Bert Kondruss, KonBriefing Research

Products

Tools relevant for the Danish market are listed here: If the provider has a branch in Denmark or is represented through partners or is otherwise active in the market and the solutions are offered and available there.
The data is based on information provided by the respective vendors. This overview is intended to give you an initial orientation. However, you should not make a procurement decision based solely on this data. We advise you to obtain binding information and offers from the respective suppliers first.
Unless otherwise indicated, these are free entries in alphabetical order of the product name.
ComplyCloud
ComplyCloud ApS
Standards
CIS 18 DORA EU AI Act EU GDPR ISO/IEC 27001 NIS 2
Practices
Information Security / ISMS
Data Privacy Management
AI Governance
Third-Party Management
Additional features
Incident Management
SoA
Vendor
• Head office:
Flag Denmark Copenhagen (Denmark)
• Employees:
50
• Founded:
2017
Links
In July 2025, the Danish providers ComplyCloud, RISMA Systems and Wired Relations were acquired by investor Triple Private Equity to form a new company.
ControlManager
Siscon ApS
Standards
CIS 18 EU GDPR ISO/IEC 27001 NIS 2
Practices
Risk Management
Information Security / ISMS
Data Privacy Management
Compliance Management
Awareness Management
Additional features
DORA Register of Information
Incident Management
Policy Management
SoA
Vendor
• Head office:
Flag Denmark Søborg (Denmark)
• Employees:
~15
• Founded:
2004
Links
Decision Focus
Standards
COBIT DORA HIPAA ISO/IEC 27001
Practices
Enterprise Risk Management
Third Party Risk Management
Information Security / ISMS
Business Continuity Management
Audit Management
Compliance Management
Additional features
Policy Management
Offering
• Regions:
Nordics
UK
Vendor
• Head office:
Flag Denmark Birkerød (Denmark)
• Branch offices:
Flag United Kingdom London (United Kingdom), Flag Sweden Stockholm (Sweden), Flag Romania Cluj (Romania)
• Employees:
~65
• Founded:
2004
enablor
I-Trust
Standards
CIS 18 EU GDPR NIS 2
Practices
Compliance Management
Offering
• Provisioning:
SaaS
Vendor
• Head office:
Flag Denmark Bjerringbro (Denmark)
• Branch offices:
Flag Lithuania Vilnius (Lithuania)
• Founded:
2002
Links
EQS
EQS Group
Practices
Data Privacy Management
Compliance Management
Conflicts of Interest
Vendor
• Head office:
Flag Germany Munich (Germany)
• Branch offices:
Flag Germany Hamburg (Germany), Flag Switzerland Zurich (Switzerland), Flag Austria Vienna (Austria), Flag United Kingdom London (United Kingdom), Flag Spain Barcelona (Spain), Flag Denmark Copenhagen (Denmark), Flag Spain Madrid (Spain), Flag Italy Milan (Italy), Flag France Paris (France), Flag USA New York (USA), Flag India Kochi (India), Flag HK Hong Kong (HK)
Links
E-V-E GRC
Evolve Solutions ApS
Standards
DORA NIS 2
Practices
Compliance Management
Offering
• Provisioning:
SaaS
Vendor
• Head office:
Flag Denmark Gentofte (Denmark)
• Founded:
2024
Formalize
Formalize ApS
Standards
DORA EU GDPR ISO/IEC 27001 NIS 2 SOC 2
Practices
IT Risk Management
Information Security / ISMS
Data Privacy Management
Third-Party Management
Additional features
Contract Management
DORA Register of Information
Incident Management
Policy Management
Questionnaires
Task Management
Trust Portal
Platform
• Customization:
Custom fields
• Integrations:
API
Offering
• Regions:
Europe
• Provisioning:
SaaS
Vendor
• Head office:
Flag Denmark Aarhus (Denmark)
• Branch offices:
Flag Denmark Copenhagen (Denmark), Flag Spain Madrid (Spain), Flag Italy Milan (Italy)
• Employees:
170
• Other solutions:
Whistleblower Software
NorthGRC
NorthGRC A/S
Standards
CIS 18 DORA EU GDPR ISO/IEC 27001 ISO/IEC 27002 ISO/IEC 27701 NIS 2 VDA TISAX
Practices
Risk Management
Information Security / ISMS
Third-Party Management
Compliance Management
Additional features
Incident Management
SoA
Task Management
Offering
• Provisioning:
SaaS
Vendor
• Head office:
Flag Denmark Søborg (Denmark)
• Branch offices:
Flag Norway Oslo (Norway), Flag Germany Ratingen (Germany)
• Other solutions:
ESG Reporting
Links
Openli
Openli ApS
Practices
Data Privacy Management
Third-Party Management
Vendor
• Head office:
Flag Denmark Copenhagen (Denmark)
Links
At the end of 2025, Openli was acquired by investor Triple Private Equity as the fourth Danish GRC tool provider to establish a new company.
RISMA
RISMA Systems A/S
Standards
EU GDPR ISO/IEC 27001
Practices
Risk Management
Information Security / ISMS
Data Privacy Management
Third-Party Management
Additional features
Incident Management
Policy Management
SoA
Offering
• Provisioning:
SaaS
Vendor
• Head office:
Flag Denmark Glostrup (Denmark)
• Branch offices:
Flag Sweden Stockholm (Sweden), Flag Norway Lysaker (Norway)
• Employees:
43
• Founded:
2014
• Other solutions:
ESG Reporting
In July 2025, the Danish providers ComplyCloud, RISMA Systems and Wired Relations were acquired by investor Triple Private Equity to form a new company.
Wired Relations
Wired Relations
Standards
CIS 18 COBIT EU AI Act ISO/IEC 27001 ISO/IEC 27701 NIS 2
Practices
Risk Management
Information Security / ISMS
Additional features
Incident Management
Policy Management
Questionnaires
SoA
Task Management
Offering
• Provisioning:
SaaS
Vendor
• Head office:
Flag Denmark Copenhagen (Denmark)
• Founded:
2017
In July 2025, the Danish providers ComplyCloud, RISMA Systems and Wired Relations were acquired by investor Triple Private Equity to form a new company.
Missing a product or missing information? Contact
GRC tools (Governance Risk Compliance) for Denmark

Software selection AI prompts

AI
We prepared GenAI prompts in Danish to support vendor and software selection.

Planning

Udvikl en plan for valg af GRC-software (Governance, Risk, and Compliance). Overvej trin som behovsanalyse, kravdefinition, RFI, RFP, demo, proof of concept og beslutningstagning. Opret en liste over opgaver med indsats, tid og omkostninger. Lav en tidsplan.

Knowledge building

Hvilke praksis bør en GRC-applikation (Governance, Risk, Compliance) understøtte?
Hvilke grænseflader er almindelige i GRC-systemer (Governance, Risk, Compliance) for at kunne forbindes med gængse ERP-, HR- eller billetsystemer?

Preparation of a preliminary study

En organisation overvejer at vælge en GRC-software. Først skal der udarbejdes en forundersøgelse, hvor alle overvejelser forud for anskaffelsen samles og struktureres. Forundersøgelsen skal danne grundlag for beslutningen om, hvorvidt og hvordan en software skal vælges. Forundersøgelsen skal udformes i form af præsentationsslides.

- Udarbejd først 10 til 15 nøglespørgsmål, der er relevante for planlægningen af forundersøgelsen.

- Lav en plan for, hvordan forundersøgelsen skal gennemføres. Tag højde for følgende metoder: internet-research, deltagelse i leverandørernes webinarer, deltagelse i messer og konferencer, samtaler med interessenter, samtaler med eksperter. Udarbejd en liste over tiltag, en tidsplan, en plan for ressourcer/arbejdsindsats og for omkostninger.

- Udarbejd en ramme for forundersøgelsen. Denne skal indeholde en disposition og indledende tekster til hvert kapitel, som senere kan suppleres under gennemførelsen af forundersøgelsen.

Market research

Opret en longlist af GRC-softwareudbydere, der understøtter risikostyring, ISMS, databeskyttelsesstyring, BCM, compliance-styring og revisionsstyring. Det skal være en SaaS-applikation, der hostes i Europa, tilbydes i Danmark (en filial eller partner) og har support til Danmark. Brug indholdet af URL'en som udgangspunkt: https://konbriefing.com/grc-software/tools-denmark-en.html

Requirements list

Hvilke typiske evalueringskriterier (funktionalitet, brugervenlighed, integrationer, omkostninger, support) anvendes til GRC-software?
Liste over de vigtigste must-have-funktioner i en GRC-løsning til et risikostyringssystem i henhold til ISO 31000
Liste over de vigtigste must-have-funktioner i en GRC-løsning til et informationssikkerhedsstyringssystem (ISMS) i henhold til ISO 27001
Liste over de vigtigste must-have-funktioner i en GRC-løsning til forretningskontinuitetsstyring i henhold til ISO 22301
Liste over de vigtigste must-have-funktioner i en GRC-løsning til et databeskyttelsesstyringssystem i henhold til EU's GDPR
Liste over de vigtigste must-have-funktioner i en GRC-løsning til et compliance-styringssystem
Liste over de vigtigste must-have-funktioner i en GRC-løsning til et auditstyringssystem
Opret en vægtet evalueringsmatrix med ca. 100 kriterier (skal-kriterier, kan-kriterier) for en GRC-software med risikostyring, ISMS, databeskyttelsesstyring, BCM, compliance-styring, audit-styring, AI-understøttelse, performance, brugervenlighed, integrationer, SaaS, support.

Demo & Proof of Concept (PoC)

Design et demonstrationsscenarie for en leverandør, hvor vi kan se, hvordan en risiko registreres, vurderes og forbindes med et ISO 27001-kontrolmål.
Formulér 30 praksisnære use cases, der bør testes i en GRC-softwaredemo (ERM, ISMS, databeskyttelse, BCM, compliance, audit). Udarbejd desuden en agenda med forløb og tider. Tilføj også velkomst, spørgerunder, pauser og afslutning.

Decision preparation

Lav en ledelsesoversigt over fordele og ulemper ved /Leverandør X/ vs. /Leverandør Y/
Hvilke risici eksisterer der, hvis vi implementerer en international GRC-pakke (Governance, Risk, and Compliance) uden dansk sprogunderstøttelse? Hvilke andre problemstillinger skal overvejes?
Hvilke punkter bør en SaaS-kontrakt for GRC-software dække vedrørende datasuverænitet og revisionsrettigheder?

Implementation preparation

Hvordan ser en typisk projektplan for implementering af en GRC-suite med moduler til ISMS, databeskyttelse og BCM ud?
Hvilke kommunikationstiltag er nyttige til at involvere medarbejdere i implementeringen af GRC-software?
Hvilke nøglepræstationsindikatorer er egnede til at måle succesen af en GRC-softwareimplementering?

About KonBriefing Research

KonBriefing Research is an independent researcher and analyst in the field of compliance, IT security, information security and risk management. The company was founded in 2019 and is based in Germany
Known from ...