b-pi sec

What b-pi sec does

b-pi sec GmbH is a German boutique consulting firm headquartered in Limburg an der Lahn that provides data protection, information security, and regulatory compliance services to large enterprises, the Mittelstand, and municipal/public-sector clients. The company was founded in June 2017 as a subsidiary of best-practice innovations GmbH (b-pi), became independent on January 1, 2022 with Björn Bausch and Evangelos Kopanakis as sole shareholders, and relocated within Limburg to the ICE area in March 2023 while retaining Frankfurt operations.

The core offering comprises three external officer mandates — External Data Protection Officer (extDSB), External Information Security Officer (extISB), and External Digitalization Officer (extDiB) — complemented by advisory engagements on EU-DSGVO, NIS-2, KRITIS, BSI Grundschutz, and OZG compliance. Training and education are delivered via instructor-led programs and a Capitoo-powered e-learning platform for DSGVO and IT security awareness, with a DEKRA-certified two-module 'Fachkraft für Datenschutz' course offered through a cooperation with DEKRA Certification GmbH. The firm maintains a strategic go-to-market partnership with ekom21 - KGRZ Hessen, Hesse's largest BSI-certified municipal IT provider, for joint delivery to municipal clients.

Revenue is generated through professional services engagements — primarily project-based consulting and retainer mandates for the external officer services — supplemented by training and workshop fees. Distribution is sales-led and direct, with no reseller or marketplace channels; customer acquisition is reinforced through trade fair presence (DIGITAL FUTURE Congress, dikomm, Hessischer Cybersicherheitsgipfel), workshops, webinars, and a regular content marketing cadence. The firm is privately held, entirely self-financed since founding, and operates with a headcount in the 11–50 range.

Name

b-pi sec

Legal name

b-pi sec GmbH

Website

https://b-pisec.com

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

b-pi sec GmbH is a German boutique consultancy providing external data protection, information security, and compliance officer services to large enterprises, the Mittelstand, and municipal/public-sector clients across Germany, with certified training partnerships.

Ownership category

akta.pro rank

Headquarters

HQ city

Limburg

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Consulting Services: Professional consulting services including external DSB, external ISB, and digitalization officer mandates. Revenue generated through project-based consulting engagements and retainer arrangements.
2. Training and Education: Data protection officer training, DSGVO awareness training, and IT security e-learning programs. DELKRA certification available through partnership. Revenue from course fees and training programs.

Go-to-market motion1 record

Distribution channels3 records

Marketing channels6 records

Core offering

b-pi sec is a German business security consultancy that delivers external officer mandates (External Data Protection Officer / extDSB, External Information Security Officer / extISB, and External Digitalization Officer / extDiB), regulatory compliance consulting for EU-DSGVO, NIS-2, KRITIS, and BSI Grundschutz, and certified employee training (DEKRA 'Fachkraft für Datenschutz' and e-learning via Capitoo). Services are sold to large enterprises, the Mittelstand, and municipal/public-sector clients across Germany.

Product overview

b-pi sec GmbH is a consulting firm offering a portfolio of external officer services including External Data Protection Officer (extDSB), External Information Security Officer (extISB), and External Digitalization Officer (extDiB). The company also provides training and education services through partnerships, including DEKRA-certified data protection courses and e-learning programs for GDPR compliance and IT security awareness. The service offering targets Mittelstand (SMB), large enterprises, and public sector organizations, with focus on German regulatory compliance including GDPR, NIS-2, and KRITIS requirements.

Differentiator

Problem solved

Functional benefit

Products and services

• Externer Datenschutzbeauftragter (extDSB) External Data Protection Officer (extDSB) mandate providing outsourced DPO coverage, DSGVO-compliant data protection consulting, and representation for organizations across Germany.
• Externer Informationssicherheitsbeauftragter (extISB) External Information Security Officer (extISB) mandate helping organizations implement and maintain information-security management and standards (incl. NIS-2, KRITIS, BSI Grundschutz).
• Externer Digitalisierungsbeauftragter (extDiB) External Digitalization Officer (extDiB) mandate assisting organizations with digital transformation and compliance requirements, including OZG implementation for the public sector.
• E-Learning Datenschutz-Schulung Online training course for employee data-protection awareness, delivered through the Capitoo partnership, compliant with EU-DSGVO annual training requirements.
• E-Learning IT-Sicherheit-Schulung Online course for IT-security awareness training including completion certificate for employees, delivered through the Capitoo e-learning partnership.
• DEKRA-zertifizierter Datenschutzkurs Two-module DEKRA-certified data protection course awarding the 'Fachkraft für Datenschutz' (Data Protection Specialist) title, offered via the partnership with DEKRA Certification GmbH.

Quantifiable outcome

• DEKRA-certified data protection training through partnership with DEKRA Certification GmbH

Named customers23 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Five partnerships are on record, tiered core and minor.

• ekom21 - KGRZ HessencoreStrategic or Co-development Partner · 1 January 2019ekom21 is Hesse's largest BSI-certified municipal IT service company. b-pi sec partners with ekom21 for joint events, exhibitions, and to provide comprehensive data protection and security services to municipal clients. Companies co-exhibit at trade shows including expo19 and dikomm.
• Allianz SEminorStrategic or Co-development Partner · 1 January 2019Allianz SE partnered with b-pi sec for joint presentation at PLATOW UnternehmerFORUM on practical cases of cybersecurity in businesses, demonstrating how easily systems can be hacked.
• DEKRA Certification GmbHcoreStrategic or Co-development Partner · 1 July 2018DEKRA is one of the world's largest testing and certification companies focused on safety-related services. The parent company b-pi serves as DEKRA cooperation partner offering two-module data protection courses with DEKRA certification as 'Fachkraft für Datenschutz' (Data Protection Specialist).
• best-practice innovations GmbH (b-pi)coreOthers · 1 January 2017b-pi sec was originally founded as a subsidiary of best-practice innovations GmbH. On January 1, 2022, b-pi sec became an independent company, separating from its parent. The companies remain friendly connected and share joint strategy days and some corporate traditions.
• SYSbackminorStrategic or Co-development Partner · 1 January 2017SYSback and b-pi collaborated on a joint presentation at Internet Security Days 2017 on topics of BSI Grundschutz compliance, EU-DSGVO requirements, and enterprise architecture consulting.

Scale indicators2 records

Recent moves8 records

Expansion highlights6 records

Direct peers

• Trustguard (Contechni GmbH): German DSGVO and information security consultancy delivering external data protection officer services, ISO 27001, and IT-Grundschutz consulting to SMEs and public sector, with a comparable regional-firm positioning.
• Secorvo Security Consulting: Karlsruhe-based independent security and data protection consultancy offering DSGVO, ISO 27001, BSI Grundschutz, and information security officer services — directly overlapping with b-pi sec's extDSB/extISB and BSI offerings for German Mittelstand and public sector.
• Datenschutzkanzlei (Deutsche Datenschutzkanzlei): Specialized German data protection law firm and consultancy providing external DPO services, DSGVO audits, and compliance advisory — a direct competitor in the external data protection officer market b-pi sec targets.
• INTARGIA Managementberatung: German management and IT consultancy with a data protection and information security practice; competes with b-pi sec in DPO outsourcing and BSI/NIS-2 advisory for mid-market clients.

Broad incumbents

• TÜV SÜD (Datenschutz und Informationssicherheit): Global certification and advisory firm offering DSGVO, ISO 27001, NIS-2, and BSI Grundschutz services; competes with b-pi sec especially on training, certification, and municipal/government contracts, but as part of a much broader portfolio.
• msg systems (msg): Large German IT consulting group with dedicated data protection and information security practices serving public sector, insurance, and automotive — overlapping with b-pi sec's DSGVO and extISB services but at significantly larger scale.
• Bechtle AG (IT-Security & Datenschutz): Germany's largest IT systems house with a growing cybersecurity and data protection consulting practice; competes for SME and municipal NIS-2/BSI engagements and could bundle compliance services with its IT infrastructure footprint.
• KPMG (Cyber & Risk / DPO Services): Big 4 advisory firm providing GDPR/DSGVO compliance, NIS-2 readiness, and information security officer services to German enterprises and public sector clients, including outsourced DPO offerings comparable to b-pi sec's extDSB.

Others

• ekom21 - KGRZ Hessen: Hesse's largest BSI-certified municipal IT service provider and a strategic partner of b-pi sec since 2019; while primarily an IT services partner, ekom21 also delivers adjacent data protection and information security services to Hessian municipalities, making it both a partner and an adjacent competitor.

Emerging players

• G DATA CyberDefense: Bochum-based German cybersecurity vendor and services provider with awareness training and SMB-focused security offerings; partially overlaps with b-pi sec's IT security e-learning and SME security consulting.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xxing.com/companies/b-pisecgmbh
• YouTubeyoutube.com/watch?v=g9nDd8qWbho
• LinkedInlinkedin.com/company/bpisec

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about b-pi sec