Master regulations,
even without experts in‑house.
Complass is the compliance operating system for companies from small businesses to groups, with 20 frameworks in one portal. Your team implements step by step, Complass keeps deadlines, evidence and the supply chain up to date, and the work happens where your team already works: in Microsoft Teams and Jira.
Start the guided tour 7 chapters · about 11 min · no sign-up14 days free of charge, no payment details, for businesses only.
See it in action Already a customer? Sign in
What sets Complass apart
Works in your tools
Deadlines, approvals and reporting duties appear in Teams or Slack; in Teams you approve with one click in the chat.
CE cyber file per product
The CRA and the Machinery Regulation in one file per product and version: requirements, SBOM, vulnerabilities, support period.
Supply chain at the push of a button
Manufacturers release SBOM, VEX and security advisories for their products once and share them with the customers they authorise.
Alerting by SMS and voice
For a reportable incident Complass also alerts your incident team by text message and voice call, even at night, asks for an acknowledgement and escalates to the deputy. Who was reached when is recorded as evidence. Add-on.
Answer customer questionnaires in minutes
An answer library with approved answers: import your customers’ questionnaires as Excel or CSV, answers are suggested, you approve and export.
What has changed?
The rule radar watches changes to your frameworks and shows what they mean for your compliance programme.
Works with
Identities, evidence- Microsoft Teams
- Slack
- JiraCloud and Data Center
- ServiceNow
- Microsoft Entra IDIdentities, evidence
- Microsoft 365Licences
Product names and trademarks belong to their respective owners. There is no partnership, certification or endorsement by the owners. Trademark notices
They only show which tools and formats Complass exchanges data with. Active Directory, Azure, Microsoft, Microsoft 365, Microsoft Entra, Microsoft Sentinel and Microsoft Teams are trademarks of the Microsoft group of companies. Jira is a trademark of Atlassian. Slack is a trademark of Slack Technologies, LLC. ServiceNow is a registered trademark of ServiceNow, Inc. GitHub is a trademark of GitHub, Inc. Elastic is a trademark of Elasticsearch B.V. Tenable Nessus is a registered trademark of Tenable, Inc. Nmap is a registered trademark of the Nmap Project. MITRE ATT&CK® is a registered trademark of The MITRE Corporation. CSAF is a standard of OASIS Open, the logo is from OASIS. XCCDF is a format of NIST SCAP; the NIST logo only names the format and does not mean a test, validation or endorsement by NIST. Grype logo by Anchore, CC BY 4.0.
What Complass covers
One portal instead of scattered tools: risks, measures, documents, assets, suppliers, incidents and training work together, and you maintain each piece of information only once.
- Complass Core
- Compliance management
- Asset management
- Vulnerability management
- Risk management
- Incident management
- Integrations
- Supplier Management
- Business continuity (BCM)
- Training and awareness
- Privacy operations
Coming soon: AI fill-in assistant · EU GMP Annex 11 – Computerised systems · 21 CFR Part 11 – Electronic records and electronic signatures
20 frameworks in one portal:
Everyone involved, in one portal:
By your role under the law: Operators · Critical infrastructure · Manufacturers · Importers and distributors · Suppliers and service providers · Integrators and plant builders · Consultants and IT service providers
What Complass looks like
Get started without training: an assistant sets up company, frameworks and team, then Complass guides you step by step to the next open item. The portal with sample data of the fictitious machine builder Kellenbach. The screenshots show the German interface.
Security you can verify
Your compliance documentation describes where your company is vulnerable. We protect it accordingly, and we describe exactly how.
- Hosted in Germany
Operated by Hetzner Online GmbH in data centres in Germany.
- Encryption
Transmission via HTTPS only, evidence files encrypted with a separate key per customer.
- Secure sign-in
MFA for everyone, plus passkeys and single sign-on via your identity provider (OpenID Connect).
- Access only with approval
The Complass team only sees your content with your explicit, time-limited approval; every page view is logged.
OWASP ASVS 5.0: Level 1 98 % · Level 2 93 % · Level 3 85 % (self-assessment, as of 21.10.2026). One justified exception, shown openly: Details · What this means for you
Start the way that suits you
Implement it yourself
Complass explains every step in plain language, with templates and sample texts. Your team implements on its own, and your consultant or auditor works in the same portal with matching rights.
With support
You can add workshops, setup and accompanying consulting directly from Complass, or work with one of our partners.
No legal advice. Support from Complass is factual and organisational. We do not assess individual legal questions. Your contract partner is Complass GmbH i. G.
Expertise on NIS2, the CRA and more: our white papers
Costs, effort and time compared: consultant only, consultant with Complass, in-house with Complass. Go to the free compliance cost calculator
Try Complass with your own data
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.