What SaphirIT does

SaphirIT GmbH is a German professional services firm headquartered in Osnabrück, Lower Saxony (Sutthauser Str. 285, 49080 Osnabrück), specializing exclusively in data protection law consulting and compliance advisory. The firm provides consulting to businesses across Germany on DSGVO (German GDPR) compliance, acts as an external Data Protection Officer (Datenschutzbeauftragter), and offers IT security advisory. SaphirIT explicitly states that legal advice itself is not provided by the firm—legal advice is handled separately by affiliated lawyers—positioning the business as a specialized compliance consultancy rather than a full-service law firm.

The company serves primarily German small and medium-sized enterprises (KMU) as well as larger enterprises requiring data protection support. SaphirIT generates revenue through professional consulting engagements delivered directly by experienced lawyers, with pricing structured on a per-engagement negotiated basis (no public pricing disclosed). The go-to-market is sales-led, relying on direct professional engagements, content marketing (newsletters, brochures, flyers), and thought leadership (e.g., radio interviews by Managing Director Frank W. Stroot on data protection topics).

The firm holds a BVMW (Bundesverband mittelständische Wirtschaft) certification, providing credibility through association with Germany's Federal Association of Medium-Sized Businesses. The company appears to be founder-owned and operated, with no external investors, no parent company, and no headcount or revenue disclosure in the available data. There is no software product, technology platform, or proprietary AI/ML capability—SaphirIT is a pure-play professional services firm whose primary assets are the expertise and reputation of its legal professionals.

Name

SaphirIT

Legal name

SaphirIT GmbH

Website

https://saphirit.de

Company type

Private

Operating status

Operating

Headcount range

11–50 employees

Short description

SaphirIT GmbH is a German data protection and compliance consulting firm based in Osnabrück, providing DSGVO/GDPR compliance advisory, external Data Protection Officer services, and IT security consulting to KMU and larger enterprises across Germany.

Ownership category

akta.pro rank

Headquarters

HQ city

Osnabrück

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Others

Revenue model

1. Professional Consulting Services: SaphirIT generates revenue through professional consulting engagements focused on data protection and compliance advisory services. As a specialized consultancy, they provide advisory services to businesses requiring GDPR compliance support and data protection officer functions.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

SaphirIT GmbH is a German professional consulting firm that advises companies on data protection and compliance matters, delivered by experienced lawyers (Rechtsanwälte). The firm provides industry-specific, straightforward consulting on all DSGVO (German GDPR) questions and acts as an external Data Protection Officer (Datenschutzbeauftragter) for client companies in Osnabrück, Lower Saxony, and throughout Germany. SaphirIT explicitly does not provide formal legal advice itself; legal advice is handled separately by affiliated lawyers.

Product overview

SaphirIT GmbH is a consulting firm specializing in data protection and compliance advisory services. The company operates as a single-service business offering professional consulting through experienced lawyers, providing data protection officer services, and advising companies on all matters related to GDPR (DSGVO) compliance and IT security. The portfolio consists of consulting services delivered by experienced legal professionals rather than a software product platform.

Differentiator

Problem solved

Functional benefit

Products and services

• Datenschutz-Beratung (Data Protection Consulting) Professional, industry-specific, and straightforward consulting on all data protection and compliance questions for German companies. Includes DSGVO/GDPR compliance advisory and practical data protection guidance.
• Compliance-Beratung (Compliance Consulting) Consulting services covering all compliance-related matters for businesses in Germany, including IT security and regulatory compliance alongside data protection topics.
• Datenschutzbeauftragter (External Data Protection Officer) External Data Protection Officer (Datenschutzbeauftragter) services provided by experienced lawyers on behalf of client companies that require a qualified DPO under DSGVO.

Segments1 record

Ideal customer profiles1 record

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

One partnership is on record.

• BVMW (Bundesverband mittelständische Wirtschaft)supportingOthersSaphirIT holds a BVMW certificate, indicating membership or certification through the Federal Association of German Medium-Sized Businesses (BVMW). This partnership provides credibility through association with a recognized business association network.

Scale indicators1 record

Recent moves4 records

Expansion highlights3 records

Broad incumbents

• Ernst & Young GmbH (Germany): Big Four firm with a German practice offering GDPR/DSGVO compliance, data protection, and cyber risk services. Comparable function for German enterprise clients, positioned as a broad incumbent versus SaphirIT's specialist offering.
• PricewaterhouseCoopers GmbH (Germany): Big Four firm with a German practice covering data protection, privacy, and DSGVO compliance consulting. Overlaps with SaphirIT in serving large German enterprises on regulatory compliance, but competes as a broad incumbent rather than a specialist.
• KPMG AG Wirtschaftsprüfungsgesellschaft (Germany): Big Four professional services firm with a German practice offering GDPR/DSGVO compliance, data protection, and cyber risk advisory. Competes for the same German enterprise clients as SaphirIT but as part of a much broader portfolio.
• Deloitte GmbH (Germany): Global Big Four firm with significant German data privacy and DSGVO compliance practice serving large enterprises. Comparable to SaphirIT in regulatory advisory scope but operating at significantly larger scale and broader service breadth.

Direct peers

• CMS Germany (CMS Hasche Sigle): Major international law firm with substantial German data protection practice advising on DSGVO compliance, IT law, and regulatory matters. Direct peer in lawyer-led data protection advisory for German businesses, competing at the upper end of the market.
• Bird & Bird LLP (Germany): International law firm with a recognized German data protection practice serving businesses on DSGVO compliance, privacy, and IT-law matters. Comparable to SaphirIT in lawyer-led DSGVO advisory, though typically competing for larger enterprise mandates.
• ePrivacy GmbH: German consulting firm focused on data protection, GDPR/DSGVO compliance, and privacy law for businesses. Direct peer with overlapping niche, lawyer-led advisory, and similar B2B services for German clients.
• Datenschutz Nord GmbH: Specialist German data protection consultancy providing external DPO services, DSGVO audits, and compliance consulting to German businesses. Closely comparable in target customer (German companies needing DSGVO support) and service portfolio.
• Datenschutzkanzlei: German law firm specializing exclusively in data protection law and DSGVO consulting, offering external DPO services to businesses. Directly comparable to SaphirIT in niche, customer type, and lawyer-led delivery model.
• ACTA.pro GmbH: German provider of data protection software and consulting services, including external DPO and DSGVO advisory. Comparable to SaphirIT as a competing specialist in DSGVO support for German enterprises.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/saphirit-gmbh

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about SaphirIT