ISO 27701
With ISO 27701, you enhance your existing ISMS with essential data protection measures. Protect not only your own information but also the privacy of your customers. Start now with Kertos and meet the requirements for a Privacy Information Management System (PIMS) according to ISO 27701.
Leading companies trust Kertos







Extension of your ISMS with ISO 27701: Integrated Data Protection
With Kertos, you can not only achieve your ISO 27701 certification faster but also fully unlock your data potential.
Our Data Discovery feature helps you identify relevant assets within your company, enabling you to effortlessly create and manage your asset inventory and risk management. This way, you’re always audit-ready and have a clear overview of the most important resources – efficiently, precisely, and securely.

Features for ISO 27701
With Kertos, you put the development of your PIMS on autopilot.
Integrated Privacy Management
Ergänze dein bestehendes ISMS nach ISO 27001 mit den Datenschutzanforderungen von ISO 27701 und baue ein umfassendes Privacy Information Management System (PIMS) auf.
Advanced Risk Assessment
Incorporate data protection risks into your existing risk management strategy to minimize both information security and data privacy risks.
More Certification, More Security
Show your customers and partners that you meet the highest data protection standards while simultaneously reducing the effort required for compliance projects and audits.
Artificial Intelligence for Your Compliance
Our Kertos Artificial Intelligence (KAI) is your intelligent companion for the compliance process. KAI simplifies your certification by providing clear guidelines and best practices, explaining complex topics in an understandable way, and helping you navigate the regulatory jungle. This way, you become audit-ready faster and effortlessly master your compliance challenges!



“With Kertos, we were able to achieve our ISO27001 certification in a matter of weeks. It was immediately clear that this is a powerful compliance automation solution built in and for the European market.”
Co-Founder & CEO, GAIA Technologies

“As a health tech company that handles sensitive customer data, we have found a flexible and scalable solution for complying with the GDPR in Kertos. It strengthens our customers’ trust, sets new standards through automation, and the support team is consistently responsive and reliable for urgent concerns – Kertos is the all-in-one solution that really pays off for us.”
Ferdinand Schmidt-Thomé
Co-Founder, Aware


“It’s incredible how easily the Kertos team has guided us through the complex ISO27001 process. Quick, uncomplicated and easily automated! We no longer have to worry about compliance because Kertos takes care of everything.”
Tomas Gan
Co-Founder, MuffinTech


“For us, Kertos is a reliable partner in all compliance matters. Whether it’s ISO27001 certification or data protection, we greatly appreciate Kertos’ expertise and support.”
Stefan Hessel
Attorney, reuschlaw


“From start to ISO 27001 in 2.5 months? – With Kertos, this goal became possible. The combination of technical innovation, comprehensive expert knowledge and flexible adaptation to our company needs has absolutely thrilled us.”
Mirco Möncks
Co-Founder & CTO, Augmented Industries

“Kertos offers a unique compliance automation solution for European companies, which stands out from the mass processing offered by large compliance companies on other continents due to its combination of expertise and automation.”
Matthias Knoche
COO, McMakler


“Kertos’ access management solution allows us to efficiently automate the tracking and documentation of access to our protected systems. This saves us valuable time that we can invest in the further development of our own product.”
Claudio Kusnitzoff
Teamlead Online Product, Wellster Healthtech
Frequently Asked Questions about ISO 27701
Information about ISO 27701 Certification
ISO 27701 is an extension of ISO 27001 and adds specific requirements for data protection. It enables companies to ensure not only the security of their information but also the protection of personal data, which is becoming increasingly important in a digital world.
ISO 27701 extends the requirements of ISO 27001 by integrating specific guidelines for data protection. This includes the implementation of a Privacy Information Management System (PIMS), which takes data protection risks into account and introduces additional controls for the protection of personal data.
An ISO 27701 certification demonstrates that your company meets both information security and data protection requirements. This strengthens the trust of your customers and partners, reduces risks, and provides a competitive advantage through demonstrably high data protection standards.
Kertos provides a comprehensive solution for implementing ISO 27701. Our platform helps you extend your existing ISMS according to ISO 27001 with the specific data protection requirements of ISO 27701, manage risks, and optimize compliance processes.