Compliance as a Service for mid-market companies – pragmatic, personal, and with a dedicated point of contact.
Compaas is a consultancy for information security, cybersecurity, and IT compliance. The offering is aimed specifically at mid-market companies that must meet growing regulatory and security requirements – without having to build extensive internal structures.
Christian Lorenz
Founder & primary contact
Compaas combines technical expertise with pragmatic compliance consulting – personal service with a dedicated point of contact.
Compaas builds on many years of experience in software development and compliance consulting. Christian Lorenz started in the late 1990s with his first own web applications – that is where programming began. Since then, demanding, complex web applications have always been the focus. He has been self-employed since 2010, initially in software development and soon thereafter in the compliance topics that Compaas covers today.
Compaas has supported a large number of clients across a wide range of industries – with a focus on the mid-market companies the offering is designed for.
Since 2019, Christian Lorenz has been a certified ISO 27001 auditor. Compaas therefore combines consulting and audit perspectives – pragmatically and without unnecessary bureaucracy.
Industry experience
"Compaas aims to relieve organisations so they can focus on their core business – with measures that actually work in day-to-day operations."
Standards, laws, and customer requirements are becoming more complex. At the same time, qualified specialists in information security and compliance are hard to find and retain. Building internal capability costs time, money, and distracts from core business.
With Compliance as a Service, Compaas assumes specialist responsibility as an external partner: from gap analysis through pragmatic implementation to audit and certification support. Maximum effectiveness and efficiency – cost-effective and without unnecessary bureaucracy.
measures that work
lean processes, clear priorities
serious and transparent
Compaas understands mid-market companies
For companies that want to implement or further develop ISO 27001, GDPR, whistleblower protection, CRA, defence requirements, the EU AI Act, CMMC, ISO 62443, or comparable standards – with a partner who thinks along and delivers.
Get to know Compaas – personal, non-binding, and tailored to your situation.