Which Compliance Kit do I need?

Start

Answer 8 questions — we recommend the matching kits.

The result shows which of the 5 kits (GDPR, NIS2, EU AI Act, Whistleblower Protection, Anti-Discrimination) you need under current EU law — and whether a bundle would be cheaper than individual purchase.

Question 1 of 8

How many staff does your organisation employ?

fewer than 10 10–49 50–249 250–999 1,000 or more

Question 2 of 8

Do you process personal data?

E.g. customer data, employee data, applicant data, IT logs, newsletter addresses.

Yes, extensively (customers + HR + marketing) Yes, in the usual scope Only internally (HR + accounting)

Question 3 of 8

In which sector does your organisation operate?

Multiple selection possible for mixed operations.

IT services, cloud, SaaS, telecommunications Industry, mechanical engineering, manufacturing Healthcare, medical devices, care, pharma Banks, insurers, financial services Energy, water, transport, critical infrastructure Public administration, education, research Other (trade, services, crafts)

Question 4 of 8

Do you use AI systems?

Including ChatGPT, Copilot, recruiting AI, chatbots, credit scoring, image analysis.

Yes — we develop/integrate our own AI Yes — we use AI tools from providers Planning within 12 months No, not currently

Question 5 of 8

Do you hire staff and publish job ads?

Yes — regularly (more than 5 positions/year) Yes — occasionally No

Question 6 of 8

Are you a KRITIS operator or in a NIS2 special-rule sector?

KRITIS = critical infrastructure from BSI thresholds. Special-rule sectors (regardless of size): TLD registries, DNS, qualified trust services, telecommunications providers.

Yes Unsure No

Question 7 of 8

Do you want to cover mandatory staff trainings?

E.g. AI Literacy (Art. 4 EU AI Act, mandatory since 02.02.2025), GDPR awareness, NIS2 cyber hygiene, anti-discrimination awareness.

Yes — we need documented training modules No — training is handled elsewhere

Question 8 of 8

How time-critical is your compliance implementation?

Acute — supervisory audit announced Within 3 months Within 6 months Preventive — no acute pressure

Your result

Loading recommendation…

Privacy notice: This score was calculated locally in your browser. We have stored neither your answers nor the result.