Core expertise
Further services
Podcast
Datenschutz-Puls: what matters in data protection law, every two weeks.
Focus industries
Further industries
Industries
Your industry is not listed? We advise across all sectors.
About us
Information
Podcast
Datenschutz-Puls: what matters in data protection law, every two weeks.
The starting point
Large clients require proof of information security before they sign a contract. ISO 27001 is the internationally recognised standard for this. The certificate is particularly relevant for IT and software companies, service providers with corporate clients, healthcare, finance and critical infrastructure. We build the management system and take you all the way through the certification audit.
Our services
We guide you through the entire certification process: from the initial analysis and ISMS implementation to certification and continuous improvement.
Gap analysis
We review your existing information security and identify the gaps that need to be closed before certification.
ISMS implementation
We build the required information security management system: processes, policies and structures.
Risk management
We assess your information security risks and define appropriate measures to treat them.
Documentation
We draft the policies, procedures and evidence your ISMS needs for the audit.
Audit preparation
We prepare your organisation for the external certification audit and attend it with you.
Ongoing support
After certification, we continue to look after your ISMS, through recertification and beyond.
The process
ISO 27001 certification is not a single audit. It is a structured process: find the gaps, build the management system, test it internally and prepare for the external certification audit. We guide you all the way.
01
Gap analysis
Know where you stand
We review your existing information security processes and identify the gaps between the current state and the requirements of ISO 27001.
02
ISMS build
Build the system
We develop the information security management system, including the required policies, documentation, risk treatment and security controls.
03
Internal audit
Test and improve
We check whether the ISMS works as intended, resolve remaining weaknesses and make the organisation ready for the audit.
04
Certification audit
Prepared for the audit
We prepare you for the external certification audit and guide you through the entire certification process.
05
Ongoing support
Staying on track after certification
We maintain and develop your ISMS after certification, so that recertification is no longer a project.
In an emergency
Our lawyers are personally liable, insured with more than 40 million euros of cover. For us, a security incident is not a support ticket: our emergency centre is available around the clock, and in proceedings we represent you as a law firm.
What it costs
Fixed fee, not hourly rates
You receive an individual fixed-fee offer. No open-ended hourly budget, no additional charges.
Cancel at any time
Our engagement is based purely on trust and can be terminated at any time. No minimum term.
One point of contact
You speak to the same lawyer every time, not to a changing support team.
Trust
450+
companies trust legal data
Security
€40m
professional indemnity cover
Proof
ISO 27001
We are certified ourselves
Client reviews
Client via ProvenExpert
19 Dec 2025
Highly competent data protection advice. The legal data team offered us practical solutions and looked after us very well throughout. We can recommend the firm without reservation.
Client via ProvenExpert
19 Dec 2025
I would definitely recommend legal data. I felt well supported throughout the entire process.
Client via ProvenExpert
17 Dec 2025
The lawyers at legal data are experts in data protection. They were able to solve all of my data protection issues!
Client via ProvenExpert
17 Dec 2025
I am extremely satisfied with our work with legal data. The lawyers are highly competent and give clear, individual and solution-oriented advice.
Client via ProvenExpert
15 Dec 2025
The firm always supported us with our data protection questions. Every question was answered quickly, reliably and clearly.
Client via ProvenExpert
10 Dec 2025
The firm offers real expertise in data protection law, straightforward and close to its clients.
Client via ProvenExpert
10 Dec 2025
Whatever the data protection question, I received support quickly and without fuss, and the solutions could be put into practice straight away. Everything was explained clearly and I always felt well looked after.
Client via ProvenExpert
3 Dec 2025
The lawyers explained the approach clearly and actively guided me through the process. The team is competent, reliable and easy to reach. I would recommend the firm at any time.
Client via ProvenExpert
24 Oct 2025
Excellent IT law advice: fast, competent and practical. Highly recommended for companies in the digital world!
Client via ProvenExpert
24 Oct 2025
The firm provides first-class, reliable advice on all data protection matters. Thanks to their expertise, I feel legally secure and very well looked after.
Client via ProvenExpert
24 Oct 2025
An outstanding data protection law firm with strong advisory skills. A clear recommendation for companies that want to act in a legally sound way.
Client via ProvenExpert
20 Oct 2025
The firm works with great competence and reliability in data protection. I always felt excellently advised and legally in safe hands.
Client via ProvenExpert
19 Oct 2025
Straightforward advice and a very friendly team at legal data.
Client via ProvenExpert
19 Oct 2025
Very competent advice on data protection. I would definitely recommend legal data.
Client via ProvenExpert
6 Oct 2025
Very friendly staff, straightforward and solution-oriented advice.
Client via ProvenExpert
2 Sep 2025
Communication with the lawyers at legal data worked without any problems. Quick, easy and straightforward. I can only recommend the firm.
Client via ProvenExpert
25 Mar 2023
The lawyers are extremely well versed in data protection law and helped me a great deal in implementing a new data protection policy for my company. They took the time to understand my needs.
Client via ProvenExpert
24 Oct 2025
Competent advice at legal data. The firm is definitely worth recommending.
Client via ProvenExpert
19 Dec 2025
Highly competent data protection advice. The legal data team offered us practical solutions and looked after us very well throughout. We can recommend the firm without reservation.
Client via ProvenExpert
19 Dec 2025
I would definitely recommend legal data. I felt well supported throughout the entire process.
Client via ProvenExpert
17 Dec 2025
The lawyers at legal data are experts in data protection. They were able to solve all of my data protection issues!
Client via ProvenExpert
17 Dec 2025
I am extremely satisfied with our work with legal data. The lawyers are highly competent and give clear, individual and solution-oriented advice.
Client via ProvenExpert
15 Dec 2025
The firm always supported us with our data protection questions. Every question was answered quickly, reliably and clearly.
Client via ProvenExpert
10 Dec 2025
The firm offers real expertise in data protection law, straightforward and close to its clients.
Client via ProvenExpert
10 Dec 2025
Whatever the data protection question, I received support quickly and without fuss, and the solutions could be put into practice straight away. Everything was explained clearly and I always felt well looked after.
Client via ProvenExpert
3 Dec 2025
The lawyers explained the approach clearly and actively guided me through the process. The team is competent, reliable and easy to reach. I would recommend the firm at any time.
Client via ProvenExpert
24 Oct 2025
Excellent IT law advice: fast, competent and practical. Highly recommended for companies in the digital world!
Client via ProvenExpert
24 Oct 2025
The firm provides first-class, reliable advice on all data protection matters. Thanks to their expertise, I feel legally secure and very well looked after.
Client via ProvenExpert
24 Oct 2025
An outstanding data protection law firm with strong advisory skills. A clear recommendation for companies that want to act in a legally sound way.
Client via ProvenExpert
20 Oct 2025
The firm works with great competence and reliability in data protection. I always felt excellently advised and legally in safe hands.
Client via ProvenExpert
19 Oct 2025
Straightforward advice and a very friendly team at legal data.
Client via ProvenExpert
19 Oct 2025
Very competent advice on data protection. I would definitely recommend legal data.
Client via ProvenExpert
6 Oct 2025
Very friendly staff, straightforward and solution-oriented advice.
Client via ProvenExpert
2 Sep 2025
Communication with the lawyers at legal data worked without any problems. Quick, easy and straightforward. I can only recommend the firm.
Client via ProvenExpert
25 Mar 2023
The lawyers are extremely well versed in data protection law and helped me a great deal in implementing a new data protection policy for my company. They took the time to understand my needs.
Client via ProvenExpert
24 Oct 2025
Competent advice at legal data. The firm is definitely worth recommending.
Client via ProvenExpert
24 Oct 2025
Competent advice at legal data. The firm is definitely worth recommending.
Client via ProvenExpert
25 Mar 2023
The lawyers are extremely well versed in data protection law and helped me a great deal in implementing a new data protection policy for my company. They took the time to understand my needs.
Client via ProvenExpert
2 Sep 2025
Communication with the lawyers at legal data worked without any problems. Quick, easy and straightforward. I can only recommend the firm.
Client via ProvenExpert
6 Oct 2025
Very friendly staff, straightforward and solution-oriented advice.
Client via ProvenExpert
19 Oct 2025
Very competent advice on data protection. I would definitely recommend legal data.
Client via ProvenExpert
19 Oct 2025
Straightforward advice and a very friendly team at legal data.
Client via ProvenExpert
20 Oct 2025
The firm works with great competence and reliability in data protection. I always felt excellently advised and legally in safe hands.
Client via ProvenExpert
24 Oct 2025
An outstanding data protection law firm with strong advisory skills. A clear recommendation for companies that want to act in a legally sound way.
Client via ProvenExpert
24 Oct 2025
The firm provides first-class, reliable advice on all data protection matters. Thanks to their expertise, I feel legally secure and very well looked after.
Client via ProvenExpert
24 Oct 2025
Excellent IT law advice: fast, competent and practical. Highly recommended for companies in the digital world!
Client via ProvenExpert
3 Dec 2025
The lawyers explained the approach clearly and actively guided me through the process. The team is competent, reliable and easy to reach. I would recommend the firm at any time.
Client via ProvenExpert
10 Dec 2025
Whatever the data protection question, I received support quickly and without fuss, and the solutions could be put into practice straight away. Everything was explained clearly and I always felt well looked after.
Client via ProvenExpert
10 Dec 2025
The firm offers real expertise in data protection law, straightforward and close to its clients.
Client via ProvenExpert
15 Dec 2025
The firm always supported us with our data protection questions. Every question was answered quickly, reliably and clearly.
Client via ProvenExpert
17 Dec 2025
I am extremely satisfied with our work with legal data. The lawyers are highly competent and give clear, individual and solution-oriented advice.
Client via ProvenExpert
17 Dec 2025
The lawyers at legal data are experts in data protection. They were able to solve all of my data protection issues!
Client via ProvenExpert
19 Dec 2025
I would definitely recommend legal data. I felt well supported throughout the entire process.
Client via ProvenExpert
19 Dec 2025
Highly competent data protection advice. The legal data team offered us practical solutions and looked after us very well throughout. We can recommend the firm without reservation.
Client via ProvenExpert
24 Oct 2025
Competent advice at legal data. The firm is definitely worth recommending.
Client via ProvenExpert
25 Mar 2023
The lawyers are extremely well versed in data protection law and helped me a great deal in implementing a new data protection policy for my company. They took the time to understand my needs.
Client via ProvenExpert
2 Sep 2025
Communication with the lawyers at legal data worked without any problems. Quick, easy and straightforward. I can only recommend the firm.
Client via ProvenExpert
6 Oct 2025
Very friendly staff, straightforward and solution-oriented advice.
Client via ProvenExpert
19 Oct 2025
Very competent advice on data protection. I would definitely recommend legal data.
Client via ProvenExpert
19 Oct 2025
Straightforward advice and a very friendly team at legal data.
Client via ProvenExpert
20 Oct 2025
The firm works with great competence and reliability in data protection. I always felt excellently advised and legally in safe hands.
Client via ProvenExpert
24 Oct 2025
An outstanding data protection law firm with strong advisory skills. A clear recommendation for companies that want to act in a legally sound way.
Client via ProvenExpert
24 Oct 2025
The firm provides first-class, reliable advice on all data protection matters. Thanks to their expertise, I feel legally secure and very well looked after.
Client via ProvenExpert
24 Oct 2025
Excellent IT law advice: fast, competent and practical. Highly recommended for companies in the digital world!
Client via ProvenExpert
3 Dec 2025
The lawyers explained the approach clearly and actively guided me through the process. The team is competent, reliable and easy to reach. I would recommend the firm at any time.
Client via ProvenExpert
10 Dec 2025
Whatever the data protection question, I received support quickly and without fuss, and the solutions could be put into practice straight away. Everything was explained clearly and I always felt well looked after.
Client via ProvenExpert
10 Dec 2025
The firm offers real expertise in data protection law, straightforward and close to its clients.
Client via ProvenExpert
15 Dec 2025
The firm always supported us with our data protection questions. Every question was answered quickly, reliably and clearly.
Client via ProvenExpert
17 Dec 2025
I am extremely satisfied with our work with legal data. The lawyers are highly competent and give clear, individual and solution-oriented advice.
Client via ProvenExpert
17 Dec 2025
The lawyers at legal data are experts in data protection. They were able to solve all of my data protection issues!
Client via ProvenExpert
19 Dec 2025
I would definitely recommend legal data. I felt well supported throughout the entire process.
Client via ProvenExpert
19 Dec 2025
Highly competent data protection advice. The legal data team offered us practical solutions and looked after us very well throughout. We can recommend the firm without reservation.
5.0 out of 5 stars on ProvenExpert Reviews translated from German.
FAQ
The cost depends on the size, complexity and maturity of your company. After the gap analysis, you receive an individual fixed-fee quote from us instead of open-ended hourly rates.
The certificate is the internationally recognised proof of effective information security. It answers client requests, shortens supplier assessments and reduces the risk of costly security incidents.
Gap analysis, ISMS build, internal audit, certification audit by an accredited body, followed by continuous improvement. We support you at every step.
That depends on the maturity of your organisation; in many cases it takes a few months. After the gap analysis, we can give you a reliable estimate of the timeframe.
In particular IT and software companies, service providers with corporate clients, healthcare, finance and critical infrastructure. The trigger is usually a requirement from a major client.
Yes. A well-built ISMS also covers the requirements of the GDPR, NIS2 and DORA. We integrate the frameworks into the same structure instead of building parallel worlds.
Further services
We do not use tracking or marketing cookies. Only your choice is stored. External media such as the Apple Podcasts player are loaded only with your consent, in which case your IP address is transmitted to Apple. You can change your choice at any time via "Cookie settings" in the footer.
