We count visits with Google Analytics cookies and Vercel Web Analytics to see which pages help readers most.

Cookie settings
The Assurance Desk
DataGuard logo

DataGuard review

Advisory firm

A Munich-based compliance software company. You subscribe to its security and compliance platform, which comes with consultants, and it can act as your external DPO.

Relevant if you want software with consultants attached for ISO 27001 or several frameworks at once

Price Not published
Indemnity cover Not published
How it uses AI Not published
Facts last checked

Not published means we did not find it on the firm's own pages.

DataGuard scores

Six scores, each 1 to 5. The evidence for each is further down.

Help when things go wrong 2/5
Qualifications of the people who do the work 2/5
What it publishes about fees 3/5
Knowledge of your sector 2/5
Independence from what it sells 3/5
Who carries the risk if the advice is wrong 2/5

What DataGuard offers, and what it publishes

You get software you run yourself, with consultants attached. The platform has modules for GDPR, ISO 27001, TISAX, NIS2 and the EU AI Act. DataGuard says one named customer, Mistral Data, a UK rail-industry software firm, reached ISO 27001:2022 certification in 10 months. It says it has 4,000+ customers in 50+ countries.

DataGuard does not publish a price. Its pricing page shows three tiers, Base, Pro and Enterprise, each with a 'Get a quote' button. It does not name practitioners with privacy credentials or publish professional indemnity cover. Its trust centre offers an ISO 27001 Statement of Applicability only by email request.

DataGuard's advice comes with its software, so its consultants are not independent of a product to sell. It markets 'AI-powered automation', but its UK privacy policy does not say how the platform's AI uses customer data. On Trustpilot it scores 3.2 from 95 reviews, and Trustpilot flags that it has not replied to negative reviews.

Strengths

  • Platform-plus-consultant model suits certification projects: named customer stories document ISO 27001 outcomes, e.g. Mistral Data certified in 10 months
  • Verified UK legal presence: DataCo International UK Limited (Companies House 12877451) is named as UK controller in the UK privacy policy
  • Broad framework coverage in one product: GDPR, ISO 27001, TISAX, NIS2 and EU AI Act modules
  • Scale claims of 4,000+ customers across 50+ countries published on its own site

Things to check

  • Advice and software are bundled: DataGuard's consultancy operates around its own platform subscription, so it is not an independent adviser in the way a pure consultancy is.
  • Markets 'AI-powered automation' but publishes no statement of how the platform's AI uses customer data; the only AI tool disclosed in the UK privacy policy is a recruitment transcription tool.
  • Lower and mixed Trustpilot rating than the sector's best, with negative reviews unanswered per Trustpilot's own flag.
  • No published prices and no named practitioner credentials; its own ISO 27001 evidence is gated behind an email request.

Common questions

Is DataGuard a UK company?

Its UK arm is. UK customers deal with DataCo International UK Limited, a wholly owned subsidiary of DataCo GmbH in Munich, according to its UK privacy policy.

Does DataGuard publish prices?

No. Its pricing page shows Base, Pro and Enterprise tiers, each with a 'Get a quote' button and no figures.

Is its advice independent of its software?

No. The company describes its consultants as 'experts-in-the-loop' within its own platform subscription. The model is disclosed, but the advice comes with a product to sell.

Evidence for each DataGuard score

Show our working

Notes behind each thing to check

  • Advice and software are bundled: DataGuard's consultancy operates around its own platform subscription, so it is not an independent adviser in the way a pure consultancy is. (Homepage and pricing pages present consultancy as 'experts-in-the-loop' within platform tiers (dataguard.com/pricing/, 2026-07-16))
  • Markets 'AI-powered automation' but publishes no statement of how the platform's AI uses customer data; the only AI tool disclosed in the UK privacy policy is a recruitment transcription tool. (UK privacy policy third-party list names only Ashby's AI notetaker; no platform-AI disclosure found (dataguard.com/en-gb/privacy-policy/, 2026-07-16))
  • Lower and mixed Trustpilot rating than the sector's best, with negative reviews unanswered per Trustpilot's own flag. (TrustScore 3.2 from 95 reviews; Trustpilot displays 'hasn't replied to negative reviews' (uk.trustpilot.com/review/dataguard.com, 2026-07-16))
  • No published prices and no named practitioner credentials; its own ISO 27001 evidence is gated behind an email request. (Pricing page shows quote-only tiers; trust centre lists only a request-gated ISO 27001 SoA (dataguard.com/pricing/ and trust.dataguard.com, 2026-07-16))
Six criteria, each scored 1 to 5, with the evidence for each.
CriterionScoreEvidence
Help when things go wrong 2/5 Incident and breach management exists as a platform feature and external-DPO appointments are confirmed in the UK privacy policy, but no ICO-engagement support, outcomes or named practitioners are published (dataguard.com, 2026-07-16)
Qualifications of the people who do the work 2/5 Executives are named but no practitioner IAPP or legal privacy credentials are published on the site as of 2026-07-16 (dataguard.com/about-us/)
What it publishes about fees 3/5 Three-tier model (Base/Pro/Enterprise) with feature differences explained, but no figures, all tiers are quote-only (dataguard.com/pricing/, 2026-07-16)
Knowledge of your sector 2/5 Segmentation is by company size (SMEs vs corporates) rather than sector; no named sector practices found on pages checked 2026-07-16 (dataguard.com)
Independence from what it sells 3/5 Advice is openly part of its own software subscription ('experts-in-the-loop'), so the model is disclosed but advice is not independent of a product to sell (dataguard.com, 2026-07-16)
Who carries the risk if the advice is wrong 2/5 Breach/incident management is offered as a platform module and a trust centre exists, but no PI cover or engagement liability terms are published as of 2026-07-16 (trust.dataguard.com)

Sources for DataGuard

  • Companies House registration (UK entity): DATACO INTERNATIONAL UK LIMITED, company number 12877451, incorporated 13 September 2020, status Active, registered office Suite 1, 7th Floor, 50 Broadway, London SW1H 0BL; the UK privacy policy names it as controller and a wholly owned subsidiary of DataCo GmbH (HRB 235942, Munich) (Companies House, checked 16 July 2026)
  • Service scope: All-in-one security and compliance SaaS platform (ISO 27001, GDPR, TISAX, NIS2, EU AI Act frameworks) with 'experts-in-the-loop' consultancy; the UK privacy policy confirms DataGuard is appointed as external data protection officer for customers (privacy@dataguard.co.uk route) (dataguard.com, checked 16 July 2026)
  • Pricing disclosure: Does not publish fee figures on its public website as of 2026-07-16; the pricing page shows three tiers (Base, Pro, Enterprise) each with a 'Get a quote' button and no stated prices (dataguard.com, checked 16 July 2026)
  • Team credentials: About page names co-founders Thomas Regier and Kivanç Semen and the executive team, but does not publish named practitioners with IAPP or legal privacy credentials as of 2026-07-16 (dataguard.com, checked 16 July 2026)
  • PI insurance / liability: Does not publish professional-indemnity cover or engagement liability terms on the public pages checked (pricing, about, trust centre) as of 2026-07-16 (dataguard.com, checked 16 July 2026)
  • Independent accreditation: Trust centre lists an ISO 27001 Statement of Applicability available by email request, but does not display a certificate, issuing body or other attestations openly as of 2026-07-16 (trust.dataguard.com, checked 16 July 2026)
  • Named client outcomes: Publishes named customer success stories, e.g. UK rail-industry SaaS firm Mistral Data achieving ISO 27001:2022 certification in 10 months with DataGuard (dataguard.com, checked 16 July 2026)
  • AI-use disclosure: Markets 'AI-Powered Automation' as a platform feature, but its UK privacy policy (as of April 2026) contains no statement on how the platform's AI processes customer data; the only AI tool disclosed in the policy's third-party list is Ashby's 'Interview AI Powered Notetaker and Transcription' for recruitment, processed in EU/UK/US (dataguard.com, checked 16 July 2026)
  • EU AI Act offering: Offers an EU AI Act compliance framework within its platform, described as 'expert-driven solutions' to reduce risk and streamline regulatory workflows; claims are self-declared with no ISO 42001 reference on the page (dataguard.com, checked 16 July 2026)
  • Trustpilot: TrustScore 3.2 from 95 reviews (72% 5-star, 10% 1-star; 9 reviews in the last 12 months) on a profile claimed in February 2022; Trustpilot flags 'no recent history of asking for reviews' and 'hasn't replied to negative reviews' (Trustpilot, checked 16 July 2026)

ISO 27001 Statement of Applicability available on request via its trust centre (trust.dataguard.com, 2026-07-16)

First DPO or AI policySeeking ISO 42001 certificationExposed to the EU AI Act

Where this firm appears

If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.

This is an independent editorial guide, not legal advice.