RGPD.COM
Security awareness training for organisations in Europe.
- Transparency
- Data processing agreement, publishedList of data processors, publishedSecurity measures, publishedPrivacy policy, published
- Data processors
- 2 EU-owned companies
ISMS software made in Europe
If your company works with ISO 27001 or has to meet NIS2 requirements, you will benefit from using an information security management system (ISMS).
ISMS software will help you manage your risks, your security policies, your controls and the evidence that they work. Keeping all of that in spreadsheets quickly gets hard to manage, and ISMS software is made for exactly this work.
In this guide, we have made a list of the European ISMS software vendors and checked which data processors they use, and whether those are European companies.
ISMS software providers and their data processors
We have researched each ISMS software provider’s data processing agreement, privacy policy and list of data processors on its own website.
The companies on the map are the ISMS software providers and the data processors they have hired to process your data on your behalf.
verinice
Information security software built on open source. Use it in the cloud or run it on your own servers; it follows ISO 27001, NIS2 and Germany's IT-Grundschutz.
- Transparency
- Data processing agreement, publishedList of data processors, publishedSecurity measures, publishedPrivacy policy, published
- Data processors
- 2 EU-owned companies
Cyberday
Software for building and running an information security management system, priced by company size.
- Transparency
- Data processing agreement, publishedList of data processors, publishedSecurity measures, publishedPrivacy policy, published
- Data processors
- 8 US-owned companies
EG Landax
Quality management software with a module for ISO 27001 and information security.
- Transparency
- Data processing agreement, publishedList of data processors, publishedSecurity measures, publishedPrivacy policy, published
- Data processors
- 9 US-owned companies4 EU-owned companies1 company in Norway
ISOPlanner
ISO 27001 software that runs inside Microsoft 365 and keeps documents in your own SharePoint.
- Transparency
- Data processing agreement, publishedList of data processors, publishedSecurity measures, publishedPrivacy policy, published
- Data processors
- 2 US-owned companies
Brainframe
Information security software for NIS2, DORA and ISO 27001.
- Transparency
- Data processing agreement, publishedList of data processors, publishedSecurity measures, publishedPrivacy policy, published
- Data processors
- 5 US-owned companies3 EU-owned companiesThe rest not public
CyberVadis
Rates the cybersecurity of a company's suppliers.
- Transparency
- Data processing agreement, not found on its websiteList of data processors, publishedSecurity measures, publishedPrivacy policy, published
- Data processors
- 5 US-owned companiesThe rest not public
CISO Assistant
Open-source GRC software for security teams: risks, controls and frameworks such as ISO 27001 and NIS2, self-hosted or in the cloud.
- Transparency
- Data processing agreement, publishedList of data processors, publishedSecurity measures, publishedPrivacy policy, published
- Data processors
- 2 US-owned companies3 EU-owned companies
Secfix
Helps start-ups and mid-sized firms get ready for ISO 27001, NIS2, TISAX and SOC 2.
- Transparency
- Data processing agreement, not found on its websiteList of data processors, publishedSecurity measures, publishedPrivacy policy, published
- Data processors
- 6 US-owned companies3 EU-owned companies
Copla
Information security software for ISO 27001, NIS2 and DORA.
- Transparency
- Data processing agreement, publishedList of data processors, publishedSecurity measures, not found on its websitePrivacy policy, published
- Data processors
- 5 US-owned companies
i-doit ISMS
The information security module of i-doit, best known for IT documentation.
- Transparency
- Data processing agreement, not found on its websiteList of data processors, not found on its websiteSecurity measures, publishedPrivacy policy, published
- Data processors
- Not found on its website (October 2026)
ibi systems iris
ISMS and GRC software for CISOs and security officers, on-premises or as a service.
- Transparency
- Data processing agreement, not found on its websiteList of data processors, not found on its websiteSecurity measures, publishedPrivacy policy, published
- Data processors
- Not found on its website (October 2026)
Conformio
ISO 27001 software for small businesses, with a version for consultants.
- Transparency
- Data processing agreement, publishedList of data processors, not found on its websiteSecurity measures, publishedPrivacy policy, published
- Data processors
- Not found on its website (October 2026)
Teseo
NIS2 and GRC software with a GDPR add-on.
- Transparency
- Data processing agreement, not found on its websiteList of data processors, not found on its websiteSecurity measures, publishedPrivacy policy, published
- Data processors
- Not found on its website (October 2026)
ISOTools
Management-system software for ISO 27001, Spain's ENS and NIS2.
- Transparency
- Data processing agreement, not found on its websiteList of data processors, not found on its websiteSecurity measures, publishedPrivacy policy, published
- Data processors
- Not found on its website (October 2026)
Tenacy
Cybersecurity management software for security teams.
- Transparency
- Data processing agreement, not found on its websiteList of data processors, not found on its websiteSecurity measures, not found on its websitePrivacy policy, published
- Data processors
- Not found on its website (October 2026)
Not on the list?
Do you make ISMS software in Europe and are not on this list? Send us your list of data processors through our contact page, and you will be added in the next update.