Log InRequest a QuoteDE
Menu
Solutions›
Frameworks
ISO 27001NIS2TISAX®GDPRDORANISGEU AI ActISO 9001Whistleblower Protection ActSOC 2ISO 27017ISO 27018VdS 10000VdS 10100
Industry Solutions
StartupsScaleupsMid-MarketSoftware and IT ConsultingFinancial ServicesEnergyFood & BeverageHealthcareIndustry and ManufacturingLogisticsAerospace and DefenseNonprofits and NGOsMunicipal Utilities and Waste ManagementCritical Infrastructure (KRITIS)
Managed Compliance
CISO as a ServiceDPO as a ServiceQuality Manager as a ServiceAI Officer as a Service
Use Cases
Information SecurityData ProtectionQuality ManagementAI ManagementWhistleblowing
Business Continuity ManagementSoon
Platform
Compliance PlatformAI FirewallNew
How It WorksCustomersPartners
Company›
About SECJURCareers
Resources›
BlogCompliance GlossaryTemplates & DownloadsIntegrationsPlatform UpdatesProduct Docs
Request a QuoteDeutsch
Popular
Most common starting points
›
Frameworks
ISO 27001, NIS2, TISAX®, and more
›
Industry Solutions
Finance, energy, and more
›
Managed Compliance
Security, privacy, quality, and AI officers
›
Use Cases
ISMS, data protection, QMS, and more
›
Compliance Platform
The Digital Compliance Office
›
AI FirewallNew
Use AI in line with the law
›
Popular
Frameworks
ISO 27001
Certification
NIS2
Regulation
TISAX®
Label
GDPR
Regulation
Compliance by industry
Industry and Manufacturing
Energy
Software and IT Consulting
Food & Beverage
Compliance by Use Case
Information Security
Data Protection
Quality Management
AI Management
Frameworks
One platform, all frameworks
Controls are mapped across all frameworks, and you can add your own.
Discover SECJUR →
Industry Solutions
By industry
Software and IT Consulting
Financial Services
Energy
Food & Beverage
Healthcare
Industry and Manufacturing
Logistics
Aerospace and Defense
Nonprofits and NGOs
Municipal Utilities and Waste Management
Critical Infrastructure (KRITIS)
By size
Startups
Scaleups
Mid-Market
Compliance built for your industry
Industry-specific requirements, covered in one platform.
View food & beverage solution →
Managed Compliance
CISO-as-a-Service
External information security officer
DPO-as-a-Service
External data protection officer
Quality Manager-as-a-Service
External quality management representative
AI Officer-as-a-Service
External AI officer
Read Case Study

“SECJUR takes the heavy lifting in information security off our hands. We had only a few weeks until the certification audit and no one in the company to build an ISMS. Thanks to SECJUR, we still haven’t had to fill a dedicated position, and we passed the audit without any issues.”

Jan Sorgenfrei
Jan Sorgenfrei
Vice President of Engineering, Circus SE
Use Cases
ISMS
Information Security
ISO 27001, TISAX®, NIS2, and more
DPMS
Data Protection
GDPR-compliant data protection
QMS
Quality Management
ISO 9001
AIMS
AI Management
ISO 42001 and EU AI Act
Whistleblowing
Whistleblowing
Whistleblower Protection Act
Soon
BCM
Business Continuity Management
Emergency and crisis management
Your expert builds your management system in the Digital Compliance Office
Save on expensive consultants and hundreds of hours of internal effort.
How It Works →
The Digital Compliance Office
A selection of modules
Navigator
Guided steps for build and operation.
Asset Management
All assets in one place, by criticality.
Risk Management
Assess, treat, and track risks.
Vendor Management
Keep service providers and suppliers in view.
Policy Management
Create, link, and approve policies.
Incident Management
Detect, classify, and report incidents.
Contract Management
Data protection agreements and DPA review.
Task Management
All tasks and deadlines at a glance.
Navigator · ISO 27001
Headquarters
Progress
80%
✓
Define scope
done
✓
Record assets
done
✓
Assess risks
done
Your expert
linked 3 pieces of evidence
And much more
Audit management, online training, records of processing, AI inventory, TOMs, and more
Explore Platform →
SECJUR AI FirewallBeta
The problem
44%
of your employees break company policy or the law when using AI.

Your team uploads confidential client and personal data to ChatGPT, Claude and co. With your permission or without.

Source: KPMG, 2025
The solution
Use AI, within your rules.

The AI Firewall checks every request right in the AI tool and says at once whether it is allowed.

Your AI assistant · Claude
Put the sick notes from the team into one table.
Checked with SECJUR AI Firewall
Not allowed
Rule 2.1 · No health data in AI tools
Ban AI or let it run? Both go wrong.
Explore AI Firewall →
Knowledge
Articles, guides, and glossary
›
Templates & Downloads
Whitepapers, checklists, and templates
›
Product & Help
Help center, integrations, and updates
›
Knowledge
All Articles
All blog articles at a glance
Go to Blog →
NIS2 Directive
Everything about implementation at a glance
GDPR
The guide to the General Data Protection Regulation
ISO 27001 Guide
The complete guide to certification
TISAX®
Information security in the automotive industry
Compliance Glossary
Terms explained simply
Templates & Downloads
All templates and downloads
Whitepapers, checklists, and templates in one place
Go to Downloads →
NIS2 Whitepaper
Obligations and implementation at a glance
ISO 27001 for municipal utilities and suppliers
SECJUR Whitepaper
TISAX® Checklist
Requirements for the automotive industry
ISO 27001 Checklist
Step by step to certification
BYOD Policy
Template for companies
Product & Help
All Integrations
Tools that connect with SECJUR
Platform Updates
News from product development
Product Docs
Guides for day-to-day work in the DCO

Your external AI Officer

A dedicated expert takes on the role of your AI Officer. Your expert implements the EU AI Act in your company, builds an AI management system according to ISO 42001 on request, and reports directly to your management.

With AI inventory and risk classification in the DCO.

Request a QuoteHow It Works
✓
We do 80%
✓
Hosted in Germany
✓
ISO 27001 certified
Your SECJUR expert in the DCO: EU AI Act progress, status updates and evidence

SECJUR customers are in good company

OTTOStahlwerk ThüringenNordzuckeryfoodStadtwerke CottbusSteyr MotorsStatista
Why SECJUR

Your AI Officer, without a new hire

Without SECJUR
Nobody is responsible for AI in the company
The role runs on the side in IT or Legal
Knowledge depends on a single person
Unclear which AI tools are in use
Every document is created from scratch
Documentation scattered across Word, Excel, and SharePoint
With SECJUR
AI Officer-as-a-Service
A dedicated expert takes on the role of your AI Officer
Your AI Officer does 80% of the work
A dedicated AI Officer backed by the SECJUR team
All AI systems in the AI inventory, with risk class
Templates and automation on our platform
Everything audit-proof in one place, in the DCO
Request a Quote
How It Works

Expert quality at AI speed

Software and expertise in one. We take on around 80% of your EU AI Act tasks. You provide information, give approvals, and involve your organization.

✓
Our Digital Compliance Office handles the routine work
AI inventory, risk classes, policies, and evidence in one place, continuously maintained
✓
Your AI Officer steers and reports
Risk classification, AI provider reviews, and decision papers for management
✓
You approve and stay audit-ready
We take care of internal AI audits, documented in the DCO
Request a Quote
Your SECJUR expert
Digital Compliance Office
Your expertAI inventory

Chatbot tool classified as limited risk.

12 min agoApprove
Management systems

One management system, all frameworks

01
AI management (AIMS)

Your AI Officer implements the EU AI Act and, on request, builds an AI management system according to ISO 42001: AI inventory, risk classes, transparency obligations, and fundamental rights impact assessments.

More on AI management →
02
Data protection (DPMS)

GDPR and the Swiss nFADP in the same system: records of processing, data subject requests, and data protection impact assessments.

More on data protection →
03
Quality management (QMS)

ISO 9001 on the same foundation, with shared documents, audits, and management reviews.

More on quality management →
04
Whistleblowing

A secure, anonymous reporting channel in line with German and EU requirements.

More on whistleblowing →
05
Information security (ISMS)

ISO 27001, NIS2, TISAX®, DORA, and SOC 2 on the same foundation. You implement controls once and use them for every additional framework.

More on information security →
More on the platform →
Your compliance modules
DCO
AI management (EU AI Act)
82 %
DPMS (GDPR)
100 %
QMS (ISO 9001)
planned
Whistleblowing
Reporting channel active
ISMS (ISO 27001, NIS2)
in progress
Shared controls
reused
Supplier evaluation
ISO 27001, ISO 42001, EU AI Act
Your experts

Real experts by your side

Your AI Officer is a dedicated expert who knows the EU AI Act and your industry and is directly available to you.

SECJUR information security expert
SECJUR expert
SECJUR information security expert
SECJUR AI management expert
SECJUR expert
SECJUR information security expert
SECJUR data protection expert
SECJUR quality management expert
Discover SECJUR →
The comparison

SECJUR compared

Internal AI Officer, external consultant at a day rate, or SECJUR: how the three paths to your AI Officer compare.

Internal
An employee from your own team
External
Consultant at a day rate
SECJUR AI Officer-as-a-Service
Platform plus dedicated expert
Who does the work
– The AI Officer, often alongside other duties
– The consultant delivers documents, your team implements
✓Your AI Officer does 80% of the work
Cost
– Full salary plus training
– Day rates, hard to plan
✓Fixed price
Availability
– Unavailable during vacation, illness, or job changes
– Only on booked days
✓A dedicated AI Officer backed by a team
Expertise
– Depends on one person
– High, but only occasionally on site
✓An expert who knows your industry
Documentation
– Scattered across Word, Excel, and SharePoint
– Stays with the consultant, hard to hand over
✓Centralized in the DCO, linked and versioned
Data protection and ISMS
– Separate from AI topics
– A separate engagement
✓AI, data protection, and ISMS on one platform
AI inventory
– Excel list, quickly outdated
– The consultant’s snapshot
✓Continuously maintained in the DCO, with risk class
Request a Quote
FAQ

Frequently asked questions

Request a Quote →
Does the EU AI Act require an AI Officer?
+

Not explicitly. However, the EU AI Act requires your employees to have sufficient AI literacy (Art. 4), and you must classify your AI systems and meet the obligations for each risk class. An AI Officer bundles these tasks.

What internal resources do I need?
+

We take on 80% of the EU AI Act effort. You need an internal coordinator who reports new AI tools and projects to your AI Officer early.

Is the external AI Officer liable?
+

No. Responsibility and decisions remain with your management. Your AI Officer advises, steers implementation, and reports regularly so that management can meet its responsibilities.

We only use ChatGPT and similar tools. Does the EU AI Act apply to us?
+

Yes. Even companies that only use AI systems have obligations, for example regarding employees’ AI literacy and transparency. Your AI Officer records the tools in the AI inventory, classifies them, and sets rules for their use.

What happens in the event of a serious AI incident?
+

Your AI Officer assesses the incident. If it involves a high-risk AI system, your AI Officer prepares the report to the market surveillance authority (Art. 73).

Get started

Bring your AI Officer onto the team

Book an Intro CallHow It Works
AI Officer at a fixed price
Does 80%
Request a Quote