privacy-design.de

What It Is

privacy/design is a German business-focused consulting firm positioned as “IT Beratung & Datenschutz” — IT consulting and data protection solutions. Its cybersecurity-related value lies mainly in privacy protection, data protection compliance, DSGVO/GDPR implementation, external data protection officer services, and risk control for data protection in AI/GenAI use cases, rather than technical security products such as firewalls, EDR, or WAF.

Core Capabilities

In terms of protection scope, privacy/design focuses on organizational and compliance-level data security: analyzing and optimizing data protection processes, identifying weak points, defining actionable measures, creating and updating privacy policies, and reducing risks in sensitive data handling through employee training. It also provides external data protection officer services, including ensuring compliance with data protection requirements, advising management, coordinating communication with regulators, handling inquiries or complaints, and maintaining documentation and evidence for data protection measures.

For deployment, the available information does not indicate a SaaS platform, private deployment, or security appliance. The offering is mainly consulting services and outsourced external roles. Its management and alerting capabilities also do not appear to involve an automated console or real-time alerts; instead, the focus is on process management, compliance documentation, regulatory communication, and project execution. In terms of integration, the website emphasizes embedding data protection measures into existing business processes. For GenAI and AI-assisted solutions, it offers use-case assessment, risk analysis, strategic integration, and advice on transparency, ethics, and legal requirements, but it does not disclose API capabilities or specific system integrations.

Pricing and Compliance

The website does not publish pricing, packages, billing models, or service levels. Users need to contact the company by email, phone, or form to request a quote. On compliance, it explicitly mentions DSGVO/GDPR and other data protection laws, as well as current requirements related to the AI Richtlinie. However, it does not disclose third-party certifications such as ISO 27001, SOC 2, or TISAX.

Pros, Cons, and Best Fit

Its strengths are that the services cover IT project management, business analysis, and privacy compliance, making it suitable for companies that want to address technology implementation and regulatory requirements in parallel. It is especially relevant for German or EU-related businesses that do not have internal data protection officer resources and need external DPO support. The drawbacks are limited disclosure around productization and technical security capabilities, as well as a lack of information on pricing, delivery timelines, customer cases, certifications, and tooling platforms, making it difficult to assess its ability to deliver services at scale.

China Access and Alternatives

Access from China cannot be determined from the available content and is assessed as unknown. Payment methods are also not disclosed. If a Chinese company only needs local cybersecurity or data compliance implementation, it would usually make sense to first compare local compliance consultancies, law firms, and Big Four consulting teams. If a privacy management platform is required, alternatives such as OneTrust, TrustArc, and DataGuard may be worth considering.