Tonen 13 services
FullyInControl
One Platform. Total Control. FullyInControl is a modular Integrated Management Platform that unifies GRC, ISMS, PIMS, QHSE, ESG, BCM & audit in one workspace. Plug-and-play standards, shared data core and smart workflows give you real-time oversight, faster audits and continuous improvement.
GRASP - ISMS
GRASP compliance platform helps organizations build and operate a structured ISMS. The platform enables centralized management of risks, actions, and evidence, ensures transparency and traceability, and supports full compliance with ISO 27001 requirements.
GRCC Jahn
Governance, Risk & Compliance consulting by Viktor Jahn. One point of contact from start to finish. Audits, advisory, and training across NIS2, BISG, TISAX, DORA, GDPR, and ISO 27001. Pragmatic, hands-on and built for practice.
i.s.c. Group
ISMS implementations, OneCompliance(tm) program to implement multiple standards at once.
Instant 27001
Instant 27001 is a ready-to-run ISMS, that contains all you need to implement ISO 27001 and get yourself ready for certification in a matter of weeks. You will start the implementation with 80% of the work already done, no prior experience or training necessary.
ISO 27001:2002 Audit prep
ISO 27k and Cyber GRC suite of offerings encompassing NIS2 and other frameworks
ISOPlanner
ISOPlanner is a Microsoft 365-integrated platform that simplifies ISO compliance and information security management. It helps organizations implement, monitor, and improve frameworks like ISO 27001, NIS2, and BIO 2.0 efficiently and collaboratively.
Kertos
Kertos is the modern backbone of every company’s privacy and compliance operations. Providing support in Data & Process Discovery, Data Subject Requests (e.g. customer data deletion), Access Management, Compliance Documentation and various Certification Frameworks such as ISO27001, SOC2, TISAX® and similar. Our no-code SaaS solution connects to the entire IT infrastructure, identifies compliance relevant assets and processes, related data and automates compliance workflows to get an organization certification ready within weeks.
Kopexa
Kopexa is a compliance platform for building and maintaining ISO 27001–ready management systems. It helps organizations structure assets, risks, controls and evidence, enabling continuous compliance instead of one-time audits.
PROCESS 360
At PROCESS 360, we build systems using innovative, effective processes to deliver successful outcomes. The company specializes in a range of ISO management systems, providing our clients with audit, consulting, and training services.
ReadySecGo
ReadySecGo provides practical, end-to-end information security and compliance services designed for startups and growing organizations. We specialize in ISO 27001, SOC 2, and BSI C5 implementation, readiness, and auditing — helping teams build trust through structured, scalable, and cost-effective security programs. Our services include Gap Assessments, Internal & External Audits, Audit Readiness, and vCISO (Virtual CISO) support. With a hands-on, no-nonsense approach, ReadySecGo bridges the gap between frameworks and real-world execution — enabling companies to achieve compliance maturity without the complexity.
SolidInfoSec
Information security consulting focused on strengthening governance, risk and compliance practices. We help organizations structure and implement practical security processes, support audit readiness and build sustainable frameworks that remain workable over time.
trail
trail offers a software solution for AI governance, helping to comply with e.g. the EU AI Act, to manage AI-specific risks, and to set up an AI management system under the ISO/IEC 42001. It connects GRC capabilities with AI use case management and MLOps to both allow for responsible AI development and usage.