Starter €349/month net, Professional €849, Group from €1,499 — by companies and scope, not by seats.
Try free for 6 weeks
No contract, no credit card. Afterwards a permanent Free plan with Micro-ISMS.
A small NIS2-obligated organisation: one company, one framework — and every user who needs to take part.
Mid-market and utilities with several companies: all live frameworks, BCM and Microsoft 365 / Entra login.
Group-wide overview across unlimited companies — with Entra group→role mapping and a guided start.
Try free for 6 weeks — no commitment and no credit card. Then Free with Micro-ISMS stays available. Paid plans (Starter, Professional, Group) start after the trial with a 24-month term. Package prices are net plus VAT.
Unlimited users, the trial, 24 months after the trial, DPA/TOMs and updates. Packages differ mainly in companies, frameworks and integrations.
6 Wochen testen – ohne Vertragsbindung, ohne Kreditkarte. 6 Wochen kostenlos testen, danach dauerhaft Free mit Micro-ISMS. Paid-Pläne (Starter, Professional, Group) starten nach dem Test mit 24 Monaten Laufzeit.
Only features in the product catalogue. Planned items (KRITIS as its own framework, ServiceNow) are marked as in preparation.
Scope, policies, control sets, statement of applicability and evidence — the ISMS auditors expect.
NIS2 as a live framework in the platform (duties, notification paths). The applicability check is free at /tools/nis2-betroffenheitscheck. We do not file authority registrations on your behalf.
Live control set and mapping. KRITIS as its own framework is in preparation — not sold as a live extra.
IT and business risk with matrix, methodology and KPIs/KRIs. Asset inventory, processes (BPMN) and a central action register.
BCM plans with flow editor and PDF. Incident register with notification-duty check. GDPR data-subject requests including the DSR portal. Audit programme with evidence and auditor access.
Packages by number of companies, not by seats: users unlimited. Microsoft 365 and Entra login are live. ServiceNow (CMDB) is listed as requested / in preparation on the integrations page.
Compared by companies, frameworks and modules — not by user count. Professional is the usual fit for mid-market and utilities.
Swipe the table sideways to see every package.
| Capability | Starter | Professional | Group |
|---|---|---|---|
| Companies | 1 | Up to 3 | Unlimited |
| Users | Unlimited | Unlimited | Unlimited |
| Frameworks | 1 (e.g. NIS2 or ISO 27001) | All live (NIS2, ISO 27001, BSI IT-Grundschutz and others) | As Professional |
| ISMS / ISO 27001 | If chosen as the framework | Included | Included |
| NIS2 in the platform | If chosen as the framework | Included | Included |
| BSI IT-Grundschutz | If chosen as the framework | Included | Included |
| KRITIS (own framework) | — | In preparation | In preparation |
| Risk management (methodology, KPIs) | Included | Included | Included |
| BCM including PDF plan | — | Included | Included |
| Assets and processes | Assets included | Assets and process modelling | As Professional |
| Actions | Included | Included | Included |
| Incidents / notification paths | Included | Included | Included |
| GDPR data-subject requests | Included | Included | Included |
| Audit / evidence | Included | Included | Included |
| Multi-company | 1 company | Up to 3 | Unlimited, group overview |
| Microsoft 365 / Entra login | — | Included | Included |
| ServiceNow | In preparation | In preparation | In preparation |
| SSO Entra groups → roles | — | — | Included |
| Onboarding | Self-service | Self-service | Individual |
| Support | Email + chat | Phone (4 h business day) | Guided, by arrangement |
| Trial | 6 weeks, self-start | 6 weeks, self-start | By arrangement |
| Contract after trial | 24 months | 24 months | 24 months |
Yes. You create Starter and Professional yourself — directly in the app at grc.deveca.app. For Group or a guided rollout: request a conversation.
You test for 6 weeks free — no contract and no credit card. After that a Free account with Micro-ISMS stays available. Move to Starter or Professional for the full scope.
No. No credit card is required to start. You are ready in about 5 minutes.
After the trial, paid plans start with a 24-month term. The 6-week trial itself has no commitment.
Starter €349 per month net (1 company, 1 framework). Professional €849 per month net (up to 3 companies, all live frameworks). Group from €1,499 per month net (unlimited companies). Users are unlimited in every package. Monthly prices apply with a 24-month term, net plus VAT.
An ISMS works when specialist departments and risk owners take part — not only the information-security officer. We therefore charge by companies and scope, not by seats. The annual budget stays predictable, and nobody hesitates to invite colleagues.
The platform stores in German data centres (Nuremberg, backup Falkenstein). A GDPR DPA and TOMs are included in every paid plan. The marketing site is delivered via Vercel — that is not the same as app data residency.
Product updates sit in the plan. Starter and Professional onboard in the app. Group gets individual onboarding. There is no hidden setup fee in the published packages.
No. DORA, SOC 2, PCI DSS, HIPAA and a dedicated KRITIS framework are marked as planned or in preparation. You do not pay for something that is not live. ServiceNow is listed as requested on the integrations page.