Kertos

Kertos is a Munich-based compliance automation platform that helps European companies operationalize data protection, information security, and AI governance from a single system. Founded in November 2021 by Kilian Schmidt, Johannes Hussak, and Alexander Prams, Kertos positions itself as an all-in-one, audit-ready platform that combines AI-powered automation with certified expert support, and it claims to automate a large share of certification and documentation workflows. Its foundations are privacy management (GDPR RoPA, TOMs, DPIAs, DSAR automation, and shadow-IT discovery) and a certifiable information-security management system aligned with ISO 27001, TISAX, and C5. For AI governance specifically, Kertos offers an AI Management System (AIMS) targeting ISO/IEC 42001 and EU AI Act readiness, letting organizations inventory AI systems and address AI-specific risks within the same tooling they use for privacy and security, supported by KAIA, an AI compliance assistant. The platform emphasizes 100+ integrations, a Trust Center for displaying certifications, and optional certified DPO support. Kertos is best suited to European startups, scale-ups, and SMEs in sectors like fintech, healthtech, and SaaS that want to consolidate GDPR, ISO 27001, NIS2, DORA, and emerging AI Act obligations rather than run separate tools for each.