01Guided assessmentsThrough the standard control by control – with a clear question, answer options and linked evidence.02AI templatesIndustry templates and suggestions based on what you have already entered. You accept, change or add to them – the decision stays with you.03Evidence archiveAll evidence in one place, with version, validity and a link to every control it supports.04Action plansA gap becomes a task with an owner, a deadline and a link to a control, document or vulnerability.05Security ScoreHow your domains look from the outside – as a grade, as a number and as a list of specific issues with remediation guidance.06Trust CenterA public page showing your security posture – instead of answering every customer questionnaire one by one.07Vendor riskAll vendors in one list, each with inherent risk, residual risk and the drivers behind them.08Custom frameworksGroup policies and customer requirements as a custom framework – with the same tools as for ISO 27001.09IntegrationsAssets, evidence and tasks from Jira, Confluence, Azure, SAP and other systems – instead of retyping.

Everything on Platform →

In focusTrust CenterShow your security posture publicly – instead of answering every questionnaire one by one.Learn more →

By framework

01GRC softwareGovernance, risk and compliance in one system: several frameworks, one evidence archive, clear responsibilities and deadlines.02ISO 27001 softwareBuild and run an ISMS under ISO/IEC 27001:2022: 93 controls, Statement of Applicability, risk register and evidence with expiry dates.03NIS2 softwareDocument the ten measures under section 30 BSIG, the reporting chain, registration and the management decision in an auditable way.04DORA softwareManage ICT risk management, incident reporting, resilience testing and the register of information in an auditable way for BaFin and internal audit.05ISO 9001 softwareRun quality management under ISO 9001: objectives with KPIs, controlled documents, internal audit, management review and corrective actions.

By industry

01Medical and dental practices, MVZIT security guideline under § 390 SGB V, data protection for health data and NIS2 for large medical care centres (MVZ) and laboratories.02Industry and manufacturingISO 9001 and ISO 27001 for customer requirements, NIS2 for manufacturing and a look at the Cyber Resilience Act.03Financial servicesDORA with register of information, third-party risk and incident reporting, built on an ISMS under ISO 27001.04Software and IT service providersISO 27001, SOC 2 and BSI C5 for SaaS, cloud and managed service providers, plus NIS2 and a Trust Center for customer questionnaires.05AI providers and deployersThe AI Act, ISO/IEC 42001 and data protection for companies that develop, provide or deploy AI in their operations.06Food industryHACCP plan, food safety culture and ISO 9001 for manufacturers, catering, retail and logistics, ready for inspections and customer audits.

By role

01ManagementManagement duties under § 38 BSIG and DORA, dated decisions and a status you can understand without jargon.02Security officers and CISOsRun your ISMS instead of maintaining spreadsheets: risks, evidence with expiry dates, audits and several frameworks in one system.03Quality managementFor quality management representatives: ISO 9001 with controlled documents, audit programme, management review and corrective actions in one place.04Data protectionFor data protection officers and coordinators: records, processing on behalf, technical and organisational measures (TOMs), impact assessments and data breaches in one place.

Everything on Solutions →

FreeNIS2 checkSee in three minutes whether your company falls under NIS2 in Germany and what follows from it.Start the check →

01ISO/IEC 27001Information security 02ISO 9001Quality management 03ISO/IEC 42001AI management 04NIS2Cybersecurity 05GDPRData protection 06BSI C5:2026Cloud security 07DORADigital resilience in the financial sector 08NIST CSF 2.0Cyber risk governance 09SOC 2Building customer trust 10HACCPFood safety 11§ 390 SGB VIT security in medical practices 12EU AI ActArtificial Intelligence Act

Everything on Frameworks →

OverlapsFramework matrixWhere ISO 27001, NIS2, GDPR, DORA and others overlap – one piece of evidence for several frameworks.View the matrix →

Auditors Pricing

01NewsChanges to standards and deadlines, briefly explained 02Working materialsChecklists, templates and guides 03Free toolsNIS2 check, reporting deadline calculator and framework matrix 04Vendor comparisonCompliance platforms compared 05GlossaryKey terms from A to Z 06Questions and answersThe questions we get asked

Everything on Resources →

NewWorking materialsChecklists for ISO 27001, NIS2 and DORA – download straight away.Go to downloads →

Deutsch
English
Français
Español
Português (Portugal)
Português (Brasil)

Customer login Free 14-day trial

Platform

Overview Guided assessments AI templates Evidence archive Action plans Security Score Trust Center Vendor risk Custom frameworks Integrations

Solutions

Overview GRC software ISO 27001 software NIS2 software DORA software ISO 9001 software Medical and dental practices, MVZ Industry and manufacturing Financial services Software and IT service providers AI providers and deployers Food industry Management Security officers and CISOs Quality management Data protection

Frameworks

Overview ISO/IEC 27001 ISO 9001 ISO/IEC 42001 NIS2 GDPR BSI C5:2026 DORA NIST CSF 2.0 SOC 2 HACCP § 390 SGB V EU AI Act

Auditors Pricing

Resources

News Working materials Free tools Vendor comparison Glossary Questions and answers

Language: English

Deutsch Français Español Português (Portugal)Português (Brasil)

Try free for 14 days

HomeContact

Contact

Let’s talk about your goal.

Request a free trial, ask a question or arrange a call. We reply personally.

✓

Thank you! Your request has arrived.

A confirmation is on its way to your inbox. We will get back to you personally.

Explore the platform Frameworks

What can we help with?First name Last name Company Business e-mail Phone (optional)

Industry (optional) We are already certifiedWhich certifications?

Which frameworks? (optional)

ISO/IEC 27001 DORA NIS2 NIST CSF 2.0 SOC 2 ISO 9001 BSI C5:2026 GDPR HACCP

Message (optional)

Yes, send me occasional updates on changes to standards and new working materials. Unsubscribe at any time. I agree that my details will be processed to handle my request. Details in the privacy policy.

The trial is free and ends automatically. You do not need to provide payment details.

Reach us directly

+49 89 2000 7975 0

neonotu GmbH · Sightadel
Edelsbergstraße 8
80686 Munich, Germany

What happens after you submit

We get back to you personally.
For a trial, we set up your access – with the framework of your choice.
You work for 14 days with full access. Whatever you create is kept in the paid plan.

The guided way to ISO 27001, ISO 9001, NIS2 and more. Developed and hosted in Germany.

Try free for 14 days

ISO 9001 certified
ISO/IEC 27001 certified
GDPR compliant
DORA compliant

The certifications are held by neonotu GmbH, the provider of Sightadel.

European sovereigntyDeveloped, operated and hosted in Germany

Platform

Overview Guided assessments AI templates Evidence archive Action plans Security Score Trust Center Vendor risk Custom frameworks Integrations

Frameworks

ISO/IEC 27001 ISO 9001 ISO/IEC 42001 NIS2 GDPR BSI C5:2026 DORA NIST CSF 2.0 SOC 2 HACCP § 390 SGB V EU AI Act

Solutions

GRC software ISO 27001 software NIS2 software DORA software ISO 9001 software Medical and dental practices, MVZ Industry and manufacturing Financial services Software and IT service providers AI providers and deployers Food industry Management Security officers and CISOs Quality management Data protection

Knowledge

News Free tools NIS2 check Cost calculator Vendor comparison Glossary

Company

About us Consultants Auditors Partner network Security Pricing Resources FAQ Contact Log in

Sightadel is a brand of neonotu GmbH · Edelsbergstraße 8 · 80686 Munich · GermanyLegal notice · Privacy · Terms · Cookie settings

Sightadel

Your privacy

We use Matomo to measure how our website is used so that we can improve it. Matomo is operated for us by the service provider netalytics on our behalf; the data is not used for advertising. Without your consent, Matomo counts visits without cookies and with a shortened IP address. With your consent, Matomo also sets cookies to recognise returning visits; you can withdraw at any time via “Cookie settings” in the footer. We respect the “Do Not Track” browser setting. Technically necessary storage (e.g. your light/dark choice) does not require consent. More in our privacy policy.