preeco | information security

Every ISMS building block interlocks: assets, risks, TOMs, audits, and training are directly linked – no spreadsheet chaos, no media breaks.

BSI IT-Grundschutz, CISIS12, and VdA ISA are ready to use as predefined, instantly deployable audit catalogs – no assembly and no lead time. ISO 27001 conformity is steered via requirement catalogs with a heatmap cockpit, maturity level and Statement of Applicability.

Seamless activity logs and automatic version control make every change verifiable at any time – for internal and external audits alike.

Assess risks, implement controls, conduct audits, adjust – follow-ups, recurring reports, and automatic version control keep your ISMS up to date.

Flexible risk analyses for any scenario – from protection requirement analyses to threat analyses. Free definition of events, assessment of damage and risk levels. Automatic versioning of all approved documents.

Central view of the entire system inventory with responsibilities, provider details, purpose descriptions, encryption, availability, NIS2 relevance, and vulnerabilities. Linking with TOMs, audits, and risk analyses. Automatic versioning and export for internal and external audits. The supplementary "Data Processing Systems" view optionally shows privacy-relevant systems in combination with the data protection module.

Determine protection needs for confidentiality, integrity, and availability via a damage-scenario matrix based on the maximum principle – including the cumulative effect of linked systems, manually or AI-assisted.

Automatic log of all document changes – including administrative actions on user accounts such as inviting, removing, activating and deactivating. Seamless traceability with timestamp, user, and performed action – for audits and compliance verification.

Status reports with details on all documents and automatically generated table of contents.

Every approval creates an immutable revision (as PDF/ZIP or HTML). Two revisions can be compared visually, with changes highlighted by color (additions green, removals red). Stored SHA-256 checksums make the integrity of each revision verifiable, detecting any subsequent tampering. Comparison and integrity verification are available for revisions created from the introduction of this feature onwards; older revisions cannot be compared or verified retroactively.

Create and assign tasks directly within documents. The dashboard shows all open tasks at a glance. Email notifications ensure timely action.

Multiple-choice checklists for quality assurance. Use template checklists or create your own. Results exportable as PDF or DOCX.

Central upload and structured storage of documents. Tags and nestable folders facilitate organization. Files optionally shareable via public URL.

Internal communication directly in the system. Attach files, email notifications for new messages. Complete tracking of all communication.

Create your own surveys with question types such as selection, multiple choice, text and date. Analysis and download as PDF or DOCX. Usable independently or linked to documents.

Scheduled reminders for all due tasks. Observers are automatically notified. No deadline is missed.

Central management of all contacts with structured forms. Linking with other documents, tags, and follow-ups.

Flexible tagging of all documents. Tags can be created per team and are filterable in all overviews.

Reusable text blocks in a filterable, tabular overview. Creation and maintenance controllable via user permissions. Make blocks available to specific organizations or to all organizations.

AI-assisted enrichment and revision of content in policies, TOMs and incidents. Multi-edit in overviews for efficient work. Optionally configurable via LLM provider integration – with a selection list of the models available at the provider or free entry of a model name. In addition, all AI activities are logged in a traceable protocol with function, executing person, model, status, duration, and token consumption.

Automatic translation of document content into all 25 available languages via the DeepL API. Optional add-on.

The user interface and documents are available in 25 languages – ideal for international teams and multilingual organizations. Each user selects their own interface language, independently of the language of the documents they create.

Optional confidentiality classes for documents – configurable per user group and fully disableable for individual user groups, in addition to role permissions. This protects sensitive ISMS content such as risk analyses, audit results, or incidents from unauthorized access. The display of the implementation status on documents is also enabled per user group (disabled by default). This is complemented by a multi-level permission concept with granular rights at module, document and function level.

Roughly monthly updates deliver new features, improvements, and short-notice security updates when needed – distributed automatically, without prior notice and without downtime. All hosting options are always kept up to date.

Invoke global search via the ⌘/Ctrl+K shortcut from anywhere in the application. Customize overview tables individually – column order and width are saved per view. Every document also displays its links in the Relationships tab as a graphical origin view – including counters for linked entries that are inaccessible to the user.

Information security and data protection on one shared platform with a common data basis: with both products licensed, you work with a unified data set – for example for assets and data processing systems – and switch your working environment between the information security and data protection views with a single toggle.

Manage multiple organizations or sites in one team and switch with a single click via the organization selector. On Private Cloud and On-Premises, multiple teams can be operated on one platform with physical separation.

Email signatures and sender address are customizable. In Private Cloud and On-Premises you can optionally use your own mail server.

Custom logos per organization, an adjustable font and freely configurable headers and footers for exported documents. The legal notice (imprint) of the responsible organization can be output optionally. Per document type you control whether the names and positions of the information security and data protection officers appear – company name, address, telephone and email are always fully included.

Keyboard operability, semantically structured HTML, sufficient contrast, scalable font sizes and alternative texts for graphics. Accessibility is continuously reviewed and improved. Read our accessibility statement