Compliance that scales with your business
Start with what you need today. Add new frameworks as your requirements grow.
Information security
A solid foundation for ISO 27001, NIS2, and your information security processes.
- ISMS implementation for ISO 27001
- Asset and risk management
- Controls and measures library
- Vendor risk management
- Centralized policy management
- Multi-framework mapping for ISO 27001, NIS2, GDPR, and more
- Security awareness training for employees
- Support from real experts
You will receive a quote tailored to your requirements.
NIS2 + ISO 27001
Connect more information security frameworks and reduce duplicate work.
- One platform
Manage data protection and information security in one shared system. - A unified control system
Leverage measures and evidence across GDPR, ISO 27001, and NIS2. - Less coordination effort
Work with one system, one point of contact, and clear responsibilities. - Modulary expandable
Add further areas such as the EU AI Act as new requirements emerge. - Expertise included
Get support from qualified experts for complex questions and audits.
Final price based on company size. No commitment.
What is included in the package
Services
- Building a structured ISMS
- Pre-configured policies and templates
- Asset inventory and classification
- Risk register with action tracking
- Controls library based on ISO 27001 Annex A
- Vendor Risk Management
- Preparation and support for internal audits
- Awareness training for employees
- Traceable documentation and audit trail
- Support on the path to certification
Network & Information Security
- Assessment of potential NIS2 applicability
- Mapping requirements to specific measures
- Workflows for security incidents and reporting obligations
- Documentation of technical and organizational measures
- Vendor Risk Management
- Business continuity and emergency planning
- Clear assignment of roles and responsibilities
- Awareness training for employees
- Templates for reports and regulatory communication
AI & Governance
Create clear rules for AI usage, internal reporting, training, and compliance audits.
- EU AI Act Impact Analysis
- Inventory of AI Systems in Use
- Risk and Role Classification
- Documentation of Responsibilities
- AI Usage Guidelines
- Compliance Audits
- AI Competency Training
- Integrations with existing systems
Price depends on company size & modules.
AI & Governance + Infosec
Combine AI governance and Infosec on a shared foundation—for clear responsibilities, less duplication of effort, and reliable evidence.
- Centralized AI system tracking
Document AI applications in use, responsibilities, and relevant risks in one central location. - Cover requirements together
Leverage existing data protection processes and documentation to meet EU AI Act requirements. - Clear governance
Define roles, approvals, and internal policies for the secure use of AI. - Training included
Raise employee awareness regarding data protection, AI risks, and the responsible use of AI systems. - Modular and scalable
Add information security, audits, or expert services as new requirements arise.
What is included in the package
AI Governance & EU AI Act
- Centralized registry of AI systems in use
- Classification by roles and risk levels
- Documentation of purpose, scope, and responsibilities
- Compliance assessment for the EU AI Act
- Workflows for approvals, reviews, and regular updates
- Templates for internal AI policies
- Traceable documentation of measures and decisions
- Training for the responsible use of AI
- Expert support for complex issues
Whistleblower System & Case Management
- Secure reporting channel for internal and external whistleblowers
- Confidential and structured processing of incoming reports
- Clear responsibilities and documented processing workflows
- Deadline management for acknowledgments and feedback
- Traceable case and communication history
- Role and permissions concept for authorized handlers
- Documentation for internal audits and compliance
- Training for reporting officers and employees
Data Privacy
For companies just starting out to achieve basic protection.
- Basic features to get started with compliance
- Limited legal support
- Creation of initial documents
Price depends on company size & modules.
Data Privacy
For companies that need specific support to continue growing.
Everything in Starter, plus:
- Compliance training for employees
- Data protection impact assessments
- Data protection seal
Price depends on company size & modules.
Data protection
For established companies that require maximum security and support.
Everything in Professional, plus:
- Additional expert support
- Whitelabeling
- Higher liability, integrations
- and much more
Price depends on company size & modules.
What's included
Need a different combination?
We will put together a package that fits your company size, your frameworks, and your support needs.
What our clients say.
The software helps us document all IT security measures relevant to data protection and review them regularly.
What sets heyData apart is its responsiveness and fast execution.
Thanks to the platform, we can handle onboarding centrally and efficiently.
With heyData, we save time, reduce risks, and actively strengthen our customers' trust.
