What Trigonum GmbH does

Trigonum GmbH is a Hamburg-based German consultancy specializing in information security and data protection compliance, founded in 2006 and led by managing directors Peter Bodino (Dipl. Wirtschaftsinformatiker) and Stephan Ernst (Dipl. Wirtschaftsingenieur). The firm operates as an ISO/IEC 27001:2022 certified (TÜV Rheinland, October 2025) full-service provider targeting enterprises that require GDPR compliance, ISO 27001 certification, TISAX assessments, NIS2 readiness, DORA alignment, and BSI KRITIS standards. Service coverage spans external data protection officer (DPO) and external information security officer (CISO) mandates, gap assessments, ISMS/DSMS implementation, internal and supplier audits, awareness training, and ongoing outtasking support.

The firm's core technology is TRIGOvernance, a proprietary ISMS/DSMS portal built natively on Microsoft SharePoint and Microsoft 365. The platform comprises nine functional modules: document control, audit management, asset register, risk management, processing descriptions, reporting, supplier management, contract management, and action management. A related offering, TRIGOsecure, provides a TISAX-focused ISMS portal. Trigonum also delivers Microsoft 365 and SharePoint consulting for digital workplace transformation, embedding data protection and information security requirements into collaboration, content management, and business process deployments. The technology stack depends on the Microsoft ecosystem, with the value-add being Trigonum's regulatory and process expertise layered onto standard M365 capabilities.

Trigonum's revenue model is built entirely on professional services across five streams: consulting engagements, Microsoft 365 implementations, training, audit services, and managed outtasking. Pricing is bespoke and quote-based with no public rate cards. The go-to-market is direct enterprise field sales into the DACH region (Germany, Austria, Switzerland), supported by a regulatory-focused content marketing blog and SEO-driven organic search. Reference customers include a DAX-listed corporation, an automotive Tier 1 supplier, a Bundesliga football club, a health insurer, a payment-services software developer, public administration, an airport, and a data center operator. The company is independently held with no disclosed external investors or parent.

Name

Trigonum GmbH

Legal name

Trigonum GmbH

Website

https://trigonum.de

Company type

Private

Founded year

2006

Operating status

Operating

Headcount range

11–50 employees

Short description

Hamburg-based German consultancy founded in 2006 delivering GDPR, ISO 27001, TISAX, NIS2, DORA, and Microsoft 365 compliance and information security services to DACH-region enterprises via its proprietary TRIGOvernance ISMS/DSMS platform and direct consulting engagements.

Ownership category

akta.pro rank

Product category

Information Security and Data Protection Consulting

NAICS

Other Scientific and Technical Consulting Services (54169), Computer Systems Design Services (541512), Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Integrated Systems Design (7373)

akta.pro primary industry

Privacy, Consent & Data Protection Management (BPAEAPAF)

akta.pro secondary industries

Third-Party Risk, Vendor Due Diligence & Supply Chain Compliance (BPAEAPAG), IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)

Keywords

• Information security consulting
• GDPR compliance services
• Microsoft 365 consulting
• ISMS implementation
• Data protection advisory

Headquarters

HQ city

Hamburg

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Consulting Services: Professional consulting services for information security and data protection including ISMS implementation, GDPR compliance, external DPO services, and regulatory compliance (ISO 27001, TISAX, NIS2, DORA, BSI KRITIS).
2. Microsoft 365 Solutions: Implementation and consulting services for Microsoft 365 and SharePoint solutions including digital transformation, business applications, collaboration platforms, and quality management systems.
3. Training Services: ISMS awareness training, data protection training, and professional education for enterprises on information security and privacy compliance topics.
4. Audit Services: Internal audits, supplier audits, and certification support for ISO 27001, TISAX, and other information security standards.
5. Outsourcing/Outtasking: Outtasking services for ongoing information security and data protection management support.

Go-to-market motion1 record

Distribution channels3 records

Marketing channels3 records

Core offering

Trigonum GmbH delivers information security and data protection (GDPR) consulting services to mid-market and enterprise clients, centered on its proprietary TRIGOvernance ISMS/DSMS portal built natively on Microsoft 365 and SharePoint. Service lines include external DPO and Information Security Officer functions, ISO 27001 and TISAX certification support, NIS2 compliance, KRITIS-focused ISMS, Cyber Risk Check assessments, Microsoft 365 advisory, and data protection training, primarily for clients in automotive, healthcare, financial services, government, and aviation sectors across the DACH region.

Product overview

Trigonum GmbH is a consulting company offering a modular product portfolio centered around TRIGOgovernance, an integrated ISMS/DSMS portal built on Microsoft SharePoint/Microsoft 365. TRIGOgovernance comprises nine modules: Document Control, Audit Management, Asset Register, Risk Management, Processing Description, Reporting, Supplier Management, Contract Management, and Action Management. The company complements its software platform with professional consulting services including external data protection officers, external information security officers, ISO 27001 certification consulting, TISAX assessment services, NIS2 compliance consulting, Microsoft 365 consulting, and BSI Cyber Risk Check services. All offerings are delivered by certified practitioners based in Hamburg.

Differentiator

Problem solved

Functional benefit

Brands

• Trigovernance: ISMS/DSMS portal developed by Trigonum for managing integrated data protection and information security according to ISO 27701, NIS 2, TISAX, based on Microsoft 365 and SharePoint. Includes modules for document control, audit management, asset register, risk management, processing descriptions, reporting, supplier management, contract management, and action management.

Quantifiable outcome

• ISO 27001:2022 certification achieved by Trigonum demonstrating compliance with international information security standards

Named customers12 records

Segments5 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Five partnerships are on record, tiered core.

• TÜV RheinlandcoreImplementation/ SI/ Consulting Partner · 2 October 2025TÜV Rheinland conducted the official ISO/IEC 27001:2022 certification audit and issued the certification to Trigonum GmbH. Ralph Freude, Head of Businessline ICT at TÜV Rheinland, presented the certificate on November 17, 2025.
• MicrosoftcoreTechnology or IntegrationCore technology partner providing the Microsoft 365 and SharePoint platform on which Trigonum's proprietary TRIGOvernance ISMS/DSMS portal is built. Trigonum provides Microsoft 365 consulting and implementation services for digital transformation and compliance.
• Bundesamt für Sicherheit in der Informationstechnik (BSI)coreStrategic or Co-development PartnerBSI led the consortium for developing DIN SPEC 27076 (CyberRisikoCheck) in cooperation with BVMW and other partners. Trigonum offers services based on BSI standards including Cyber Risk Check methodology for SMEs.
• Bundesverband mittelständische Wirtschaft (BVMW)coreStrategic or Co-development PartnerBVMW served as deputy leader in the consortium for DIN SPEC 27076 CyberRisikoCheck together with BSI. Trigonum participates in this ecosystem to serve SME clients.
• DQS (Deutsche Gesellschaft zur Zertifizierung von Managementsystemen)coreImplementation/ SI/ Consulting PartnerTrigonum has partnered with DQS for combined certification support of integrated information security and IT service management systems according to ISO 27001 and ISO 20000 standards.

Scale indicators1 record

Recent moves5 records

Expansion highlights6 records

Direct peers

• datenschutz nord GmbH: Specialized German data protection consultancy offering external DPO services, DSGVO consulting, and DSMS implementation — overlapping with Trigonum's core external-DPO and GDPR practice.
• Vogel & Partner: German data protection and information security law firm offering external DPO services and DSGVO/ISO 27001 consulting — a direct competitor in DACH enterprise privacy and security advisory.
• Secfix: Berlin-based compliance automation platform focused on ISO 27001 and GDPR for SMEs and mid-market, directly overlapping Trigonum's ISMS consulting offering but with a software-first, recurring SaaS model.
• DataGuard: Munich-based data protection and information security consultancy (formerly Dr. Datenschutz) offering external DPO services, ISO 27001 implementation, and compliance tooling — a close direct competitor in DACH.
• DSN-Gruppe: German data protection consultancy group providing external DPO services and DSGVO/DSMS consulting — a direct peer in the enterprise DPO outsourcing market.
• HvS-Consulting AG: Munich-based ISMS/ISO 27001 and BSI-grundschutz consulting specialist serving automotive and industrial clients — directly comparable in TISAX/ISO 27001 implementation work.
• Corporate Trust GmbH: German risk management, compliance, and information security consultancy offering ISMS, BCM, and third-party risk services — competing for the same enterprise compliance budgets as Trigonum.

Broad incumbents

• TÜV SÜD: Global certification and advisory giant offering ISO 27001/TISAX audits plus compliance consulting — competes with Trigonum both as a certification body and as a broader compliance service provider.
• OneTrust: Global privacy and GRC platform offering automated GDPR/ISO 27001 management at scale — a broad incumbent whose standardized tooling competes against Trigonum's bespoke ISMS/DSMS implementations.
• Microsoft Purview: Microsoft's native compliance, governance, and data protection suite embedded in the Microsoft 365 ecosystem — competes directly with TRIGOvernance and creates platform dependency risk.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/trigonum-gmbh

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Trigonum GmbH