Acquisition of Condatis completed

Essen, September 25, 2025 – Governance, Risk & Compliance (GRC) has long been more than just a legal obligation. In light of growing cyber risks, new laws, and directives, GRC is becoming a strategic issue for every company. To provide practical support to its customers, DextraData GRC Technologies GmbH has officially completed the acquisition of Condatis GmbH & Co. KG and rebranded it as DextraData GRC Advisory.

Andreas Rübsam, founder and managing director of Condatis, will remain the managing director (CEO) of DextraData GRC Advisory. He and Marco Wehler, CEO of DextraData GRC Technologies, together boast 20 years of experience in the GRC universe. "We are not anonymous managers who perform ChatGPT karaoke, but trustworthy partners who have solved our customers' challenges many times before. We listen, ask questions, and provide context," Andreas Rübsam states, articulating his mission.

Rübsam brings over ten years of practical experience as an internal and external data protection and information security officer, including in the healthcare, industry, retail, transport, public administration, and IT service sectors. He also has almost two decades of technical and leadership experience in the IT environment.

The parent company of GRC Technologies and GRC Advisory, DextraData GmbH, looks back on a 30-year history as a "Trusted Advisor." "With GRC Advisory, we want to build on this tradition," explains Marco Wehler, CEO of DextraData GRC Technologies. Wehler has been with the company for over ten years and has built the flagship product GRASP German GRC from its initial idea to its current platform. Through close collaboration with compliance and audit teams, he understands the practical stumbling blocks faced by many companies and knows how to transform them into effective solutions.

With this new consulting approach, DextraData is consciously moving away from standard packages and retainers. Customers can choose, based on a modular principle, whether they want to use ad-hoc consulting, fully outsource the role of data protection or information security officer, or exclusively use software. A decisive advantage: the consultants also work on customers' existing systems, regardless of the software in use. "We see ourselves first and foremost as partners, not as salespeople," emphasizes Rübsam. "Of course, we are pleased if someone uses our GRASP solution. But more importantly, the support must fit and be effective."

"With the new problem-solvers on board, we can optimize our apps more precisely and align them even more closely with the actual user experience," says Wehler. This strengthens DextraData's competitiveness as well as the user-friendliness of its GRC solutions.

With the renaming of Condatis to DextraData GRC Advisory, the consulting unit becomes part of the DextraData Group and underscores the strategic integration within the GRC universe. "The new brand creates a clear connection to our corporate group and makes our integrated approach even more visible," says Rübsam.

With the new consulting unit, DextraData aims to initiate a change in perspective: viewing data protection and compliance not as obstacles, but as competitive advantages. "Data protection is not a disruptive factor," says Rübsam. "If thought of correctly, it's fire prevention, not firefighting. It prevents damage, builds trust, and makes companies more resilient."

Read the press release on DextraData GRC Technologies here.

Meet us at it-sa 2025 and experience GRASP German GRC live.

DextraData GRC Technologies is a software company specializing in Governance, Risk, and Compliance solutions, headquartered in Essen. With GRASP German GRC, the company develops intelligent solutions for future-proof, resilient corporate governance – transparent, auditable, and AI-supported. The goal is to conceive GRC not merely as a regulatory obligation but as a strategic field for action. DextraData combines technological innovation with a deep understanding of compliance and audit processes. As part of the DextraData Group, the company stands for practical digitalization with substance – at the intersection of technology, responsibility, and trust.

DextraData GRC Advisory is the consulting unit of DextraData GRC Technologies GmbH, specializing in data protection, information security, and compliance. Using a flexible modular model, the company supports organizations individually, from ad-hoc consulting to outsourcing the role of a data protection or information security officer. The team brings years of practical experience and a deep understanding of requirements such as GDPR, ISO 27001, IT-Grundschutz, and NIS2. The goal is to establish GRC not as an obligation, but as added value for resilience, trust, and competitiveness.

Since 1995, DextraData has been a reliable partner for digital transformation. As an independent software manufacturer, DextraData develops innovative SaaS industry solutions "Made in Germany." The products are concrete answers to the current challenges faced by modern companies. The goal of DextraData's software solutions COCKPIT, GRASP, Dex7, and VIBS9 is to create transparency, optimize processes, and provide crucial support and added value for personnel and business. With the slogan "Building Your Digital Tomorrow," DextraData is already working on tomorrow's solutions today at its locations in Essen (headquarters), Berlin, Hamburg, and Munich, for an inspiring digital future.