IITR Datenschutz GmbH

What IITR Datenschutz GmbH does

IITR Datenschutz GmbH is a Munich-based (registered office in Gröbenzell) German private limited company founded in 2009 that sells data protection (Datenschutz) and information security compliance products and services to German and DACH businesses. Founded and led by data protection attorney Dr. Sebastian Kraska, the company combines legal advisory services with proprietary cloud-based management software, marketed primarily to small and medium-sized enterprises (Datenschutz-Kit) and large enterprises (Compliance-Kit 2.0, based on ISO 27701). The portfolio extends to an ISMS-Kit (ISO/IEC 27001, VDA-ISA/TISAX), a multi-language eLearning platform (DE/EN/IT/ES), a whistleblower system with ombudsperson, and audit/certification services including Europrivacy GDPR certification. Technology is delivered through a web-based cloud platform with email-based password-free magic-link authentication, AI chatbots (using Google, Kommunicate.io, Akool, and OpenAI services with safeguards preventing automatic data transfer), and a pending proprietary patent ("IITR Datenschutz-Patent – Der dritte Weg").

The business model mixes recurring subscription software (Datenschutz-Kit, Compliance-Kit 2.0, ISMS-Kit, eLearning) with professional services, primarily external Data Protection Officer (DPO) engagements. Pricing is quote-based and not publicly disclosed; multi-year contracts are typical. Go-to-market is consultative and primarily direct via website quote requests, supported by a regional partner (Vertriebspartner) channel across Germany, free-tools content marketing (Vi-Lex video lexicon, GDPR generators, self-check tools), and an English-language subsidiary site (iitr.us). The company serves a mix of mid-market enterprise clients (named logos include IDnow, NAVVIS, Synaptics, Numbrs, enmacc, ClickFunnels, Accompio, iDOMOO) and a long tail of SMEs. Headcount is 7, the firm is founder-owned with no disclosed external investors or funding rounds, and operations are headquartered at Eschenrieder Str. 62c, 82194 Gröbenzell, with an additional Munich city-center office at Marienplatz 2.

Name

IITR Datenschutz GmbH

Legal name

IITR Datenschutz GmbH

Website

https://iitr.de

Company type

Private

Operating status

Operating

Headcount range

1–10 employees

Short description

IITR Datenschutz GmbH is a Munich-based German company founded in 2009 that combines proprietary GDPR and information security compliance software (Datenschutz-Kit, Compliance-Kit 2.0, ISMS-Kit, eLearning) with external Data Protection Officer services for SMEs and large enterprises across the DACH region.

Ownership category

akta.pro rank

Product category

Data Protection & Information Security Compliance

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (5182), Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Data Privacy, Consent & Compliance Management (HDAEADAG)

akta.pro secondary industries

Data Security & Privacy Services (DLP, Encryption, Privacy Ops) (BPAKAHAM), Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK)

Keywords

• Data protection compliance
• GDPR management software
• Information security management
• External data protection officer
• Compliance management systems

Headquarters

HQ city

Gröbenzell

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. Subscription-based Online Products: Cloud-based data protection management software delivered via subscription, including Datenschutz-Kit for SMEs, Compliance-Kit 2.0 for large enterprises, ISMS-Kit for information security management, eLearning platform, and audit systems.
2. External Data Protection Officer Services: Provision of certified external data protection officers to businesses, with flexible solutions for small and large organizations.
3. Training and eLearning: Web-based training platform offering data protection, information security, occupational safety, and AI training courses in multiple languages (German, English, Italian, Spanish).

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

IITR Datenschutz GmbH provides GDPR and information-security compliance solutions for businesses, delivered through cloud-based management systems (Datenschutz-Kit for SMEs, Compliance-Kit 2.0 for large enterprises, ISMS-Kit) and complemented by fee-based services including external data protection officer appointments, audits and certifications (e.g., Europrivacy), a whistleblower system, and multilingual eLearning. Customers access the software via browser-based portals with password-free authentication and subscribe on multi-year contracts with quote-based custom pricing.

Product overview

IITR Datenschutz GmbH offers a comprehensive suite of data protection and information security products and services. The core product portfolio consists of management system software (Datenschutz-Kit for SMEs, Compliance-Kit 2.0 for large enterprises based on ISO 27701), eLearning training platform, ISMS-Kit for ISO 27001 compliance, and the Hinweisgebersystem for whistleblower reporting. These software products are complemented by professional services including external data protection officer appointments, audits and certifications, and specialized solutions for kindergartens and EU representative services. The company also provides free tools including Vi-Lex video lexicon, privacy check generators, and statement generators.

Differentiator

Problem solved

Functional benefit

Brands

• Datenschutz-Kit: Cost-appropriate EU GDPR complete solution for small and medium-sized businesses.
• Compliance-Kit 2.0
• ISMS-Kit
• eLearning
• Vi-Lex
• privASSIST
• INSIDE

Products and services

• Datenschutz-Kit Cost-effective EU GDPR complete solution for small and medium-sized enterprises (KMU), bundling external data protection officer services with IITR's data protection management software.
• Compliance-Kit 2.0 Comprehensive cloud-based data protection management system for large enterprises and organizations, aligned with the ISO 27701 standard for privacy information management.
• ISMS-Kit Web-based Information Security Management System (ISMS) based on ISO/IEC 27001 and VDA-ISA (TISAX), providing systematic guidance and documentation templates for building and operating an ISMS.
• eLearning (Datenschutz Schulung) Web-based training platform offering data protection, information security, occupational safety and AI courses for employees, with content available in German, English, Italian and Spanish.
• Externer Datenschutzbeauftragter (External Data Protection Officer) Provision of a certified external data protection officer to medium and large companies, including individual consultation from IITR's data-protection experts.
• Hinweisgebersystem (Whistleblower System / INSIDE) Whistleblower reporting system including ombudsperson services for companies, designed to meet EU whistleblower directive requirements.
• Datenschutzkoordinator (In-house Data Protection Coordinator) Support service providing in-house data protection coordination for companies that need internal data-protection management capacity.
• Audit und Zertifizierung (Audit and Certification) Data protection and information security audit and certification services, supported by the privASSIST compliance-checking tool for verifying adherence to data-protection requirements.
• EU-Vertreter nach Artikel 27 EU-DSGVO (EU Representative) EU representative service for non-EU companies that require a designated representative under GDPR Article 27.
• Europrivacy DSGVO-Zertifizierung (Europrivacy GDPR Certification) Europrivacy GDPR certification service enabling organizations to obtain formal data-protection compliance certification.
• Code of Conduct / Datenschutz-Kodex Code of conduct and data-protection code development service for organizations establishing internal compliance guidelines and industry standards.
• Verhaltensregeln Kinderbetreuung (Behavior Rules for Childcare) Specialized data-protection solution package for kindergartens and childcare facilities covering privacy compliance in daycare settings.
• IITR Datenschutz-Patent (Der dritte Weg) Proprietary patented approach ("Der dritte Weg" / "The Third Way") offering innovative data-protection compliance methodology and solutions, offered as a standalone offering.

Quantifiable outcome

• Companies can demonstrate ongoing GDPR compliance through systematic documentation in the management systems

Named customers8 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability2 records

Feature4 records

Partnerships

One partnership is on record.

• Regional Partners (Vertriebspartner)coreChannel Partner/ Reseller/ DistributorRegional partners across Germany extend IITR's service delivery and local presence, reselling data protection services and providing on-ground support for customers.

Scale indicators1 record

Recent moves6 records

Expansion highlights6 records

Regional players

• EQS Group: German compliance SaaS provider focused on whistleblower systems, integrity, and governance. Overlaps with IITR's Hinweisgebersystem/INSIDE whistleblower offering and broader compliance suite.
• Wirelane (PRISMA / Datenschutz Beratung): Includes German DPO and data protection consulting offerings competing with IITR's external DPO service line for SME and mid-market clients in Germany.

Direct peers

• DataGuard: Munich-based GDPR and information security compliance SaaS with DPO services for SMEs and enterprises. Direct peer in target segment, geography, and product approach.
• OneTrust: Leading global privacy, security, and governance software platform. Competes directly with IITR's Datenschutz-Kit and Compliance-Kit 2.0 across consent, DSAR, and PIA workflows, but at significantly larger scale and broader feature set.
• DPMS (Data Protection Management System): PrivacyOne's German data protection management software competing in the same DACH SME/mid-market compliance segment as Datenschutz-Kit.
• Securys (formerly 2B Advice): German-headquartered privacy and cybersecurity consultancy with DPO outsourcing and compliance tooling. Closest German-language peer to IITR, often competing for the same external DPO engagements.
• TrustArc: Privacy compliance and risk management SaaS offering privacy program management, assessments, and certifications. Direct competitor to IITR's compliance management and Europrivacy certification offerings.
• BigID: Data intelligence platform for privacy, security, and governance. Competes with IITR in data mapping, DSAR automation, and privacy program management for enterprise buyers.

Broad incumbents

• Collibra: Enterprise data intelligence and governance platform with privacy and consent modules. Overlaps with IITR's data protection management and ISMS positioning but serves a much broader data governance buyer.
• KPMG / EY / PwC DPO Services: Big 4 advisory firms provide outsourced DPO, GDPR compliance, and ISMS services. Compete with IITR primarily at the upper end of the enterprise segment where buyer risk profiles favor global brand names.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• YouTubeyoutube.com/user/datenschutzvideos
• LinkedInlinkedin.com/company/iitr-datenschutz-gmbh

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about IITR Datenschutz GmbH