Cloud-native GRC & ISMS Platform — built in Germany 🇩🇪
Kopexa is a modern, fully-fledged ISMS & GRC platform.
We help organizations automate compliance and security programs end-to-end, no matter their size.
Key features:
- Asset Management: People, vendors, infrastructure, applications, and data assets.
- Risk Management: Identify, assess, mitigate and monitor risks with configurable scoring.
- Vendor & Supply Chain: Manage third-party risk and due diligence workflows.
- Controls & Evidence: Implement, assign, and continuously validate controls.
- Framework Catalogs: Pre-mapped frameworks (ISO 27001, NIS2, DORA, SOC 2, BSI IT-Grundschutz, GDPR).
- Policies & Documentation: Centralized management with versioning, workflows, and approvals.
- Automation & Checks: Cloud-native executor with continuous compliance and integrations.
- Fine-grained Authorization: Powered by OpenFGA for scalable and secure access control.
Kopexa is designed to grow with you:
- Small businesses & startups: Easy onboarding, minimal overhead.
- Mid-sized organizations: Scalable processes and automation.
- Large enterprises: Advanced compliance automation, integrations, and enterprise-grade security.
We are proudly sponsored by OVHcloud and Microsoft — providing secure, EU-based infrastructure and enterprise-grade technology support.
- 🌐 Website: https://kopexa.com
- 💬 Discussions:
github.com/orgs/kopexa-grc/discussions
If you find a security vulnerability, please email security@kopexa.com.
We follow coordinated disclosure and respond quickly.
© Kopexa GmbH — Made with ❤️ in Germany. Powered by OpenFGA. Sponsored by OVHcloud & Microsoft.