innotemis.de

What It Is

innotemis is a German data protection and information security consulting service for small and medium-sized enterprises, tradespeople, freelancers, self-employed professionals, agencies, and public institutions. The website emphasizes that it can act as an external data protection officer, helping clients handle data protection obligations in a DSGVO/GDPR-compliant way while reducing the risk of fines and reputational damage. It is closer to a compliance advisor and managed data protection officer than a traditional cybersecurity software vendor.

Core Capabilities

Based on the text, the service process includes three steps: “analysis and audit, action planning, implementation and ongoing support.” Its key capabilities cover reviewing the current state of data protection, identifying gaps, building compliance structures such as records of processing activities and data processing agreements, serving as a contact point for regulators and employees, conducting regular audits and updates, and providing online or offline training. Training can be customized by industry and role and includes participation certificates. Its security focus leans toward data protection management systems and foundational information security governance, with no indication of technical protection capabilities such as vulnerability scanning, endpoint protection, SIEM, or cloud security.

Pricing

The website does not provide specific pricing, but states that costs depend on company size and scope of service. It offers transparent fixed monthly fees or project-based pricing and emphasizes that there are no hidden fees. It also provides a free initial consultation, as well as a free Q&A session on Mondays from 12:00 to 13:00. For budget-sensitive SMEs, this model helps control compliance spending, but buyers should still confirm service boundaries, response times, and deliverables before purchasing.

Pros and Cons

The advantages are its clear positioning and focus on common data protection pain points for small and medium-sized organizations. It highlights 15 years of experience and service to more than 100 companies. Its communication style is practical, offering direct personal service rather than hotline-style support. The drawbacks are that the public information does not include specific pricing, certifications, or detailed customer industry case studies, nor does it explain whether a compliance management platform or integration with existing IT systems is available. For companies that need automated security monitoring or technical protection products, it cannot replace professional cybersecurity tools.

Who It’s For and Access from China

It is suitable for SMEs, tradespeople, and public institutions operating in Germany or the EU that need an external data protection officer or DSGVO remediation support. Chinese companies with business in the EU or that process EU personal data could also consider it as a local compliance consulting candidate. The text provides no evidence regarding website accessibility from mainland China, so this remains unknown.