Security & Compliance
Security is part of how we work – not an add-on.
Clients in Aerospace & Defense and Financial Services trust us with sensitive information. This page summarises how we handle it.
NDA-first
We sign your NDA before the first detailed conversation. A first call can stay entirely at a general level until it is in place.
Need-to-know data handling
We process only the information an engagement requires, on your systems and devices where your policies demand it, and return or delete project data at the end.
ISO 27001-aligned practices
Our internal information security practices follow the principles of ISO/IEC 27001.
Clearance readiness
For classified environments we staff experts who are ready for the security vetting your programme requires, and we respect on-site and off-site delivery rules.
EU-based delivery
Our teams work in Germany and Romania – inside the EU and under the GDPR.
Frameworks
Regulatory environments we work in.
Experience in
- ISO/IEC 27001
- DORA
- NIS2
- BaFin MaRisk / BAIT
- GDPR
- VS-NfD
- EN 9100
- ITAR / export control
This website
No trackers. No cookies.
- No analytics, advertising or tracking cookies
- No third-party scripts – fonts are self-hosted
- Encrypted connection (HTTPS) and hardened security headers
- Contact form without server storage – it opens your own mail client
Report a vulnerability
Found a security issue on this website? Please write to us. Our security.txt is published at /.well-known/security.txt. contact@consultand.eu
Your programme can't afford a learning curve.
30 minutes with a senior partner. No pitch deck – an honest view of whether and how we can help.