✓ Certified
ISO/IEC 27001:2022
Formally certified to ISO/IEC 27001:2022 since May 2026. Auditor: A-Mark Ratings Limited, accredited by UAF and IAF. Certificate No. 26052601, valid until 25 May 2029.
·SECURITY · COMPLIANCE · PRIVACY
Trust is built on evidence.
At GermanAI Defense, security is not a feature. It's the foundation. Here we show what we hold ourselves accountable to: audited, documented and communicated transparently.
·OUR STANDARDS
Compliance & Certifications
Four standards we hold ourselves to. We are formally certified to ISO 27001. This foundation supports compliance with GDPR, NIS 2 and the EU AI Act, which we also advise on. These three are not part of the ISO certificate. We don't claim anything we can't substantiate.
✓ Compliant
GDPR / EU DSGVO
Fully GDPR compliant with a documented Record of Processing Activities (Art. 30), a Data Processing Agreement template, technical-organisational measures (TOM) per Art. 32, and a designated Data Protection Officer.
✓ Compliant
NIS 2 Directive
Our own cyber-resilience measures meet NIS 2 requirements: risk management, incident reporting, supply-chain security, business continuity and recurring effectiveness reviews. What we advise others, we live ourselves.
✓ Compliant
EU AI Act
Our AI systems are risk-classified, documented and operated to audit-ready standards. Human oversight, transparency obligations and technical robustness per EU AI Act are built in. Including for client projects.
·CONTACT
Questions on security & compliance?
Need our DPA, want to review a TOM document, or have questions about our ISO 27001 certification? Drop us a line. Typical response within 2 business days.
Email info@germanaidefense.de →
Go deeper: Information Security Policy · Privacy Policy · GRC & Compliance Consulting