legitimis

What legitimis does

legitimis GmbH is a German boutique data protection and information security consulting firm founded in 2010 by Sebastian Feik and headquartered in Bergisch Gladbach. The firm operates from three German locations (Bergisch Gladbach HQ, plus Berlin and Landshut representative offices opened in 2017 and 2018) and maintains a US subsidiary, legitimis US LLC (Kansas, established 2014 in Atlanta). Its service portfolio is anchored by External Data Protection Officer (DPO) retainers for the Mittelstand and large enterprises, Datenschutz as a Service (DSaaS) for small businesses and solo practitioners, and one-time Independent Potential Analyses (audits).

The firm's core proprietary technology is LEXGUARD, a data protection management software co-developed with LEXEMO LLC and launched in 2018, targeted at small and medium-sized businesses that need structured compliance tooling without an internal compliance department. legitimis combines legal, technical, and organizational expertise across DSGVO, BDSG, ISO/IEC 27001, and ISO/IEC 27701, and holds memberships in the BVMW, GDDS, and BvD professional associations. In 2025, the firm expanded into AI-data-protection advisory through Know-How Investor partnerships with QLero GmbH (mAikit) and AWEOS GmbH, plus technology alliances with NENNA.AI and TÜV TRUST IT, offering clients AI-privacy tools and certified IT security services at preferential pricing.

Commercially, legitimis runs a sales-led, direct-engagement go-to-market with no self-serve channel: customers reach the firm via the legitimis.de website callback forms, phone (+49 2202 289 410), or email, and receive individually tailored engagements rather than packaged products. Revenue is generated predominantly through annual subscription retainers (External DPO, DSaaS), supplemented by one-time audit fees and equity/deepened-partnership arrangements via the Know-How Investor model. Named customers span healthcare and social services (Bergische Diakonie), diversified industrials (Freudenberg), and IT/data services (SMART DATA, iW, Sponge, TROOPER DATASERVICE), with pricing quote-based and not publicly disclosed.

Name

legitimis

Legal name

legitimis GmbH

Website

https://legitimis.de

Company type

Private

Founded year

2010

Operating status

Operating

Headcount range

1–10 employees

Short description

legitimis is a German boutique data protection consulting firm offering external DPO services, Datenschutz as a Service, and proprietary LEXGUARD software to Mittelstand, SMBs, and large enterprises, with a 2025 expansion into AI compliance advisory partnerships.

Ownership category

akta.pro rank

Product category

Data Protection & Privacy Compliance Services

NAICS

Business Service Centers (56143)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)

akta.pro secondary industry

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

Keywords

• Data protection consulting
• GDPR compliance services
• External data protection officer
• Data protection software
• Information security consulting

Headquarters

HQ city

Bergisch Gladbach

HQ country

Germany

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. External Data Protection Officer Services: legitimis takes full responsibility for a company's data protection as an external DPO. Clients avoid the cost and complexity of an internal hire. Targeted at Mittelstand (mid-sized companies) and large enterprises.
2. Datenschutz as a Service (DSaaS): Full-service data protection support covering analysis, implementation, training, and ongoing monitoring. Provided as a managed service retainer, suitable for small businesses, sole proprietors, and self-employed professionals.
3. Independent Potential Analysis / Audit: One-time assessment of current data protection maturity, including an initial consultation, detailed status review, actionable recommendations, and cost estimate for next steps.
4. Know-How Investment / Startup Advisory: legitimis acts as a know-how investor in startups, providing capital and over 20 years of data protection management expertise in exchange for equity or a deepened partnership relationship.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

legitimis is a German data protection and information security consulting firm offering outsourced data protection officer services (externer Datenschutzbeauftragter), Datenschutz as a Service (DSaaS), independent data protection audits, and the proprietary LEXGUARD software for SMBs. The firm combines legal, technical, and organizational expertise to deliver individually tailored DSGVO compliance solutions.

Product overview

legitimis operates as a data protection consulting firm offering a combination of consulting services and proprietary software. The portfolio includes LEXGUARD (a proprietary data protection software for small/medium businesses launched in 2018) alongside service offerings such as external data protection officer (externer Datenschutzbeauftragter), Datenschutz as a Service (full data protection management), and independent potential analysis/audit services. The company positions itself as providing individual solutions combining legal, technical, and organizational expertise.

Differentiator

Problem solved

Functional benefit

Brands

• LEXGUARD: Eigene Datenschutzsoftware für kleine und mittlere Unternehmen, entwickelt in Kooperation mit LEXEMO LLC.
• legitimis group

Products and services

• LEXGUARD Proprietary data protection management software for small and medium-sized enterprises, co-developed with LEXEMO LLC, providing structured tools to manage DSGVO compliance.
• External Data Protection Officer (Externer Datenschutzbeauftragter) Outsourced data protection officer service in which legitimis assumes full responsibility for a client's data protection compliance. Targeted at Mittelstand and large enterprises that need a qualified DPO without an internal hire.
• Datenschutz as a Service (DSaaS) Full-service data protection support covering analysis, implementation, training, and ongoing monitoring, delivered as a managed retainer for small businesses, sole proprietors, and self-employed professionals.
• Independent Potential Analysis / Audit One-time assessment of a client's current data protection maturity, including an initial consultation, detailed status review, actionable recommendations, and a cost estimate for follow-on work.
• Know-How Investment / Startup Advisory Strategic advisory engagement in which legitimis provides capital plus more than 20 years of data protection expertise to early-stage technology companies building privacy-by-design products, in exchange for equity or partnership.

Quantifiable outcome

• 100% customer satisfaction rate claimed by the company

Named customers3 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

Feature1 record

Partnerships

Eight partnerships are on record, tiered core and minor.

• QLero GmbH (mAikit)coreTechnology or Integration · 1 January 2025legitimis partners with QLero GmbH (provider of mAikit) to offer AI-powered data protection tools. The collaboration combines technical know-how with strategic vision, enabling clients to build sustainable and future-secure systems where data protection, compliance, and smart solutions work together. mAikit is offered to legitimis customers at preferential pricing.
• NENNA.AI (nenna.ai GmbH)coreTechnology or Integration · 1 January 2025NENNA.AI enables businesses to leverage AI without risks to personal or confidential information. The solution ensures data remains protected and all legal requirements are met, making AI both powerful and responsible. legitimis customers can access NENNA.AI tools at preferential pricing.
• LEXEMO LLCcoreTechnology or Integration · 1 January 2018Co-development of LEXGUARD, legitimis's own proprietary data protection software for small and medium-sized businesses. LEXGUARD was launched in 2018 as a structured data protection management tool for the SMB segment.
• TÜV TRUST IT GmbH Unternehmensgruppe TÜV AUSTRIAcoreStrategic or Co-development PartnerTÜV TRUST IT provides IT security auditing, certification, vulnerability analysis, consulting, and training services. The partnership enables legitimis to offer clients comprehensive technical security alongside data protection compliance, backed by certified standards and trusted third-party validation.
• AWEOS GmbHcoreStrategic or Co-development Partnerlegitimis acts as a know-how investor in AWEOS, accompanying the product development and operations of AWEOS's AI telephone solution. The engagement ensures future-secure, compliant AI products with data protection positioned as a driver of innovation rather than a constraint.
• BVMW e.V. (Bundesverband)minorOthersMember of BVMW, the German Mittelstand association, representing small and medium-sized businesses. Provides networking, advocacy, and referral opportunities within the German business community.
• GDDS e.V. (Gesellschaft für Datenschutz und Datensicherheit)minorOthersMember of GDDS, the German society for data protection and data security. Supports knowledge exchange and professional standards in data protection.
• BvD e.V. (Berufsverband der Datenschutzbeauftragten)minorOthersMember of BvD, the professional association for data protection officers in Germany. Contributes to professional standards, continuing education, and industry advocacy.

Scale indicators5 records

Recent moves12 records

Expansion highlights5 records

Direct peers

• datenschutz cert GmbH: German privacy and information security consultancy providing external DPO services, audits, and certifications. Directly competes for the same DSGVO-mandated work as legitimis.
• 2B Advice GmbH: German data protection and information security consultancy with external DPO offerings for SMEs and enterprises. Comparable service mix and DSGVO focus.
• Datenschutz Nord GmbH: Germany-based data protection consultancy offering external DPO services, audits, and DSGVO compliance support. Closely comparable service portfolio and target audience (German Mittelstand and enterprise).
• DP-Dock GmbH: German external DPO and data protection software provider. Direct overlap in subscription DPO services and DSGVO tooling for small and mid-sized businesses.
• activeMind (now part of avaloq / various): Munich-based data protection and information security consultancy with external DPO services and training offerings for the DACH market.

Emerging players

• DataGuard: Munich-based privacy and information security SaaS platform combining compliance software with expert advisory for SMEs and mid-market. A more software-led competitor in the same DSGVO/compliance niche.
• heyData: Berlin-based DSGVO compliance SaaS for SMBs combining automation tools with legal expertise. Targets the same KMU segment as legitimis's LEXGUARD/DSaaS offerings.

Broad incumbents

• OneTrust: Global privacy, security, and governance software platform. Competes indirectly by automating compliance tasks that legitimis performs manually, especially for larger enterprise buyers.
• TrustArc: Privacy compliance and risk management SaaS provider with privacy program automation. Competes at the platform layer adjacent to legitimis's consulting-led model.
• KPMG (Germany Privacy practice): Big Four firm with a dedicated DSGVO and data protection consulting practice serving enterprise and mid-market clients in Germany. Overlaps with legitimis at the high end of the market.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/legitimis-gmbh

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Subsidiaries1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about legitimis