Compliance assessment for companies
SMEs and scale-ups in Switzerland, Germany and Austria that want a complete, evidenced view of their overall regulatory position.
Updated: 2026-11
The compliance assessment establishes in one pass which regulations apply to your company, from data protection to the AI Act, NIS2 and the Swiss ISA, the Data Act, accessibility and e-invoicing. You receive a reason for each regulation, a risk and deadline rating for each gap and, at the end, an action plan.
New regulations arrive faster than individual owners can track them. Data protection sits with one person, IT security with another, accessibility with marketing, and nobody sees where duties overlap or are missing entirely. Teams often work intensively on one topic while another with an earlier deadline goes unnoticed.
The compliance assessment replaces this patchwork with an overall view: from business model to applicability, from applicability to gaps, from gaps to a plan that management can decide on.
What you get
Applicability matrix
For each regulation examined: applies or not, in which role, from when, with written reasons.
Gap analysis
Comparison of documents, processes and systems with the applicable duties, each gap rated by risk and deadline.
Shared building blocks
Overview of measures that satisfy several duties at once, such as a system inventory or an incident plan.
Action plan
Prioritised measures with owners and sequence, realistic for the size of your organisation.
Decision paper
Summary for management or the board with the key risks and decisions.
How it runs
- 01
Scoping
Conversation on business model, markets, customers, systems and products; selection of regulations to examine.
- 02
Fact-finding
Review of existing documents and short interviews with those responsible for data protection, IT and business units.
- 03
Assessment
Reason applicability, rate gaps, identify shared building blocks.
- 04
Handover
Presentation of results, action plan and decision paper; implementation support on request.
Price framing
Fixed scope after scoping, depending on size, number of markets and applicable regulations; no flat price without a prior conversation.
Indicative, not a binding quote — the frame is confirmed during scoping.
Parent service: Compliance assessment
FAQ
How does this differ from a data protection audit?
A data protection audit examines one regulation in depth. The compliance assessment first establishes which regulations apply at all, then prioritises across them.
Does the assessment replace a law firm?
No. We gather and organise facts by regulation. Where an individual legal opinion is needed, we flag it and involve a law firm on request.
What do we need to prepare?
Little. Existing data protection documents, a list of key systems and providers, and information on markets and customer groups help. Our preparation checklist explains it in detail.
Compliance assessment for companies
SMEs and scale-ups in Switzerland, Germany and Austria that want a complete, evidenced view of their overall regulatory position.