia AG, M&H Novedia Finance AG, and M&H IT-Security GmbH under M&H Holding GmbH) offers a portfolio of IT consulting, custom software development, and IT security solutions. The core proprietary product is NovaPath, a document and email classification software that integrates with Microsoft Office and Microsoft RMS/Azure RMS to apply confidentiality labels and encryption to business information, forming a foundational layer for information protection. This is complemented by a suite of custom web-based portal solutions targeting regulated industries — solutions for banks (including core banking system integration, data warehouses, and trading systems), solutions for insurance companies (multi-level claim management portals), and solutions for healthcare (including medical billing portals and patient data security). The portfolio also includes IT security consulting services (ISMS implementation, security audits) and the M&H Academy, which offers certified training programs (ISO 27001 Foundation, Information Security Officer, T.I.S.P., IT-Grundschutz Practitioner/Consultant, BCM Practitioner) that are closely tied to the security methodologies used across the product suite.

Differentiator

Problem solved

Functional benefit

Brands

• NovaPath: Software solution for information classification and document protection according to ISO 27001, enabling organizations to classify company information and emails based on confidentiality levels.
• M&H Academy
• NovaPath

Products and services

• NovaPath

Quantifiable outcome

• Over 350,000 damages managed in KSA/HADG system
• +2 more outcomes

Named customers15 records

Segments6 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

Feature6 records

Partnerships

Ten partnerships are on record, tiered minor and core.

• NKMG (Netzwerk Kritischer Mobilität Berlin-Brandenburg)minorGTM or Marketing Partner · 1 January 2025Project partner for Cybersecurity Portal for Berlin industry, part of Masterplan Industriestadt Berlin.
• DEKRAcoreStrategic or Co-development Partner · 1 January 2019Certification partner for TeleTrusT Information Security Professional (T.I.S.P.) training. DEKRA provides independent certification examinations for T.I.S.P. candidates.
• Fraunhofer IAIScoreStrategic or Co-development PartnerCo-development partner for NovaPath document classification software. Fraunhofer IAIS (Institute for Intelligent Analysis and Information Systems) contributes to the ongoing development and marketing of NovaPath.
• BundesdruckereicoreStrategic or Co-development PartnerCo-development partner for NovaPath. Bundesdruckerei (Federal Printing Office) contributes to the development and marketing of the document classification solution.
• TÜV RheinlandcoreStrategic or Co-development PartnerCertification partner for Information Security Officer training. TÜV Rheinland provides certified qualifications for ISB training programs.
• TeleTrusTminorOthersMembership and certified training provider status since 2019. Company offers TeleTrusT Information Security Professional (T.I.S.P.) training, an internationally recognized certification.
• SIBB e.V.minorOthersActive member of SIBB (Verband der Software-, Informations- und Kommunikations-Industrie in Berlin und Brandenburg e.V.). Participates in industry events and NIS-2 implementation workshops.
• Allianz für CybersicherheitminorOthersMember of Allianz für Cybersicherheit (Alliance for Cybersecurity), an initiative to strengthen cybersecurity in Germany.
• itsBB (IT-Sicherheit in Berlin-Brandenburg)coreGTM or Marketing PartnerPartnership for Cyberhotline project and Cybersecurity Portal. itsBB is the central point of contact for IT security in Berlin-Brandenburg. M&H contributed to Berlin Cybersecurity Portal implementation.
• Gesellschaft von Freunden der TU BerlinminorOthersMember of Gesellschaft von Freunden der TU Berlin (Society of Friends of TU Berlin).

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• PPI AG: Hamburg-based IT services provider focused on banks and financial-services players with payment, core banking and regulatory solutions — a direct competitor for the same German bank tender pool.
• adesso SE: German IT services group with a strong banking, insurance and public-sector practice offering custom software development, consulting and managed services — closely aligned to M&H Novedia's core verticals and delivery model, but at significantly larger scale.
• GFT Technologies SE: German IT services firm specialising in financial-services digital transformation, including custom development for banks and insurers — overlapping strongly with M&H Novedia's banking and insurance portfolio work.
• nexum AG: German IT security and identity-management consultancy covering ISMS, GRC and information-classification projects for regulated enterprises — directly comparable to M&H's IT-Security GmbH subsidiary.
• msg systems AG: Germany-headquartered IT consulting and software house serving banking, insurance, healthcare and public administration with custom solutions and industry platforms — directly comparable in vertical focus and consulting-plus-product mix.
• Secunet Security Networks AG: German cybersecurity specialist serving public sector, healthcare (KRITIS) and critical infrastructure with consulting, secure infrastructure and certified solutions — competing with M&H's IT security consulting and NovaPath offerings in the same regulated buyer pool.
• Boldon James (a HelpSystems company): Provider of data classification and information-protection software integrated with Microsoft RMS — a like-for-like product peer to NovaPath for enterprise classification deployments.

Broad incumbents

• Microsoft (Purview Information Protection): Vendor of native Microsoft 365 sensitivity labels and Purview Information Protection that overlap functionally with NovaPath — sets the baseline against which M&H must justify its standalone classification product.
• TÜV Rheinland: Global certification body and training provider partnered with M&H Academy for ISB examinations; competes in the broader certified information-security training market and overlaps with NovaPath-adjacent compliance advisory.

Regional players

• DATEV eG: German cooperative IT services provider for tax advisors, auditors and mid-market businesses — comparable as a German mid-market-focused IT services cooperative, though focused on tax/accounting rather than banking/insurance.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/m_und_h_group
• LinkedInlinkedin.com/company/m-und-h

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Subsidiaries3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Novedia AG