Back to press archive
25.09.2025 Company

Spin-off of the GRC division

Governance, risk and compliance activities are transferred to a separate group company.

Spin-off of the GRC division

Essen, September 25, 2025 – With the spin-off of DextraData GRC Technologies, DextraData GmbH strengthens its commitment in the future market of Governance, Risk & Compliance (GRC). Through this step of universal succession, DextraData underscores its strategic decision to intensify the focus and expansion of its GRC solutions. The flagship of the product portfolio is the GRASP German GRC platform, which uses AI to digitize, integrate, and make management systems operationally controllable. In combination with the integrated Financial Management module COCKPIT, risks are not only assessed as percentages but also evaluated financially.

At the helm of DextraData GRC Technologies are Marco Wehler (Chief Executive Officer) and Ali Onsori (Chief Commercial Officer). Both have deep roots at DextraData and will remain true to their tasks: Wehler is responsible for the further development of GRASP, while Onsori leads the commercial activities of the new organization. "The spin-off not only allows us to react more quickly and flexibly to the dynamic developments in the GRC market – we also aim to free GRC from its image as a bothersome obligation," explains Wehler. "With GRASP, we are an innovative market leader that combines secure GRC with modern AI. This transforms rigid requirements into a tool that makes companies more resilient, transparent, and successful." Ali Onsori adds: "All companies are struggling with scarce resources and increasing regulatory requirements. Our task is to relieve them in such a way that GRC brings real added value – for security, trust, and growth."

DextraData GRC Technologies' solutions help companies meet regulatory requirements while securing competitive advantages. Those who identify and systematically manage risks early on not only build stability but also foster trust among customers, partners, and investors. Particularly in the SME sector, clear responsibilities, smart automations, and practical guidelines help successfully master challenges such as cybersecurity, data protection, or contractual obligations from major partners.

With GRASP, DextraData GRC Technologies provides a modular platform that digitizes and integrates central management systems – from Information Security, Data Protection, Business Continuity Management, Risk Management, Financial Management, Quality Management, and Internal Audit Management. Companies can map standards such as ISO 27001, IT-Grundschutz, or NIS2 and benefit from clear roles and responsibility models for CISOs, Information Security Officers, Quality Managers, Auditors, and top management. Unlike pure documentation solutions, GRASP enables operational control, evaluation, and automation of tasks, thereby sustainably relieving all stakeholders. GRASP boasts a unique selling proposition through its integrated Financial Management module, COCKPIT. A risk calculator allows risks to be presented not only in percentages but also in concrete euro figures.

As part of DextraData GmbH, DextraData GRC Technologies stands for the values and strengths of the group: practical digitalization with substance, at the interface of technology, finance, responsibility, and trust. "The spin-off is the logical consequence of our strategic positioning in the GRC market. For our customers, this means more focus, faster innovation cycles, and an even closer integration of their requirements and expectations. With the addition of GRC Advisory, we underpin this claim with in-house expertise in consulting and certification – the completion of our service promise," explains Shayan Faghfouri, CEO and founder of DextraData GmbH.

DextraData GRC Technologies is a software company specializing in Governance, Risk, and Compliance solutions, based in Essen. With GRASP German GRC, the company develops intelligent solutions for future-proof, resilient corporate governance – transparent, auditable, and AI-supported. The goal is to think of GRC not just as a regulatory obligation, but as a strategic field of design. In doing so, DextraData combines technological innovation with a deep understanding of compliance and audit processes. As part of the DextraData Group, the company stands for practical digitalization with substance – at the interface of technology, responsibility, and trust.

Since 1995, DextraData has been a reliable partner for digital transformation. As an independent software manufacturer, DextraData develops innovative SaaS industry solutions "Made in Germany". The products are concrete answers to the current challenges of modern companies. The goal of DextraData's software solutions COCKPIT, GRASP, Dex7, and VIBS9 is to create transparency, optimize processes, and deliver crucial support and added value for personnel and business. With the slogan "Building Your Digital Tomorrow", DextraData is already working today on tomorrow's solutions at its locations in Essen (headquarters), Berlin, Hamburg, and Munich – for an inspiring digital future.