Substance over show
We build features auditors and CISOs actually use — not what looks good in a sales deck.
About us
We build GRC that feels good.
deveca comes from years of frustration with Excel and overloaded legacy tools — and from real experience in audits, ISMS programmes and privacy consulting.
Our mission
Security, risk and compliance should not be a brake. They should be a clear, fast and traceable process. We believe good software can do for GRC what Stripe did for payments or Linear for project management.
That is why we build deveca to the standard of a premium consumer product — and with the robustness auditors and CISOs expect.
In numbers
- Hosting
- Nürnberg + Falkenstein
- Location
- Germany
- Data residency
- Germany
- Frameworks
- 12+ integrated
- Modules
- 10 live + 5 on the roadmap
- Response
- ≤ 4 h on business days
What guides us
German and sovereign
100% Made in Germany, hosted in the EU. Data residency in Nuremberg, backup data centre in Falkenstein — vendor and subprocessor review against documented sovereignty criteria.
Open, not lock-in
Open API, MCP, data export at any time. If you leave, you get your data back. Full stop.
Pragmatic and fast
We ship features weekly — with a clear roadmap and no vapourware.