mcss gmbh medconsulting systems and services

What mcss gmbh medconsulting systems and services does

MCSS MedConsulting Systems and Services GmbH is a privately held German software company headquartered in Cologne that builds the "MCSS Ökosystem," a cloud-based Healthcare GRC (Governance, Risk Management and Compliance) platform sold to organizations across the German healthcare and social economy. The platform combines Software-as-a-Service with Content-as-a-Service delivery, providing regulatory compliance, information security, data protection, and quality management capabilities through sector-specific editions: MC-PRAXIS for medical and dental practices, MC-KLINIK for hospitals and rehabilitation clinics, MC-CURA for nursing homes, MC-KMU for healthcare-adjacent SMEs, MC-ORG for associations, MC-KITA for daycare facilities, and MC-SMARTLEARN for e-learning and awareness coaching.

Underlying technology is browser-based, accessible on any device, and incorporates KRI (Key Risk Indicator) technology for risk identification, proprietary content libraries (knowledge databases, procedure templates, knowledge tests, explanatory and coaching videos, curriculum templates aligned to ISO 9001:2015), and Machine Learning / Big Data Analytics capabilities developed through international medical informatics projects. The platform is anchored in deep domain expertise across DICOM, HL7, and IHE medical-informatics standards, supported by supervisory and advisory board members with backgrounds in medical law, information security, and healthcare AI.

MCSS generates revenue primarily through permanent license subscription agreements (Dauerlizenzvereinbarungen) on an annual cadence, supplemented by time-based billing for non-standard consulting and implementation services. Go-to-market combines a product-led, self-serve motion via the company website and a sales-led motion for hospitals, associations, and larger care facilities. The company was awarded the BMWK's "Innovation Project of the Year 2022" for its CPTF-S research project funded under the ZIM innovation program.

Name

mcss gmbh medconsulting systems and services

Legal name

MCSS MedConsulting Systems and Services GmbH

Website

https://mcss-ug.de

Company type

Private

Operating status

Operating

Headcount range

1–10 employees

Short description

MCSS GmbH is a Cologne-based German software company that delivers a cloud-based GRC (Governance, Risk, Compliance) platform for healthcare and social-sector organizations, offering sector-specific editions covering data protection, information security, and quality management under recurring subscription licenses.

Ownership category

akta.pro rank

Product category

Healthcare Compliance Software

NAICS

Software Publishers (513210), Computer Systems Design and Related Services (54151)

SIC

Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro industry

PRIMARYBPAEAPAA

Governance, Risk & Compliance (GRC) Platforms

Business & Public Services/IT & Digital Services (Managed Services, Systems Integration)/Governance, Risk, Compliance (GRC) & Legal Tech

SECONDARYBPAHAFAF

Privacy, Data Protection & Cyber Governance (GRC)

Business & Public Services/Professional Services (Legal, Accounting, Consulting)/Risk, Compliance & Governance Advisory

SECONDARYBPAEADAJ

Governance, Risk & Compliance (GRC) Managed Services

Business & Public Services/IT & Digital Services (Managed Services, Systems Integration)/Cybersecurity Services (MSSP)

Keywords

• Healthcare compliance software
• GRC platform healthcare
• Medical data protection
• NIS-2 compliance solutions
• Healthcare IT security

Headquarters

HQ city

Cologne

HQ country

Germany

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. SaaS Subscriptions (Dauerlizenzvereinbarungen): MCSS operates primarily on a Software-as-a-Service model. The MCSS Ökosystem is delivered via permanent license agreements (Dauerlizenzvereinbarungen) that are continuously updated to meet dynamic cybersecurity requirements. Usage fees are regularly adjusted (with 3-month notice and 6-month minimum between increases). The platform serves multiple vertical editions (MC-PRAXIS, MC-KLINIK, etc.) at different customer segments.
2. Usage-based Services & Time-based Consulting: Non-standard services (beyond the SaaS platform) are billed according to time spent at fixed hourly rates per the company's rate list. Travel expenses and per diems may also be charged for on-site services.
3. License Fees for Internet Applications: MCSS licenses and rents internet applications as part of its cloud-based service delivery. These fees form part of the ongoing subscription cost.

Pricing tiers

Go-to-market motion2 records

Distribution channels3 records

Marketing channels5 records

Core offering

MCSS provides a cloud-based Governance, Risk Management and Compliance (GRC) ecosystem called the 'MCSS Ökosystem' for the German healthcare and social sector. The platform combines Software as a Service (SaaS) and Content as a Service (CaaS) with sector-specific editions addressing cybersecurity, information security, data protection, and quality management compliance. It serves medical practices, hospitals, care facilities, SMEs, associations, and daycares through subscriptions and consulting services.

Product overview

MCSS offers a cloud-based GRC (Governance, Risk Management and Compliance) ecosystem called the 'MCSS Ökosystem', combining Software as a Service (SaaS) and Content as a Service (CaaS). The platform consists of specialized target-group-specific products addressing legal compliance, time optimization, and solution awareness for the healthcare and social economy sectors. The core products include MC-PRAXIS (for medical/dental practices), MC-KLINIK (for hospitals), MC-CURA (for nursing facilities), MC-KMU (for SMEs), MC-ORG (for associations), MC-KITA (for daycare facilities), and MC-SMARTLEARN (for e-learning). The ecosystem is continuously updated based on permanent license agreements to meet dynamic requirements, particularly in cybersecurity protection, and is enhanced with coaching and training content.

Differentiator

Problem solved

Functional benefit

Brands

• MC-PRAXIS: Digital expert system for medical and dental practices, MVZ
• MC-PRAXIS Dental
• MC-KLINIK
• MC-CURA
• MC-KMU
• MC-KITA
• MC-ORG
• MC-SMARTLEARN
• safe4cyber
• nis-2-experten

Products and services

• MCSS Ökosystem Unified digital ecosystem combining SaaS and CaaS delivery, providing cybersecurity, information security, data protection, and quality management solutions across all target groups in the healthcare and social sector. Delivered via permanent license agreements (Dauerlizenzvereinbarungen) and continuously updated to meet dynamic compliance requirements.
• MC-PRAXIS Cloud-based compliance management system for medical and dental practices and Medical Care Centers (MVZ), providing templates, checklists, training videos, knowledge tests, and documentation for data protection (DSGVO), information security, and quality management (ISO 9001:2015, QEP) compliance under DVG and § 390 SGB V.
• MC-PRAXIS Dental Specialized version of MC-PRAXIS designed for dental practices, providing sector-specific compliance and training solutions for dental workflows and dental practice regulatory requirements.
• MC-KLINIK Digital expert system for hospitals and rehabilitation clinics, providing compliance solutions for IT security guidelines (§ 391 SGB V, KHZG), curriculum templates, and continuous online support for NIS-2, data protection, and quality management. Integrates medical informatics standards (DICOM, HL7, IHE).
• MC-CURA Cloud-based expert system for stationary care facilities and nursing homes, providing comprehensive training and compliance support for management and employees in areas of NIS-2, data protection, information security, and quality management under §§ 390/391 SGB V, Art. 32 DSGVO, and § 64 BDSG.
• MC-KMU Cloud-based management system for small and medium enterprises, particularly in healthcare such as pharmacies, laboratories, and medical product traders. Provides checklists for gap analysis, knowledge tests, training videos, QM procedures according to ISO 9001:2015, curriculum templates, and data protection templates.
• MC-ORG Cloud-based management system for medical/dental associations, social associations, and healthcare-specific organizations, providing member management systems covering data protection, information security, quality management with comprehensive documentation, training, and webinars.
• MC-KITA Digital expert system for daycare centers (Kindertagesstätten) and youth care facilities, providing compliance support for data protection, information security, and quality management requirements under KDG and DSG-EKD for church-affiliated organizations and DSGVO for secular facilities.
• MC-SMARTLEARN Cloud-based e-learning and coaching platform integrated with the MCSS ecosystem, providing SMARTLEARN modules for compliance training and awareness programs, including the DigiG module for medical practices with structured curriculum, knowledge tests, explanatory videos, and coaching videos.

Quantifiable outcome

• 8.3 million employees in the healthcare and social sector require training and compliance solutions - this is the largest largely homogeneous target market in Germany for the insurance and compliance industry.

Named customers1 record

Segments7 records

Ideal customer profiles5 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability5 records

Feature5 records

Partnerships

Four partnerships are on record, tiered core and minor.

• Federal Ministry for Economic Affairs and Climate Action (Bundeswirtschaftsministerium, BMWK)coreStrategic or Co-development PartnerThe MCSS cloud-based process management and team leadership system (CPTF-S) was developed as a ZIM (Zentrales Innovationsprogramm Mittelstand) research project funded by the BMWK. The BMWK also awarded the project "Innovation Project of the Year 2022". BMWK is the German federal ministry responsible for economic policy and SME support, providing innovation funding to MCSS's core technology development.
• safe4cyberminorOtherssafe4cyber.de is a related brand/website operated by or closely associated with MCSS, providing cybersecurity content and solutions. It appears to be part of the MCSS ecosystem's brand portfolio for NIS-2 and cybersecurity offerings.
• nis-2-experten.deminorOthersnis-2-experten.de is a related brand/website operated by or closely associated with MCSS, focused on NIS-2 directive expertise and consulting. It is part of the MCSS ecosystem brand portfolio for NIS-2 compliance solutions.
• Gematik (Electronic Patient Record)coreTechnology or IntegrationMCSS ecosystem solutions (particularly MC-PRAXIS and MC-CURA) are designed to support the implementation of the electronic patient record (ePA/EPA) as mandated by Gematik under §§ 341 and 360 SGB V. Gematik is the German government agency responsible for the Telematikinfrastruktur (TI) and digital health applications in Germany.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• CompuGroup Medical SE: Germany's leading medical practice and hospital IT vendor, providing practice management, clinical, and connectivity software to physicians, dentists, hospitals, and MVZ. Directly comparable because it serves the same German healthcare customer base and increasingly bundles compliance and information security modules alongside core clinical software.
• Dedalus Group: European healthcare IT group with deep German hospital presence, offering clinical, administrative, and increasingly cybersecurity/compliance modules to hospitals and rehab clinics. Comparable because it competes for hospital IT and compliance budgets in the same DACH hospital segment targeted by MC-KLINIK.
• SoSafe GmbH: German cybersecurity awareness and training platform delivering phishing simulations and compliance e-learning to enterprise customers. Comparable because MC-SMARTLEARN offers an overlapping security-awareness and compliance training proposition to the same German mid-market and enterprise buyer.

Emerging players

• Secjur GmbH: Hamburg-based digital compliance and corporate governance SaaS for SMEs, covering data protection, information security, and whistleblower requirements. Comparable because it sells a similarly scoped GRC platform into the same German SME customer base, though without healthcare-specific vertical editions.
• Dataguard SE: Munich-based privacy and data protection compliance platform targeting German SMEs with automated DSGVO documentation and training. Comparable because it overlaps with MCSS's data protection templates and knowledge-test functionality for SME healthcare customers.

Broad incumbents

• OneTrust, LLC: Global leader in privacy, security, and GRC cloud software serving enterprise customers across industries. Comparable as a broad GRC incumbent increasingly adding healthcare templates and localizing for Germany that could directly compete for hospital and large-enterprise healthcare GRC budgets.
• ServiceNow (GRC): Enterprise cloud platform with a dedicated Governance, Risk, and Compliance suite used by large hospitals and healthcare systems. Comparable as a broad GRC incumbent competing for the same enterprise healthcare compliance modernization budgets, but at significantly higher price points and complexity than MCSS.
• SAP SE (GRC & Healthcare): Enterprise software giant offering SAP GRC and healthcare industry solutions to large hospitals and integrated delivery networks. Comparable as a broad incumbent in the German hospital compliance and ISMS space, typically competing for larger accounts where MCSS also pitches MC-KLINIK.
• KnowBe4, Inc. Global security awareness and compliance training leader with extensive content library and phishing simulation platform. Comparable as an incumbent competing for the awareness-training portion of MCSS's MC-SMARTLEARN offering, especially in larger healthcare accounts.

Regional players

• ID Information und Dokumentation im Gesundheitswesen GmbH & Co. KGaA: Berlin-based specialist in medical documentation, healthcare content, and health-IT-related compliance for the German market. Comparable because it sits in the same German healthcare compliance-content niche and serves overlapping customers such as medical associations and provider organizations.

Market position

Strengths4 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/mcss-ug-medconsulting-systems-and-services

Revenue estimate

Valuation estimate

Number of profiles

Profiles10 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about mcss gmbh medconsulting systems and services