What activeMind.AG does

activeMind AG is a German management and technology consulting firm founded in 2000 and headquartered in Munich, with a second office in Berlin and affiliated partner entities in Switzerland (activeMind.ch) and the United Kingdom (activeMind.uk). The firm specializes in three interlocking practice areas: data protection (GDPR/DSGVO), information security (NIS2, ISO 27001, TISAX, DORA, CRA), and artificial intelligence compliance (EU AI Act, ISO 42001). It is structured as an Aktiengesellschaft led by CEO/Vorstand Klaus Foitzick with Manfred Keßler as Chairman of the Supervisory Board, and employs approximately 20 qualified lawyers and technical consultants.

The company operates a hybrid consulting-plus-product business. Professional services revenue is generated through external Data Protection Officer and external Information Security Officer retainers, certification advisory across ISO 27001/37301/42001, NIS2 gap analyses and statutory management training under §38 BSIG, DORA and CRA advisory, TISAX assessments, healthcare-specific information security (B3S, BSI C5 attestation, §393 SGB V), and a one-day AI integration workshop for SMEs. Alongside this, activeMind.cloud is a proprietary SaaS compliance management portal that consolidates multiple regulatory frameworks into a single integrated management system and includes AI-supported contract review for GDPR. activeMind.academy is a parallel online training platform delivering structured compliance courses, with a KI-Manager (AI Manager) certification scheduled for launch in October 2026.

Customer segments span SMEs (KMU) and large corporations (Konzerne) across healthcare, financial services, automotive/manufacturing, IT and software, and the public sector. Go-to-market is sales-led: a free 30-minute initial consultation qualifies prospects, who are converted into retainer or project engagements. Distribution combines direct consulting sales with self-serve SaaS and academy subscriptions, plus a partner network comprising the affiliated law firm activeMind.legal Rechtsanwalts GmbH and the Swiss and UK partner entities. Pricing is not publicly disclosed; the firm itself holds ISO 27001, ISO 37301, and a TISAX assessment result, which serve both as quality signals and as audit credentials.

Name

activeMind.AG

Legal name

activeMind AG Management- und Technologieberatung

Website

https://activemind.de

Company type

Private

Founded year

2000

Operating status

Operating

Headcount range

11–50 employees

Short description

activeMind AG is a German management and technology consulting firm specializing in GDPR data protection, NIS2 information security, and AI compliance advisory. It serves SMEs and large corporations across healthcare, finance, manufacturing, IT, and the public sector via consulting retainers, the activeMind.cloud SaaS portal, and the activeMind.academy training platform.

Ownership category

akta.pro rank

Headquarters

HQ city

Munich

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Others

Revenue model

1. Consulting Services: Core revenue stream from professional consulting engagements including external data protection officer services, external information security officer services, NIS2/DORA/CRA compliance consulting, ISO certification support, and AI strategy implementation workshops.
2. SaaS Subscriptions (activeMind.cloud): Subscription-based access to compliance management software platform for managing integrated management systems across multiple standards.
3. Online Training (activeMind.academy): Revenue from online courses and webinars on compliance topics, including certification programs like AI Manager course.

Pricing tiers

Go-to-market motion1 record

Distribution channels4 records

Marketing channels7 records

Core offering

activeMind AG is a German management and technology consulting firm delivering data protection (DSGVO/GDPR), information security (NIS2, ISO 27001), financial resilience (DORA), product cybersecurity (CRA), and AI compliance services. Its offering combines expert consulting engagements (external data protection officers, external information security officers, certification support, AI strategy workshops) with two proprietary SaaS platforms: activeMind.cloud, a compliance management portal for integrated management systems, and activeMind.academy, an online training platform offering structured courses including the KI-Manager certification.

Product overview

activeMind.AG is a management and technology consulting firm specializing in data protection (GDPR/Datenschutz), information security, and artificial intelligence compliance. The company operates a portfolio model combining consulting services with two proprietary SaaS platforms: activeMind.cloud (a compliance management portal for integrated management systems supporting ISO 27001, NIS2, DORA, CRA, ISO 42001, and ISO 37301) and activeMind.academy (an online training platform offering courses including a KI-Manager certification program). The consulting portfolio covers external data protection officer and information security officer services, certification advisory for ISO 27001, ISO 42001, and ISO 37301, NIS2 compliance (including gap analysis, executive training, incident response, and supply chain security), DORA compliance for the financial sector, hospital information security (B3S), TISAX assessment, CRA advisory, and strategic AI integration workshops. The company holds ISO 27001 and ISO 37301 certifications for its own operations and delivers content via a magazine, downloads, templates, and generators to support practitioners.

Differentiator

Problem solved

Functional benefit

Brands

• activeMind.cloud: SaaS compliance portal for integrated management systems supporting various standards such as NIS2, ISO 27001, ISO 42001, and others.
• activeMind.academy
• activeMind.jobs
• activeMind.legal

Products and services

• activeMind.cloud SaaS compliance management portal for integrated management systems that allows organizations to manage multiple standards (ISO 27001, NIS2, DORA, CRA, ISO 42001, ISO 37301) in one platform, with AI-assisted contract review capabilities for GDPR compliance.
• activeMind.academy Online training platform for compliance topics including data protection, information security, and AI, offering structured courses such as the KI-Manager (AI Manager) certification.
• Onlinekurs KI-Manager (AI Manager Certification Course) Online certification course on AI management for professionals, covering generative AI tools, EU AI Act compliance, and responsible AI deployment in corporate settings.
• Externer Datenschutzbeauftragter (External Data Protection Officer) External data protection officer service that monitors DSGVO compliance, reduces fine, liability, and reputational risks, and strengthens trust among employees, customers, and business partners.
• Externer Informationssicherheitsbeauftragter (External Information Security Officer) External information security officer service that identifies vulnerabilities in IT systems and processes, proposes protective measures, and strengthens cyber defense against external and internal threats.
• ISO 27001 Zertifizierungsberatung Consulting support for ISO/IEC 27001 certification, guiding organizations through implementation and audit preparation for an information security management system (ISMS).
• NIS2-Compliance-Beratung Advisory services for compliance with the EU NIS2 Directive (Network and Information Security Directive 2), implemented in Germany via BSIG. Includes gap analysis, executive training, incident response frameworks, and supply chain security.
• NIS2-Gap-Analyse Structured gap analysis to identify deficiencies in existing information security management relative to NIS2/BSIG requirements, including supply chain management gaps, with a prioritized action list.
• NIS2-Geschäftsleitungsschulung Legally required management training under NIS2/BSIG §38, customized to the specific company and its risk profile, fulfilling the statutory training obligation for executive leadership.
• Digital Operational Resilience Act (DORA) Beratung Advisory for DORA compliance targeting financial sector entities and their ICT third-party risk management, covering IKT risk management, incident reporting, and operational resilience requirements.
• Informationssicherheit für Krankenhäuser Information security consulting for hospitals and medical facilities addressing B3S Medizinische Versorgung standards, KRITIS requirements under NIS2, and §393 SGB V cloud data processing.
• TISAX Assessment Advisory and assessment support for TISAX (Trusted Information Security Assessment Exchange), the automotive industry's information security evaluation standard.
• Beratung zum Cyber Resilience Act (CRA) Advisory services for Cyber Resilience Act compliance covering product impact assessment, classification, compliance kickoff workshops, management system setup, and product conformity assessment for products with digital elements.
• KI-Beratung (AI Consulting) Strategic AI consulting that guides organizations through step-by-step integration of AI into processes, including use case identification, tool and method selection, and a personalized AI integration roadmap.
• KI-Einführungs-Workshop One-day workshop guiding SMEs through the strategic integration of AI into business processes, identifying suitable use cases, selecting tools and methods, and developing an AI integration roadmap.
• ISO 42001 Zertifizierungsberatung Advisory support for ISO/IEC 42001 certification, the international standard for AI management systems (AIMS), guiding organizations in establishing an AIMS.

Quantifiable outcome

• Reduces liability exposure from DSGVO fines, personal liability of management under NIS2, and product recall risks under CRA
• +2 more outcomes

Named customers5 records

Segments5 records

Ideal customer profiles6 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability9 records

Feature2 records

Partnerships

Four partnerships are on record, tiered core, regional and minor.

• activeMind.legal RechtsanwältecoreStrategic or Co-development PartnerPartnership with affiliated law firm providing integrated legal advice alongside consulting services. Law firm specializes in data protection, AI law, and compliance legal matters. Separate legal entity with its own website (activemind.legal).
• activeMind.chregionalStrategic or Co-development PartnerPartner company operating in Switzerland, extending company's geographic reach to the Swiss market for data protection and information security services.
• activeMind.ukregionalStrategic or Co-development PartnerPartner company operating in the United Kingdom, extending company's geographic reach to the UK market for compliance consulting services.
• HISCOX AGminorOthersProfessional liability insurance provider covering the company worldwide, with specific limitations for claims brought before courts in the USA or Canada.

Scale indicators2 records

Recent moves6 records

Expansion highlights6 records

Emerging players

• Drata: Automated compliance and trust management platform targeting ISO 27001, SOC 2, and similar frameworks. Overlaps with activeMind.cloud's SaaS scope; lacks activeMind's on-the-ground German/EU regulatory consulting and legal partnerships.
• Vanta: VC-backed compliance automation platform for SOC 2, ISO 27001, HIPAA, and increasingly NIS2/DORA. Competes with activeMind.cloud on automated evidence collection and continuous monitoring; however, weaker on German/EU regulatory depth and bundled legal advisory.
• AuditBoard: Cloud-based GRC platform covering audit, risk, and compliance including SOX/ISO frameworks. Adjacent competitor to activeMind.cloud for integrated management systems, with deeper enterprise SOX footprint but less European regulatory specialization.

Regional players

• Datenschutz Nord (DSN Group): German data protection and information security consultancy providing external DPO services and ISO 27001 advisory. Closest direct competitor to activeMind's external Datenschutzbeauftragter and DSGVO consulting offerings within Germany.
• Protektis (Protektis GmbH): Specialist German consultancy for data protection, information security, and NIS2/DORA advisory serving mid-market and enterprise. Comparable boutique scale and regulatory focus to activeMind within the German-speaking market.
• Link11 (or comparable German cyber consultancy): European cybersecurity and compliance services provider with German presence, overlapping on NIS2 readiness and ISO 27001 implementation. Indirect peer given more technical/operational security orientation versus activeMind's compliance-plus-legal angle.
• SRC Security Research & Consulting: Germany-based information security and compliance consultancy focused on ISO 27001, BSI standards, and KRITIS requirements. Direct regional peer to activeMind's information security practice, comparable scale and German-market focus.

Broad incumbents

• TÜV SÜD (Management Service): German certification body and compliance consultancy offering ISO 27001/37301 audits, NIS2 advisory, and sector-specific certifications. Overlaps with activeMind on certification advisory and audit preparation, with stronger brand in formal certification issuance.
• Deloitte (Risk & Compliance practice): Global Big Four consultancy with large DSGVO, NIS2, DORA, and ISO 27001 advisory practices across Germany and EMEA. Competes for enterprise-scale compliance mandates where activeMind also plays but with substantially larger teams and cross-border delivery.
• secunet (Konzern): German cybersecurity specialist serving public sector, healthcare, and critical infrastructure with information security consulting and BSI-aligned services. Competes for KRITIS/NIS2/B3S mandates where activeMind also serves healthcare and public clients.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/activemind-ag

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles7 records

Subsidiaries5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about activeMind.AG