Thot IT Solutions Sarl

What Thot IT Solutions Sarl does

Thot IT Solutions Sarl is a Luxembourg-based ICT compliance consultancy founded in 2019 that serves the country's regulated financial sector. The firm's core proposition is helping banks, insurance companies, and payment service providers comply with the Digital Operational Resilience Act (DORA), Luxembourg's CSSF Circulars 25/882 and 25/883, CAA Circulars 21/15 and 21/16 for insurance outsourcing, and the EU NIS2 Directive. Its service portfolio includes DORA compliance advisory, NIS2 scope and gap analysis, outsourcing compliance preparation and regulatory filing support for CSSF and CAA, and cybersecurity services including vCISO and awareness training delivered in partnership with HoxHunt.

The company's technology stack centers on proprietary compliance automation software rather than generic consulting deliverables. Its flagship is the Regcover SaaS platform, accessible via app.regcover.com, which automates DORA risk assessments, continuous compliance tracking, incident reporting, and third-party vendor management. A complementary in-house tool, the Compliance Profiler, is used to determine DORA applicability to financial institutions. The DORA full scope reportedly requires coverage of 250 technical criteria, evidencing the breadth of automation embedded in the platform. Outsourcing classification tools are also developed in-house to determine critical/important function status and outsourcing type (ITO, BPO, Cloud Computing).

Thot IT generates revenue through two streams: professional services (consulting, gap analysis, remediation, regulatory filing preparation) and SaaS subscriptions via Regcover. Pricing is quote-based with multi-year contracts; no public pricing tiers are disclosed. The firm operates as a private SARL with a registered capital of 6,000 euros and is led by Managing Director Rénald Wauthier. Named clients include EFG Bank, Cardif, and Spuerkeess, all enterprise-grade Luxembourg financial institutions. Distribution is direct enterprise sales with no disclosed channel partners, supplemented by LinkedIn, YouTube, and event-driven marketing. The current disclosed headcount is 3 multi-disciplinary specialists (IT, compliance, legal), making this a very lean boutique firm operating in a narrow but regulation-driven niche.

Name

Thot IT Solutions Sarl

Legal name

THOT IT Solutions

Website

https://thot-it.com

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

11–50 employees

Short description

Thot IT Solutions Sarl is a Luxembourg-based ICT compliance consultancy founded in 2019 that serves banks, insurers, and payment service providers with proprietary Regcover SaaS software and advisory services covering DORA, NIS2, and CSSF/CAA outsourcing regulations.

Ownership category

akta.pro rank

Product category

Regulatory Compliance Consulting

NAICS

Management Consulting Services (54161), Computer Systems Design Services (541512)

SIC

Services-Management Consulting Services (8742), Services-Computer Programming Services (7371)

akta.pro primary industry

Compliance & Regulatory Operations (AML/KYC, Reporting, Audit) (FSAGAAAL)

Keywords

• ICT compliance consulting
• DORA compliance services
• NIS2 compliance advisory
• Regulatory compliance software
• Outsourcing compliance services

Headquarters

HQ city

Leudelange

HQ country

Luxembourg

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Compliance Consulting Services: Professional consulting services including DORA compliance advisory, NIS2 compliance advisory, outsourcing compliance advisory, and cybersecurity services. Services include gap analysis, remediation strategies, regulatory filings preparation, and compliance tracking.
2. Regcover SaaS Platform: Software-as-a-service subscription for DORA compliance automation, providing automated risk assessments, continuous compliance tracking, incident reporting, and third-party risk management for financial institutions.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels5 records

Core offering

Thot IT Solutions provides ICT compliance consulting and proprietary SaaS solutions for Luxembourg's regulated financial sector. The company specializes in Digital Operational Resilience Act (DORA) compliance, NIS2 compliance, and outsourcing regulatory advisory (CSSF Circulars 25/882, 25/883 and CAA Circulars 21/15, 21/16). It combines professional services (gap analysis, scope analysis, remediation, regulatory filing preparation) with proprietary software platforms (Regcover SaaS, DORA Compliance Software, Compliance Profiler) for continuous compliance tracking and automated risk assessments.

Product overview

Thot IT Solutions is a consultancy company specializing in ICT compliance for Luxembourg's financial sector. The company offers a combination of proprietary SaaS products and advisory services. Its core product is the DORA Compliance Software (a proprietary platform providing automated risk assessments, incident reporting, and compliance tracking), supported by the Regcover SaaS platform and Compliance Profiler tool. Services include DORA Compliance Advisory, NIS 2 Compliance Advisory, Outsourcing Compliance Advisory, Cybersecurity Services (vCISO, training), Scope Analysis, and Gap Analysis. The company also offers an end-to-end service for preparation of outsourcing CSSF filings, outsourcing CAA filings, and DORA compliance evidence.

Differentiator

Problem solved

Functional benefit

Brands

• Regcover: SaaS compliance platform for DORA compliance tracking, providing automated compliance management for financial institutions in Luxembourg.

Products and services

• DORA Compliance Software Proprietary DORA compliance software providing automated risk assessments, continuous compliance tracking, automated incident reporting, third-party vendor management, and resilience testing for financial institutions in Luxembourg. DORA full scope covers 250 criteria.
• Regcover SaaS Platform SaaS platform for compliance management and regulatory tracking, providing automated compliance management and continuous compliance tracking for financial sector entities in Luxembourg.
• Compliance Profiler Proprietary tool used to accurately determine DORA's applicability to a financial institution.
• Outsourcing Compliance Advisory Consulting service covering in-depth analysis of outsourcing relationships, gap analysis, outsourcing register and policy review, targeted remediation strategies, and regulatory filing preparation for CSSF Circulars 25/882, 25/883, and CAA Circulars 21/15, 22/16.
• NIS 2 Compliance Advisory Compliance advisory service assessing entity qualification under NIS 2 Directive based on size (Essential or Important Entity category per Article 3) and essence (categories per Article 2), including gap analysis.
• Cybersecurity Services Comprehensive cybersecurity suite including vCISO (CISO-as-a-Service), training and awareness programs on cyber threats and IT regulations, and strategic partnership with HoxHunt for phishing threat mitigation.
• DORA Compliance Advisory DORA compliance consulting including scope analysis, gap analysis, ICT risk management assessment, and tailored remediation strategy development and implementation support.

Quantifiable outcome

• DORA full scope requires response to 250 criteria
• +1 more outcomes

Named customers3 records

Segments1 record

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

One partnership is on record.

• HoxHuntcoreStrategic or Co-development PartnerStrategic partnership with HoxHunt, an AI-driven cybersecurity training platform. HoxHunt helps employees detect and report threats like phishing and ransomware through personalized simulations and real-time feedback. Thot IT offers this partnership as part of their cybersecurity services to strengthen security awareness and reduce human risk for clients.

Scale indicators4 records

Recent moves3 records

Expansion highlights5 records

Broad incumbents

• Deloitte Luxembourg: Big Four advisory practice in Luxembourg providing DORA, CSSF, and outsourcing compliance services to banks, insurers, and PSPs. Comparable as a larger incumbent competing for the same enterprise compliance mandates that Thot IT serves, though at much greater scale and breadth.
• Wolters Kluwer: Global RegTech and compliance software provider offering DORA, KYC, AML, and regulatory reporting solutions to financial institutions. Comparable as a vendor competing for the same Luxembourg FI compliance budget, but operating at much broader scale across multiple frameworks.
• ServiceNow GRC: Enterprise platform with a dedicated GRC and Integrated Risk Management module covering policy, compliance, and risk workflows. Comparable as a broader incumbent often evaluated by large financial institutions alongside specialist RegTech offerings like Regcover.
• Diligent (Galvanize): GRC platform vendor with compliance, audit, and risk management modules used by financial institutions. Comparable as an incumbent competitor with overlapping GRC/RegTech functionality, but sold as a broader enterprise platform rather than a Luxembourg-tailored stack.

Others

• HoxHunt: AI-driven cybersecurity awareness and phishing simulation platform that Thot IT resells as an Authorized Partner. Comparable not as a competitor but as a strategic partner whose product Thot IT distributes into the same Luxembourg FI client base under its cybersecurity services line.

Direct peers

• F24: European SaaS vendor for critical communications, crisis management, and regulatory compliance, headquartered in the DACH region and active in Luxembourg. Comparable as a direct niche peer offering compliance and incident-reporting tooling that overlaps with Thot IT's DORA scope.
• SteelEye: RegTech vendor focused on compliance, surveillance, and regulatory reporting for financial services firms, including DORA-aligned offerings. Comparable as a direct peer competing for the same type of buy-side and sell-side compliance technology budget in Europe.
• Regnology: European-headquartered RegTech vendor specializing in regulatory reporting, compliance, and supervisory technology for banks and insurers. Comparable as a direct competitor offering SaaS tooling that overlaps with Thot IT's Regcover in the same financial-sector compliance niche.

Emerging players

• Reply (ICT Risk & Compliance): European IT consultancy with a dedicated Financial Services practice covering RegTech, DORA readiness, and cyber resilience for banks and insurers. Comparable as an emerging specialist consultancy that competes with Thot IT in delivering DORA advisory and tooling to mid-sized European FIs.

Regional players

• Asseco Poland: European banking and financial IT services group delivering core banking, regulatory, and compliance solutions across CEE and Western Europe. Comparable as a regional IT vendor serving banks with compliance and digital resilience tooling, though focused primarily on Central European markets.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat3 records

Key risks5 records

Key highlights6 records

Customer concentration

• YouTubeyoutube.com/@ThotITSolutions
• LinkedInlinkedin.com/company/thot-it-solutions

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Thot IT Solutions Sarl