Rizzqo
Asset-first compliance execution. Every ISO 27001, NIS2 and DORA requirement on a real asset, with a named owner and evidence attached. Made in Germany, hosted in your country.
About Rizzqo
Rizzqo is a GRC platform built for companies that have to prove compliance with ISO 27001, ISO 27002, NIS2, DORA, GDPR, the EU AI Act, TISAX, the Cyber Resilience Act and similar frameworks.
Most compliance tools start from the standard and work top down: a long list of controls, a spreadsheet of yes or no answers, and a report nobody fully trusts. Rizzqo starts from the organization. You model your services, systems, suppliers, data and the people who own them. Each control becomes a concrete requirement for the asset types it applies to and is assigned automatically. The owner answers the requirement, attaches evidence and confirms it. Compliance status is calculated from these answers, not self-declared, and one piece of evidence counts for every framework that asks for it.
Gaps become risk assessments with inherent, current and residual risk, a monetary value in euros, and a documented treatment decision. Follow-up work goes to Jira as tasks. Dashboards show management where the organization stands and what is overdue. Suppliers, personal data and AI systems live in the same model, so third-party risk, GDPR records and EU AI Act obligations are handled with the same assets and owners.
Rizzqo is made in Germany by Rizzqo GmbH in Lindau and runs on-premises or in a cloud located in the customer’s own country. It includes SSO and SCIM provisioning, a full audit log and daily backups. Licensing is an annual subscription; pricing on request.