Rizzqo

Rizzqo is an asset-first compliance execution platform. Instead of managing compliance as a central control list, it starts from a model of your organization: critical services, information and processes, the applications, systems, infrastructure and suppliers they depend on, and the person responsible for each. Controls from ISO 27001, ISO 27002, NIS2, DORA, GDPR, EU AI Act, CRA, TISAX, ISO 21434, ISO 27017, MVSP, NIST CSF 2.0 and custom rule sets are translated into requirements per asset type. When an asset is added or classified, the requirements that apply appear on it automatically and are assigned to its owner. The owner answers, attaches evidence and confirms with a logged timestamp. Compliance status is calculated from confirmed answers, never self-declared. One requirement can satisfy controls from several frameworks, so work is done once. Open requirements are visible as gaps. Gaps become risk assessments with inherent, current and residual scoring, linked threats and vulnerabilities, monetary evaluation of exposure and treatment, and a documented treatment decision. Remediation tasks are assigned, tracked to closure and synchronized with Jira. Dashboards show ISMS teams and CISOs framework readiness, open gaps by owner and which critical business services are exposed by unfinished work. Suppliers are modeled as supporting assets with the same requirements, evidence and risk handling as internal systems. Personal data flows are visible with processing purpose and legal basis. AI systems are modeled as assets with an AI risk class. Built for ISMS managers, information security managers and CISOs in regulated mid-sized organizations. Made in Germany, deployed on-premises or in a cloud in the customer's own country. SSO and SCIM, audit log, daily backups, Jira integration. Annual subscription per organization, 30-day free trial.