V-Formation GmbH

What V-Formation GmbH does

V-Formation GmbH is a privately held German compliance consultancy founded in 2018 in Karlsruhe by specialized lawyers (Wirtschaftsjuristen) in direct response to the GDPR (DSGVO). The firm provides external data protection officer (DSB/DSO) services, pragmatic data protection management implementation, information security officer (ISB) services, NIS-2 cybersecurity compliance, AI Act (KI-VO) compliance advisory, and an outsourced whistleblower reporting office (Hinweisgebermeldestelle) for compliance with the German Whistleblower Protection Act. Its customer base is horizontally diversified across manufacturing (IKA Werke), healthcare technology (nox medical), food/beverage (GEDAT), arts/media (ZKM), software (vta Software), and PropTech (BOTTIMMO), spanning SMBs, mid-market, and government/public-sector clients primarily in Germany and the DACH region, with selective UK coverage via a UK specialist on the team.

The business model is professional services: revenue is generated through project-based consulting and ongoing monthly retainer engagements (e.g., a 'planbare monatliche Pauschale' for external DSB services), with no publicly disclosed pricing or rate cards. The firm does not develop proprietary software; its technology stack centers on third-party compliance platforms such as OneTrust, which it implements and configures for clients. Distribution is direct via website inquiry, email, and phone, supplemented by referral partnerships with law firms (Vogel & Partner) and IT consulting partners (Squadhouse, Ecambria Experts, Computer Consult Wening, Consileon, Mtecx). Go-to-market is sales-led with a content marketing layer (blog, practitioner case studies, webinars) that functions as thought leadership for top-of-funnel lead generation.

V-Formation is a small, founder-led operation reporting 9 employees, with two managing directors — Melanie Witt (business economist, certified data protection officer) and David Heieck (lawyer, certified data protection officer) — supported by certified data protection consultants, an auditor, and back-office staff. The company is registered with Amtsgericht Mannheim (HRB 710109), operates from offices in Karlsruhe and Konstanz, and has not raised external funding or executed acquisitions.

Name

V-Formation GmbH

Legal name

V-Formation GmbH

Website

https://v-formation.gmbh

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

1–10 employees

Short description

V-Formation GmbH is a Karlsruhe-based German compliance consultancy founded in 2018 that provides external data protection officer, information security, AI Act, NIS-2, and whistleblower hotline services to SMBs, mid-market, and public-sector clients across the DACH region.

Ownership category

akta.pro rank

Product category

Data Protection and Compliance Consulting

NAICS

Management Consulting Services (54161)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Records Management, Information Governance & Retention (BPAEAPAO)

Keywords

• Data protection consulting
• GDPR compliance services
• Information security advisory
• AI compliance consulting
• Whistleblower reporting services

Headquarters

HQ city

Karlsruhe

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Others

Revenue model

1. Compliance Consulting Services: V-Formation GmbH generates revenue through professional consulting services including external data protection officer (DSB) placement, data protection project support, pragmatic data protection management implementation, information security officer services, AI compliance advisory, and whistleblower hotline (Hinweisgebermeldestelle) outsourced services. Engagement models include project-based work and ongoing retainers.

Pricing tiers

Go-to-market motion1 record

Distribution channels2 records

Marketing channels4 records

Core offering

V-Formation GmbH is a German compliance consulting firm founded in 2018 by specialized lawyers in Karlsruhe in response to the EU GDPR (DSGVO). The firm provides external data protection officer (DSB) services, information security officer (ISB) services, AI Act (KI-VO) compliance advisory, NIS-2 cybersecurity consulting, and outsourced internal whistleblower reporting offices (Hinweisgebermeldestelle) compliant with the German Whistleblower Protection Act. Services are delivered by certified consultants through project-based engagements and ongoing monthly retainers, with optional implementation support for OneTrust data protection management platforms.

Product overview

V-Formation GmbH is a data protection and compliance consulting firm headquartered in Karlsruhe, Germany. The company offers a portfolio of professional consulting services organized around five core areas: Data Protection (Datenschutz), AI Compliance (KI-Compliance), Information Security (Informationssicherheit), Whistleblower Reporting Office (Hinweisgebermeldestelle), and Cybersecurity (Cybersicherheit). These services are delivered through consulting engagements with certified data protection officers and information security experts, not as software products. The company also provides OneTrust platform implementation as an additional service offering.

Differentiator

Problem solved

Functional benefit

Products and services

• Datenschutz-Beratung (Data Protection Consulting) External data protection officer (DSB) placement, internal DSB advisory support, pragmatic data protection management implementation, ERP/CRM project support, and incident response handling for organizations needing GDPR-compliant data protection programs.
• Informationssicherheits-Beratung (Information Security Consulting) External Information Security Officer (ISB) services covering ISMS development and maintenance, risk analysis, security measure implementation, employee training, emergency management, and regular management reporting.
• Cybersicherheits-Beratung (Cybersecurity / NIS-2 Consulting) NIS-2 directive compliance consulting including applicability assessment, gap analysis, ISMS development and implementation, risk management, employee training, emergency management, and audit support for entities in NIS-2 covered sectors.
• KI-Compliance-Beratung (AI Compliance Consulting) AI compliance advisory including AI policy development, risk classification of AI systems, AI register creation, data protection measures for AI systems, transparency and traceability assurance, and employee AI training programs.
• Hinweisgebermeldestelle (Whistleblower Reporting Office) Outsourced internal reporting office under the Hinweisgeberschutzgesetz, providing a telephone hotline, encrypted online platform for anonymous reporting, professional investigations, and follow-up measure initiation for organizations with 50 or more employees.
• OneTrust-Implementierung (OneTrust Implementation) Implementation support for the OneTrust data protection management platform, including consulting, requirements analysis, customized questionnaire and workflow configuration, training, and ongoing support.

Quantifiable outcome

• All requirements met and exceeded for data protection management setup (vta Software & Service GmbH testimonial)
• +1 more outcomes

Named customers10 records

Segments4 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

Seven partnerships are on record, tiered core and minor.

• Vogel & PartnercoreStrategic or Co-development PartnerVogel & Partner is a law firm listed as a partner of V-Formation. Both firms collaborate on compliance advisory, with Vogel & Partner handling legal work and V-Formation providing data protection and information security expertise. A joint article on Microsoft 365 data protection compliance is attributed to both firms.
• SquadhousecoreStrategic or Co-development PartnerSquadhouse is a partner for the technical development of AI solutions. The partnership is structured as a complementarity: Squadhouse handles technical AI implementation (interfaces, software integration, AI services) while V-Formation covers the compliance and regulatory side (GDPR, AI Act). Together they offer clients a complete package of legally compliant and technically sound AI solutions.
• Ecambria ExpertsminorOthersEcambria Experts is listed as a partner on V-Formation's website. The firm appears to specialize in IT expertise/sachverständiger services.
• Computer Consult WeningminorOthersComputer Consult Wening is listed as a partner of V-Formation. Nature of partnership not further detailed on the website.
• Nümann SiebertminorOthersNümann Siebert is listed as a partner on V-Formation's website. One testimonial (Christian Reppel, GEDAT Getränkedaten GmbH) references 'Herr Nümann' as a contact at V-Formation, suggesting Nümann Siebert may be a predecessor or affiliated consulting firm.
• ConsileonminorOthersConsileon is listed as a partner of V-Formation on the website.
• MtecxminorOthersMtecx is listed as a partner of V-Formation on the website.

Scale indicators2 records

Recent moves6 records

Expansion highlights6 records

Broad incumbents

• Haufe Group: Larger German provider of compliance content, software, and advisory services including data protection and HR compliance — offers overlapping capabilities as part of a broader portfolio including tax, legal, and HR solutions.
• DATEV eG: Large German cooperative IT and consulting provider serving tax advisors, lawyers, and SMBs — offers compliance-relevant software, training, and advisory at scale, with overlapping reach into mid-market German companies.
• KPMG Germany (Consulting / Risk & Compliance): Big 4 advisory practice with established GDPR, NIS-2, and AI compliance service lines — broader incumbent competing for the same large enterprise and regulated-sector clients as V-Formation.

Direct peers

• Datenschutz Nord GmbH: A dedicated German data protection and information security consultancy offering external DPO services, GDPR advisory, and compliance management — directly comparable to V-Formation's core offerings in the DACH market.
• Peters, Schönberger & Partner: Munich-based law firm specializing in data protection, IT, and intellectual property law with a strong external DPO practice — directly comparable specialist competitor in the German market.
• Datenschutzkanzlei: Specialist German data protection law firm and consultancy providing external DPO placement, GDPR audits, and compliance advisory — competes directly with V-Formation on legal-led compliance services.
• Vogel & Partner Rechtsanwälte: V-Formation's listed strategic partner law firm providing legal advisory alongside V-Formation's compliance work — a closely aligned peer given joint client engagements and co-published content (e.g., MS 365 compliance).

Others

• OneTrust: Leading data protection management software platform that V-Formation implements for clients — a supplier/enabler rather than direct competitor, but its automation capabilities could pressure human advisory demand over time.

Emerging players

• eComply: German compliance platform and consultancy that co-hosted a webinar with V-Formation on data protection action planning — operates as an adjacent player in data protection software-enabled advisory.

Regional players

• Securys: UK-headquartered data protection and cybersecurity consultancy with cross-border DACH-relevant expertise — comparable niche peer operating in adjacent geography where V-Formation has UK extension capability via Carsten Holstein.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/v-formation-gmbh

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about V-Formation GmbH