Kefer IT Beratung

What Kefer IT Beratung does

Kefer IT Beratung is a German sole proprietorship founded in 2003 by Monika Kefer-Spieleder and headquartered in Vogtareuth, Bavaria. The firm delivers professional consulting services across seven interconnected service lines: data protection (external DPO/eDSB), IT security (external IT Security Officer/eISB), compliance audits (DSGVO, ISO 27001, BSI Grundschutz), EDV expert opinions for legal proceedings, customized training and seminars, AI Officer services under Article 4 of the EU AI Regulation, and whistleblower reporting channel management under the HinSchG. The firm is certified across multiple German credentials (IHK, TÜV, VsD, bbw) held primarily by the founder.

The business operates a sales-led, direct-consulting model selling retainers and project work to SMBs, mid-sized enterprises, nonprofits, and associations across Germany, with a free initial consultation as the primary lead-conversion mechanism. Distribution is delivered through the founder and ad-hoc partners (Spieleder IT, GFB Software, Ontrack) to extend capacity, with marketing conducted via the company website and listings on the 'Wer liefert was' B2B marketplace. Revenue is generated entirely through professional services fees; pricing is not publicly disclosed.

Customer reach spans approximately 30+ named logos concentrated in regional Bavarian SMBs and select nationwide enterprises across manufacturing, healthcare, professional services, and foundation/nonprofit segments. The firm has no external funding, no parent company, no subsidiaries, and operates as a founder-controlled sole proprietorship with 1-10 employees.

Name

Kefer IT Beratung

Legal name

Kefer IT-Beratung

Website

https://kefer-it.de

Company type

Private

Operating status

Operating

Headcount range

1–10 employees

Short description

Kefer IT Beratung is a German sole proprietorship founded in 2003 that provides data protection, IT security, audit, expert opinion, whistleblower reporting, and AI officer consulting services to SMBs, mid-sized enterprises, associations, and nonprofits across Germany.

Ownership category

akta.pro rank

Product category

IT Security & Data Protection Consulting

NAICS

Management, Scientific, and Technical Consulting Services (5416), Other Scientific and Technical Consulting Services (54169), All Other Professional, Scientific, and Technical Services (54199)

SIC

Services-Engineering, Accounting, Research, Management (8700), Services-Educational Services (8200)

akta.pro industry

PRIMARYEDAAANAN

Legal, Governance, Privacy & Audit Certifications

Education/Adult & Continuing Education/Professional Certification Programs

SECONDARYEDANAIAF

Information Technology & Cybersecurity Certification Prep (CompTIA, Cisco, Microsoft, AWS, ISC2/ISACA)

Education/Tutoring & Test Preparation/Professional Certification & Licensure Exam Prep

SECONDARYEDAAANAA

Information Technology (IT) & Cybersecurity Certifications

Education/Adult & Continuing Education/Professional Certification Programs

Keywords

• Data protection consulting
• IT security consulting
• GDPR compliance services
• Information security audits
• External data protection officer

Headquarters

HQ city

Vogtareuth

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D

Revenue model

1. Consulting Services: Professional consulting services including external data protection officer, external IT security officer, IT audits, EDV expert opinions (gutachten), seminars and training, whistleblower reporting office management, and AI officer services.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels3 records

Core offering

Kefer IT Beratung is a certified IT consulting firm that provides external data protection officer (eDSB) and external IT security officer (eISB) services, compliance audits, certified IT expert opinions (EDV-Gutachten), customized seminars and training, AI officer services under the EU AI Regulation, and whistleblower reporting office management. Services are manufacturer-independent and delivered directly to businesses, associations, and legal entities, primarily across Germany.

Product overview

Kefer IT Beratung is a certified IT consulting firm founded in 2003 as a one-woman business, now offering a comprehensive portfolio of advisory services centered on data protection, IT security, and regulatory compliance. The company operates seven interconnected service lines: Datenschutz (Data Protection Services) provides external DPO and DSMS consulting; IT-Sicherheit (IT Security) offers security officer services and ISMS implementation; Audits delivers compliance audits for data protection and IT security; EDV-Gutachten (IT Expert Opinions) provides certified expert opinions for legal proceedings; Seminare und Schulungen (Seminars and Training) offers customized training programs; KI-Beauftragter (AI Officer) addresses EU AI Regulation compliance; and Hinweisgebermeldestelle (Whistleblower Reporting System) provides whistleblower channel services. All services emphasize manufacturer-independent consulting with a focus on DSGVO, ISO 27001, and BSI Grundschutz standards.

Differentiator

Problem solved

Functional benefit

Products and services

• Datenschutz (Data Protection Services) Comprehensive data protection consulting for companies and associations including external data protection officer (eDSB) services, data protection management, documentation obligations, data breach handling, and data protection impact assessments according to DSGVO requirements.
• IT-Sicherheit (IT Security Services) IT security consulting including certified IT security officer (eISB) services, risk analysis following ISO/IEC-27000 and BSI Grundschutz standards, ISMS implementation, policy development, and employee security awareness training.
• Audits Data protection and IT security audit services that analyze and evaluate the current state of compliance, examining adherence to supervisory authority guidelines, DSGVO requirements, BSI Grundschutz, and ISO 27001 standards.
• EDV-Gutachten (IT Expert Opinions) Certified IT expert opinions including court expert reports, private expert opinions, evidence preservation, arbitration and mediation services, and insurance expert assessments for dispute resolution and legal proceedings.
• Seminare und Schulungen (Seminars and Training) Customized training programs covering data protection, IT security awareness, Business Secrets Protection Act (GeschGehG), and Money Laundering Act (GwG), available as in-house or digital formats for various target audiences.
• KI-Beauftragter (AI Officer) AI compliance officer services according to EU AI Regulation Article 4, including AI compliance monitoring, risk assessments, AI policy development, training coordination, and strategic advisory for AI system implementation.
• Hinweisgebermeldestelle (Whistleblower Reporting System) Internal reporting channel service compliant with the Whistleblower Protection Act (HinSchG), providing external whistleblower officer (Ombudsperson) services, case processing, and compliance reporting for companies with 50 or more employees.

Named customers35 records

Segments4 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

Three partnerships are on record, tiered minor.

• Spieleder ITminorStrategic or Co-development PartnerIT partner company for bundling resources and experience when needed.
• Berufsverband der Datenschutzbeauftragten Deutschlands (BvD) e.V.minorOthersProfessional association membership for data protection officers in Germany.
• dsb-Group e.V.minorOthersProfessional association membership for data protection professionals.

Scale indicators2 records

Recent moves6 records

Expansion highlights4 records

Direct peers

• Datenschutzkanzlei: German law firm specializing in data protection and IT law consulting. Comparable as a small-to-mid-sized German firm offering external DPO services and DSGVO compliance advisory to similar SME and mid-market clients.
• datenschutz nord GmbH: Specialized data protection consultancy offering external DPO services, DSGVO consulting, and IT security advice. Closest scale-comparable peer in the German external-DPO market.
• intersoft consulting AG: Data protection and IT security consulting firm serving German SMEs. Directly comparable in service mix (DPO, IT security, training) and target customer profile.
• 2B Advice GmbH: Privacy and data protection consulting firm based in Germany offering DPO services, DSGVO audits, and training. Comparable in service portfolio and German SME focus.
• Datatree AG: German data protection service provider offering external data protection officers and DSGVO compliance software-plus-services. Comparable in core DPO offering and target market.

Broad incumbents

• TÜV SÜD Management Service GmbH: Large German testing, inspection, and certification body offering ISO 27001 audits, IT security certification, and data protection advisory. Overlaps with Kefer's audit and certification-adjacent services at much larger scale.
• TÜV Rheinland: Global German-headquartered TIC firm offering ISO 27001 certification, cybersecurity consulting, and DSGVO advisory. Broader incumbent whose portfolio touches most of Kefer's service lines.
• DEKRA Digital GmbH: Testing and certification organization with IT security and compliance advisory practices. Competes in the German cybersecurity certification and audit space.

Emerging players

• Härting Rechtsanwälte: German law firm with a dedicated data protection and IT law practice offering DPO services and DSGVO compliance. Comparable in regulatory depth but positioned as legal counsel rather than technical DPO.
• Datenschutz-Experten.de (by activeMind AG): German data protection consulting and SaaS platform offering external DPO services, training, and compliance tools. Comparable in external DPO and SME training, with a tech-enabled delivery model.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks6 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/kefer

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Kefer IT Beratung