Pilot programme: 30 % off in the first year. Places limited. See the conditions

Book a first call
Complass – Navigate compliance Complass – Navigate compliance

Enterprise / Group

Enterprise: All sites, one system

Group requirements, sites and companies in one place. Jira, ServiceNow and Entra ID stay in use. Complass keeps the evidence together.

Group overview with one row per site: status light, implementation, risks, tasks and incidents, demo data
Group overview in Complass (demo data)

No more spreadsheet tours through every site

So far every site keeps its own list, and before the audit head office collects them all. In Complass everyone works in the same system. Head office sees the state without asking.

  • The group overview shows the status light, implementation, risks, tasks, incidents, suppliers and certificates per site.
  • You hand the group report to management as a PDF.
  • Reporting duties follow the company, not the plant. Registrations and reports run per legal entity.
  • Sites have their own administrators. Head office keeps the overview.
  • Your groupRequirements, overview, report
    • Company AOwn reporting duties
      • Head office
      • Plant North
    • Company BOwn reporting duties
      • Plant South
      • Sales office
One account for the whole group. Every site belongs to one company.

Set it once, prove it at every site

The circular email and the reply list can take the day off. Head office sets a requirement, and every site shows how it implements it.

  1. Publish the requirement

    With version, change note and implementation period.

  2. Implement on site

    Every site describes its implementation, with owner and own document.

  3. Justify deviations

    An approved exception sits in the exceptions register with its reason.

Matrix of group requirements: requirements in rows, sites in columns, each cell implemented, in progress or open, demo data
Requirements and sites at a glance (demo data)

For certifications across several sites you decide per catalog entry whether it applies centrally or per site. The audit program plans the sampling. If you wish, your group policy becomes a framework of its own that you work with just like ISO 27001.

Your tools stay where they are

Nobody moves. The IT team stays in its ticket system, accounts stay in the directory. Complass ties this to your obligations and records what is done.

ComplassTasks, evidence, log

  • Tickets

    Jira (Cloud and Data Center) · ServiceNow · Zammad

    Tasks become tickets, one by one or by rule. Status and comments come back, and a person confirms completion in Complass.

    About Jira
  • Accounts and access

    Microsoft Entra ID · GitHub · Microsoft 365

    Accounts from Entra groups, access reviews without spreadsheet exports, licenses reconciled.

    About Entra ID
  • Chat

    Microsoft Teams · Slack · Mattermost

    Deadlines, incidents and approvals appear where your team writes.

    About Teams
  • Inventory and scanners

    Intune · Defender · Lansweeper · Nozomi · Claroty

    Assets and vulnerabilities come from your tools. Internal systems deliver through a relay without an inbound connection.

    About automation

Your own systems? REST API and webhooks are included, described as OpenAPI. Ready-made recipes exist for n8n, Power Automate and Make.

See all integrations

Microsoft, Microsoft 365, Microsoft Entra and Microsoft Teams are trademarks of the Microsoft group of companies. Jira is a trademark of Atlassian. Slack is a trademark of Slack Technologies, LLC. ServiceNow is a registered trademark of ServiceNow, Inc. GitHub is a trademark of GitHub, Inc. No partnership, certification or endorsement by the owners exists.

Your IT security team may look closely

Before the purchase comes the questionnaire. The answers are open on our security page, and we send you the security report on request.

  • Sign-in and accounts

    MFA for everyone, passkeys and single sign-on via OpenID Connect. Joiners and leavers come from your Entra groups.

  • Rights per site

    Whoever is limited to a site sees only its data and group-wide content. You review access regularly, and the result is a sealed PDF.

  • Access by Complass

    Support sees your account only with the approval of the person concerned, for a limited time and read-only by default. Every page view is in your log.

  • Verifiable log

    The log is secured as a hash chain. You create the chain report yourself as a PDF.

  • Workspace for auditors

    External auditors work in one audit, not in your whole account. It ends with a sealed handover package.

  • Operations and backup

    Hetzner Online GmbH, data centers in Germany. Daily encrypted backup with its own key per customer.

OWASP ASVS 5.0: Level 1 fully implemented · Level 2 98 % · Level 3 88 % (self-assessment, as of 04.11.2026). Plus an automated penetration test on 24.10.2026.

All about security Request the security report Joiners and leavers: Complass for HR

From the first talk to the start

  1. Enquiry

    You name sites, companies, frameworks and tools.

  2. Demo

    We show you Complass with your example.

  3. Quote

    You receive a quote with every item. Term of one or three years, payment annual or monthly.

  4. Start

    The setup assistant guides you through the first steps. Then you connect your tools.

For your procurement: Data processing agreement, Terms, Switching and data export

Frequently asked questions

Do all sites have to start at the same time?

No. You add sites and companies when the time comes. Whatever belongs to no site applies group-wide.

How does our spreadsheet data get into Complass?

You take over assets, controls and policies by importing spreadsheets or CSV files, with a preview before saving.

Which languages does the portal have?

German and English. Everyone chooses, or your administrators set one language for all.

What does the SLA say?

Under the terms, an availability of 99.5 % on an annual average applies to all customers. Response times and service levels are agreed in your Enterprise quote.

Does Complass also run in our data center?

Available on request, at separate prices. As standard, Complass runs as a cloud service hosted in Germany.

Can we get out again?

Yes. Documents as Word, tables as spreadsheets, reports as PDF, the whole package as a ZIP with SHA-256 checksums. Switching provider follows a fixed procedure.

Show us your group

Name your sites, companies and tools. You receive a quote that fits.