Audit readiness
Preparation for certifications and customer audits – with both consultant and auditor perspectives.
Compaas
Compliance as a Service
Information security & compliance for mid-market companies.
Pragmatic, with a dedicated point of contact instead of rotating project teams. Compaas makes regulation workable – without unnecessary bureaucracy.
Why mid-market compliance has to be different.
Large consultancies often sell rigid frameworks. Compaas delivers solutions that fit your day-to-day operations.
- A dedicated contact instead of a ticket system
- Measures that actually work in operations
- Audit-ready documentation without the clutter
Fast clarity
Gap analyses surface prioritized gaps – instead of months of concepts without results.
Legal confidence
Integrate GDPR, whistleblower requirements and further norms in a practical, demonstrable way.
Team relief
External officer roles and ongoing support so IT and specialists can focus on the core business.
Focus on your core business – compliance as a service
Laws, standards, and customer requirements are becoming more demanding – qualified specialists in information security and compliance are hard to find and retain.
Compaas takes on these topics as an external partner: structured, transparent, and without you first having to build a dedicated specialist department. You retain oversight; we deliver the specialist implementation – from analysis through implementation to audit support.
Whether your first ISO 27001 certification, ongoing GDPR maintenance, preparation for a customer audit, or compliance with new regulation such as CRA and the EU AI Act: Compaas shows clearly where action is needed, prioritises measures by risk and effort, and implements solutions that work in practice and are documented in an audit-ready manner.
The result: your organisation reliably meets requirements, your teams are not burdened with unnecessary bureaucracy – and you can focus on your core business.
"Compaas aims to relieve organisations so they can focus on their core business – with measures that actually work in day-to-day operations."
What Compaas offers you
- Personal intro call – no obligation
- One dedicated point of contact at Compaas
- Response typically within 24 hours
- Practical approach, not standard slide decks
Behind Compaas
Founded by Christian Lorenz – technical and compliance expertise from a single source.
Christian Lorenz
Founder & primary contact
Compaas builds on many years of experience in software development and compliance consulting. Christian Lorenz started in the late 1990s with his first own web applications – that is where programming began. Since then, demanding, complex web applications have always been the focus. He has been self-employed since 2010, initially in software development and soon thereafter in the compliance topics that Compaas covers today.
Learn more about Compaas →Services
Three pillars – one point of contact at Compaas.
Consulting & Implementation
Compaas supports mid-market companies from the initial assessment through to successful certification or customer audit preparation – with deep standards expertise, clear prioritisation, and a focus on measures that work in practice.
Learn more →
Outsourced Mandates
Compaas takes on legally or contractually required officer roles as an external partner – reliably, cost-effectively, and with the necessary specialist expertise.
Learn more →
Technical Services
From the training platform to phishing simulations and penetration testing – Compaas complements organisational compliance with technical security.
Learn more →Standards & regulation
Compaas knows the requirements – and implements them pragmatically.
ISO 27001Data Protection (GDPR)Whistleblower ProtectionCyber Resilience Act (CRA)VS-NfD / ITAREU AI ActCMMCISO 62443
Ready for an intro call?
Get in touch with Compaas – personal, no obligation, and tailored to your situation.
Contact us now