Multi-tenant overview
All released customer tenants in one console — with aggregated GRC KPIs for risks, actions, and incidents.
Partner programme
Your clients. One access.
For independent advisers, interim CISOs and boutiques of one to five people: you work in your clients’ tenants in deveca GRC — no licence fee for the adviser account. Utilities, mid-market and KRITIS-near firms stay the customers; you bring the delivery.
Adviser console
What you get
No partner theatre. You use the same product your clients will run themselves.
Join code instead of admin rights
Customers create time-limited join codes. You redeem the code — approval stays with the tenant admin.
Full GRC work
Governance, risk, and compliance in one tool: risks, controls, audits, privacy, TPM, incidents, HinSchG, and reports — without billing, user, or SSO administration.
Audit & evidence
Support audit programmes, review evidence, and prepare findings — in the same tool as the customer.
Privacy modules
Work on records of processing, DPIAs, DSRs, DPAs, consents, and deletion concepts — suited to external DPOs and privacy advisers.
Secure adviser session
Your own adviser account with mandatory 2FA, session management, and a separate tenant context per customer.
Free — permanently
Adviser accounts for external CISOs, DPOs, and GRC consultants are free and stay free — no licence fee per adviser.
How it works
- Step 01
Create an adviser account
Free, permanent registration for CISOs, DPOs, and external GRC consultancies — with organisation and mandatory 2FA.
- Step 02
Redeem a join code
The customer creates a code under “External access for advisers” (valid for 60 minutes) and sends it to you.
- Step 03
Approval & enter the tenant
After the tenant admin approves, you switch into the customer context and work in the tenant’s full GRC stack.
- Step 04
Several tenants in parallel
Switch between customers in the adviser console — GRC projects in parallel, without separate logins or Excel exports.
Full professional depth — a clear admin boundary.
The External Consultant role is built for GRC advisory work: read and write in every relevant module — from ISMS and privacy to TPM, HinSchG, and compliance — without tenant administration.
Governance & policy management
Risk management (IT & business)
Control framework & SoA
Audit programme & evidence
Actions & activities
GDPR: records, DPIA, DSR, DPA
Third-party management
Incident management & BCM
HinSchG & compliance modules
EU AI Act & CRA
Reports & dependency graphs
Deliberately excluded
Sensitive tenant functions stay with the customer. You work on the substance; the admin keeps control of access and the contract.
- —User & role administration
- —Billing & subscription
- —SSO & tenant settings
- —Creating join codes on the customer side
Questions
Does adviser access cost anything?
The adviser account has no licence fee. Customer tenants sit on their plan (multi-tenant console from Professional). Boutiques of 1–5 people should use the form if access still needs a check.
Who is it for?
External CISOs, DPOs, ISMS advisers and small firms supporting utilities, mid-market or KRITIS-near companies — not cold outreach, not resellers without delivery.
What rights do I have?
Read and write in ISMS, risk, controls, audit, privacy, TPM, incidents, HinSchG. No user admin, billing or customer SSO.
How do I enter a client tenant?
The client admin creates a join code (60 minutes) under Settings → External access. You redeem it in the console.
Already have an account?
You can register in the console. If the boutique access still needs a look, use the form.