# Orbiq — Trust Center Platform for B2B Companies (Full Reference)
*Last updated: September 2026*
*See also: [llms.txt](https://www.orbiqhq.com/llms.txt) for a concise overview*

> Orbiq is a Trust Center platform that turns compliance into a revenue accelerator for B2B companies. It connects internal security posture with a public-facing Trust Center so buyers can verify trust in minutes, not weeks.

---

## Company Information

**Orbiq GmbH**
Rödingsmarkt 20, 20459 Hamburg, Germany

- Website: https://www.orbiqhq.com
- Trust Center: https://trustcenter.orbiqhq.com
- Documentation: https://docs.orbiqhq.com
- Languages: English, German, French, Dutch
- EU corporate structure — no CLOUD Act exposure

---

## What Orbiq Does

Orbiq provides a branded, public-facing Trust Center under your own domain (e.g. trust.yourcompany.com) where prospects and customers can access security documentation, certifications, and compliance evidence — with tiered access controls (public, restricted, NDA-protected).

**Three product pillars:**

1. **Trust Exchange** — Public-facing trust center with AI-powered search, document watermarking, integrated NDA signing, Slack integration, and hyper customization
2. **Vendor Assurance** — AI-driven vendor questionnaires, automated evaluations, and continuous monitoring for inbound vendor risk management
3. **Regulatory Compliance** — Operational tooling for NIS2, DORA, GDPR, and Cyber Resilience Act requirements

**Key differentiators vs competitors (Vanta, Drata, SafeBase, Secureframe, Conveyor):**
- EU-first: Built for European regulatory requirements (NIS2, DORA, GDPR, ISO 27001) — not SOC 2-first
- Full brand control: Custom domain, colors, fonts, CSS — no "Powered by" watermark
- AI-native: AI search inside the Trust Center, AI-powered vendor evaluations, AI questionnaire generation
- Revenue focus: Buyer engagement analytics, deal acceleration tracking, real-time access intelligence
- Standalone architecture: Not bundled with GRC — works alongside existing ISMS
- True EU sovereignty: EU corporate structure + EU hosting + EU subprocessor chain (not just EU server location)

---

## Platform Features (Detailed)

### AI Search
Buyers use AI tools (ChatGPT, Claude, Perplexity) to research vendors. Orbiq's AI Search lets visitors ask natural-language questions inside your Trust Center and get grounded answers with source attribution. Includes an Agent Toolkit so buyers can open your docs directly in ChatGPT or Claude.

**Use cases:** Prospect researching your security posture, auditor checking compliance evidence, procurement team evaluating vendor risk

**URL:** https://www.orbiqhq.com/platform/ai-search

### Slack Ask
Compliance-aware retrieval pipeline built into Slack. Team members can ask compliance questions and get answers grounded in your Trust Center content with full access control enforcement. Built with a layered privilege model (contact claims, domain-isolated auth, tenant-scoped credentials, Slack signature verification) and retrieval-level data leak prevention. Uses EU-sovereign AI inference (Nebius/Qwen3 stack) for GDPR/NIS2/DORA compliance.

**URL:** https://www.orbiqhq.com/platform/slack-ask

### AI-Supported Questionnaires
Create tailored security questionnaires with AI assistance. Framework-aware suggestions for ISO 27001, SOC 2, and NIS2. Automated distribution with reminders, evidence attachments, and completion tracking. Reduces questionnaire creation from 2-4 hours to 15-30 minutes.

**URL:** https://www.orbiqhq.com/platform/ai-questionnaires

### AI-Powered Evaluations
An AI agent reviews every questionnaire response, checks previous submissions for consistency, weighs vendor criticality, and writes evaluation reports. Saves ~30 minutes per vendor per assessment. Includes contradiction detection, regression alerts, and improvement tracking.

**URL:** https://www.orbiqhq.com/platform/ai-evaluations

### Continuous Monitoring
Track how your entire vendor base evolves over time. Vendor-level score history, category breakdowns (access control, encryption, incident response, governance), portfolio dashboards, risk distribution by tier, and trend analysis. Supports 10 to 500+ vendors from a single view.

**URL:** https://www.orbiqhq.com/platform/continuous-monitoring

### Document Watermarking
Automatically watermarks downloaded documents with visitor name, email, company, and timestamp. Configurable placement (header, footer, diagonal, margin) with visible or subtle styling. Full accountability without friction.

**URL:** https://www.orbiqhq.com/platform/document-watermarking

### Integrated NDA Flow
Combines NDA signing and document access into a single step. Visitors sign inline with a digital signature (eIDAS/ESIGN compliant), get immediate access, and legal receives a verifiable PDF automatically. No manual NDA coordination.

**URL:** https://www.orbiqhq.com/platform/integrated-nda-flow

### Hyper Customization
Full visual control: logo, hero image, color scheme, typography, button styles, card styling, and custom CSS injection. No vendor watermark. Your Trust Center looks like your product, not a third-party tool.

**URL:** https://www.orbiqhq.com/platform/hyper-customization

---

## Trust Center Access Tiers

1. **Public Profile** — Certifications, compliance badges, security overview, high-level FAQs. Visible to everyone including search engines and AI tools.
2. **Restricted Access** — SLAs, DPAs, pentest summaries, subprocessor lists. Available to prospects with verified business email.
3. **NDA-Protected** — Architecture diagrams, detailed security controls, sensitive policies. Available to buyers who have signed an NDA.

---

## Pricing

All prices in EUR. Annual billing includes discount.

| Plan | Price | Best for |
|------|-------|----------|
| **Free** | €0/year | Individuals exploring compliance sharing. 1 user, 20 access grants/year. |
| **Team** | €85/month or €850/year | Teams serious about trust and revenue conversion. Unlimited users, unlimited access grants, custom domain, advanced branding, analytics, watermarking. |
| **Business** | €190/month or €1,900/year | Growing teams needing tailored buyer journeys. Custom tabs, page structure, multi-variants (up to 5), localization support. |
| **Enterprise** | €920/month or €9,200/year | Multi-product organizations. Unlimited Trust Center variants, integrations marketplace, SSO, SLA-backed support, dedicated success manager. |

All paid plans include a 45-minute onboarding call, priority support, and in-app support.

**URL:** https://www.orbiqhq.com/pricing

---

## Use Cases by Industry

| Industry | Key value | URL |
|----------|-----------|-----|
| **FinTech** | Accelerate enterprise deals blocked by compliance reviews. Prove PCI DSS, SOC 2, and regulatory readiness upfront. | /use-cases/fintech |
| **HealthTech** | Share HIPAA, ISO 27001, and patient data protection evidence. Reduce clinical partner onboarding time. | /use-cases/healthtech |
| **HR Tech** | Demonstrate GDPR compliance and employee data protection. Serve enterprise HR buyers who require vendor security reviews. | /use-cases/hr-tech |
| **Enterprise** | Centralize compliance across multiple products and regions. Manage vendor assurance at scale with portfolio monitoring. | /use-cases/enterprise |
| **Scale-up** | Look enterprise-ready before you are. Professional Trust Center that builds credibility with larger buyers. | /use-cases/scaleup |
| **SME** | Affordable compliance infrastructure. Win deals against larger competitors by proving trustworthiness professionally. | /use-cases/sme |
| **GovTech** | Meet public-sector procurement requirements. Demonstrate NIS2, BSI, and government framework compliance. | /use-cases/govtech |
| **SaaS** | Reduce security review friction in the sales cycle. Proactive trust sharing that accelerates pipeline velocity. | /use-cases/saas |

---

## Trust Operations

Trust Operations is the discipline Orbiq champions: making internal security posture visible and actionable for external stakeholders. It differs from traditional GRC (Governance, Risk, Compliance) by focusing on revenue impact — turning compliance from a cost center into a deal accelerator.

- **Trust Operations vs GRC**: GRC is inward-facing (internal controls); Trust Operations is outward-facing (buyer-visible proof). More at: https://www.orbiqhq.com/trust-operations/trust-operations-vs-grc
- **Vendor Assurance vs Vendor Management**: Vendor assurance focuses on continuous trust verification; vendor management is broader operational oversight. More at: https://www.orbiqhq.com/trust-operations/vendor-assurance-vs-management

---

## Key Statistics

- 67% of B2B deals are delayed by security reviews (2025)
- Companies with effective Trust Centers close deals 40% faster and achieve 23% higher win rates
- Security reviews now appear in 70%+ of enterprise deals (up from 40% five years ago)
- Average 18 days added to sales cycles by security reviews
- Trust Centers: 30-40% faster deal closure, 60% reduction in questionnaire time reported by early adopters
- AI questionnaire creation: 15-30 min vs. 2-4 hours manually
- AI-powered evaluations: ~30 min saved per vendor per assessment

---

## ROI Calculator

Typical time savings with Orbiq:
- Incidents: 8-10/year → 8-10h saved
- Vendor reviews: 8-10/quarter → 32-40h saved per quarter
- Questionnaires: 8-10/month → 96-120h saved per month
- Official requests: 1-2/year → 8-12h saved

---

## Customers

The following companies trust Orbiq to run their public Trust Center:

- [Sysarb](https://security.sysarb.app)
- [HowNow](https://hownow.trust.orbiqhq.com)
- [InReha](https://trust.inreha.net)
- [DataGuard](https://trust.dataguard.com)
- [Bont](https://trust.bontsos.com)
- [DriveLock](https://trust.drivelock.com)
- [Willo](https://trust.willo.video)
- [epilot](https://trust.epilot.cloud)
- [Freeday](https://trust.freeday.ai)
- [SecureCloud](https://trust.securecloud.de)
- [Lucca](https://trust.luccasoftware.com)
- [Topicus](https://trust.topicuszorg.nl)
- [eGecko](https://trust.egecko.de)
- [DBC1](https://trust.dbc1.com)

### In their words

> "Orbiq is the ideal Trust Center for European enterprises."
>
> — M. Hartmann, Group CISO, DriveLock

> "Orbiq helps us build and maintain trust with our customers, having a responsive team behind it providing fast, thorough support and clear guidance made all the difference."
>
> — Karan Ramsodit, Technical Security Officer, Freeday AI

> "Orbiq is the most customizable Trust Center. The flexibility makes it feel like part of our own customer experience rather than an off-the-shelf portal."
>
> — Daniel Schmitz, IT Security Manager, eGecko

---

## Content Library — Article Summaries

### Trust Center Hub (19 articles)

**What Is a Trust Center? The Complete Guide for 2026**
A trust center (UK: trust centre) is a public-facing portal where companies share security documentation, certifications, and compliance status. Learn what a trust centre is, why you need one, and how to build yours.
URL: https://www.orbiqhq.com/trust-center/what-is-a-trust-center

**How to Set Up in 30 Minutes: A Step by Step Guide**
A practical walkthrough for compliance teams to launch a fully functional Trust Center quickly, covering branding, public content, restricted documents, and knowledge base setup.
URL: https://www.orbiqhq.com/trust-center/how-to-set-up-trust-center-30-minutes

**Trust Center for Sales Teams: Answer Security Faster**
How a trust center helps sales teams answer security questions faster, share the right documents, and keep B2B deals moving.
URL: https://www.orbiqhq.com/trust-center/trust-center-for-sales-teams

**Trust Center for GRC Teams: Centralize and Speed Reviews**
How a trust center helps GRC teams centralize security documentation, reduce questionnaires, and streamline audits.
URL: https://www.orbiqhq.com/trust-center/trust-center-for-grc-teams

**Trust Center for Legal Teams: NDAs, DPAs & Subprocessors**
How a trust center helps legal teams streamline NDAs, DPAs, subprocessor change notices, and vendor due diligence — without becoming a document retrieval service.
URL: https://www.orbiqhq.com/trust-center/trust-center-for-legal-teams

**Best Trust Centers in 2026: A European Buyer's Guide**
A practical framework to evaluate trust center platforms in 2026, with a shortlist by use case and buyer expectations.
URL: https://www.orbiqhq.com/trust-center/best-trust-center-2026

**GDPR Subprocessor Change Notices: Article 28 Workflow**
How to run a GDPR Article 28 subprocessor change-notice workflow: notice periods, objection windows, subscriber alerts and EDPB Opinion 22/2024.
URL: https://www.orbiqhq.com/trust-center/gdpr-subprocessor-change-notices

**What Is a European Trust Center? Definition & 2026 Guide**
A European Trust Center is a buyer-facing security portal built on EU frameworks and data sovereignty — not a US trust center with EU hosting added on.
URL: https://www.orbiqhq.com/trust-center/european-trust-center

**The AI-Native Trust Center: How Agents Read Evidence (2026)**
An AI-native trust center serves machine-readable, agent-authenticated compliance evidence so AI agents in vendor due diligence get cited, versioned answers.
URL: https://www.orbiqhq.com/trust-center/ai-native-trust-center

**Extending Your ISMS with a Trust Center for NIS2**
Your ISMS covers internal governance. NIS2 requires external proof. A Trust Center closes the gap — incident communication, layered evidence, and audit-ready documentation on demand.
URL: https://www.orbiqhq.com/trust-center/extending-isms-nis2-trust-center

**Why US Trust Centers Don't Fit European Companies**
The trust center market was built for US enterprise sales. European companies face structurally different requirements — and the platforms they use should reflect that.
URL: https://www.orbiqhq.com/trust-center/eu-trust-center-european-companies

**Trust Center Requirements Under NIS2 and DORA**
Neither regulation mentions "trust center" by name. Both create requirements that only a structured external proof layer can fulfill.
URL: https://www.orbiqhq.com/trust-center/trust-center-requirements-nis2-dora

**How to Evaluate a Trust Center as an EU Buyer**
A structured evaluation framework for European procurement teams, CISOs, and DPOs — weighted for what actually matters under EU regulatory and procurement norms.
URL: https://www.orbiqhq.com/trust-center/how-to-evaluate-trust-center-eu-buyer

**Trust Center Best Practices: 8 Things to Do in 2026**
Eight trust center best practices that top B2B teams follow in 2026 — from tiered access and NDA automation to EU data residency and NIS2/DORA alignment.
URL: https://www.orbiqhq.com/trust-center/trust-center-best-practices

**Trust Centers: The Enterprise Sales Trend You Missed**
How smart B2B companies turn security compliance from a sales bottleneck into a competitive advantage for enterprise deals.
URL: https://www.orbiqhq.com/trust-center/trust-centers-enterprise-trend

**20+ Trust Center Examples: Real B2B Security Portals**
Explore 20+ real trust center examples from SAP, Slack, Notion, Gong, Asana and more. Learn what makes each one effective and what to borrow for your own.
URL: https://www.orbiqhq.com/trust-center/trust-center-examples

**Trust Center Software: The Ultimate Guide for 2026**
What trust center software is, the features that matter in 2026, and how to evaluate platforms for NIS2, DORA, and EU data residency requirements.
URL: https://www.orbiqhq.com/trust-center/ultimate-guide-to-trust-centers

**How to Build a Trust Center: Step-by-Step Guide (2026)**
Learn how to build a trust center from scratch in 2026. A complete step-by-step guide covering strategy, content, access controls, and EU compliance for B2B companies.
URL: https://www.orbiqhq.com/trust-center/how-to-build-a-trust-center

**Trust Center: faster security reviews**
A buyer-ready hub with the essentials: what to publish, how to stay current, and guides that go deeper.
URL: https://www.orbiqhq.com/trust-center/index

---

### EU Regulations Hub (35 articles)

**GDPR Compliance 2026: Principles, Rights & Proof**
GDPR compliance explained for 2026: the 7 principles, 6 lawful bases, data subject rights, the compliance checklist, 2025–26 fines, and UK/Norway divergence.
URL: https://www.orbiqhq.com/eu-regulations/gdpr-compliance

**NIS2 Art. 21 & 23: Reporting and Supply Chain Beyond ISMS**
NIS2 Article 21 and 23 require operational incident reporting (24h and 72h) and supply chain risk management. An ISMS helps governance, but not day to day execution.
URL: https://www.orbiqhq.com/eu-regulations/incident-reporting-supply-chain-nis2-articles-21-23

**NIS2 Compliance: How to Achieve and Maintain It (2026)**
A practical guide to NIS2 compliance — step-by-step requirements, gap analysis, implementation roadmap, and tools you need. Learn how to achieve and maintain NIS2 compliance for your organisation.
URL: https://www.orbiqhq.com/eu-regulations/nis2-compliance

**GDPR Compliance for B2B SaaS: Articles 28–34 Explained**
A B2B SaaS reference to GDPR Articles 28, 32, 33 & 34 — DPAs, security of processing, and breach notification — with a compliance checklist and links to each deep-dive.
URL: https://www.orbiqhq.com/eu-regulations/gdpr-article-28-32-33-34

**What Is NIS2? The Complete Guide to the EU NIS2 Directive (2026)**
What is NIS2? The EU NIS2 Directive (2022/2555) requires organisations in 18 critical sectors to implement cybersecurity measures, report incidents, and manage supply chain security. Complete guide covering requirements, penalties, timeline, and how to comply.
URL: https://www.orbiqhq.com/eu-regulations/what-is-nis2

**Subprocessor Management Under GDPR Art. 28**
What do controllers, DPOs, and procurement teams actually expect from your subprocessor management? A practical guide beyond GDPR Article 28 minimum compliance — covering sub-processor lists, change notifications, data flow transparency, and ongoing due diligence.
URL: https://www.orbiqhq.com/eu-regulations/subprocessor-management-gdpr-article-28

**Vendor Assurance Under NIS2: What Article 21 Requires**
NIS2 Article 21(2)(d) requires continuous supply chain security. Point-in-time vendor assessments are no longer sufficient. Learn what the directive expects and how to meet it operationally.
URL: https://www.orbiqhq.com/eu-regulations/vendor-assurance-nis2

**DORA Compliance Guide 2026: Requirements & Deadlines**
DORA compliance in 2026: ICT risk management, incident reporting, resilience testing & Register of Information deadlines. See the requirements checklist.
URL: https://www.orbiqhq.com/eu-regulations/dora-compliance

**DORA Art. 19, 28 & 30: When an ISMS Is No Longer Enough**
DORA requires operational client communication during incidents, an up-to-date ICT provider register, and continuous monitoring. An ISMS alone cannot deliver this.
URL: https://www.orbiqhq.com/eu-regulations/incident-reporting-provider-monitoring-dora-article-19-28-30

**Cyber Resilience Act (CRA): 2026 Compliance Guide**
The EU Cyber Resilience Act explained: mandatory requirements for products with digital elements, CE marking, SBOM duties and the September 2026 deadline.
URL: https://www.orbiqhq.com/eu-regulations/cyber-resilience-act

**GDPR Article 33: 72-Hour Breach Notification Rule (2026)**
GDPR Article 33: when the 72-hour breach clock starts, exactly what to report, the fines for missing it, how to prove compliance, and the UK & Norway position.
URL: https://www.orbiqhq.com/eu-regulations/gdpr-article-33

**Cyber Resilience Act Art. 13 & 14: Why an ISMS Isn't Enough**
The CRA requires Security by Design, vulnerability reporting within 24 hours, SBOMs, and CE marking. An ISMS supports governance, but not product-level compliance.
URL: https://www.orbiqhq.com/eu-regulations/cyber-resilience-act-article-13-14

**GDPR Art. 34: Communicating a Breach to Data Subjects (2026)**
GDPR Article 34: when you must tell individuals about a breach, the high-risk threshold, the three exceptions that get you out of it, and how to prove it.
URL: https://www.orbiqhq.com/eu-regulations/gdpr-article-34

**EU AI Act Compliance: Complete Guide for 2026**
EU AI Act compliance explained: prohibited AI, high-risk Annex III duties, GPAI obligations, the August 2026 deadline and penalties up to €35M.
URL: https://www.orbiqhq.com/eu-regulations/eu-ai-act-compliance

**GDPR Article 32: Security of Processing Requirements (2026)**
GDPR Article 32 explained: the technical and organisational measures required, whether encryption is mandatory, the risk-based test, fines, and how to prove it.
URL: https://www.orbiqhq.com/eu-regulations/gdpr-article-32

**NIS2 Supply Chain Security: Requirements and Gaps (2026)**
NIS2 supply chain security requirements under Article 21(2)(d) demand continuous vendor oversight — not annual questionnaires. Learn what's required, where your ISMS falls short, and how to build the operational layer you need.
URL: https://www.orbiqhq.com/eu-regulations/nis2-supply-chain-security

**NIS2 Requirements: Complete Guide to What You Must Do (2026)**
All NIS2 requirements in one place — the 10 Article 21 risk management measures, incident reporting timelines, management liability, registration obligations, and 2026 enforcement updates.
URL: https://www.orbiqhq.com/eu-regulations/nis2-requirements

**NIS2 Incident Reporting: Meeting the 24-Hour Deadline (2026)**
NIS2 incident reporting requires a 24-hour early warning, 72-hour notification, and one-month final report. Learn what qualifies as a significant incident, what each report must contain, and how to build the operational capability to report under pressure.
URL: https://www.orbiqhq.com/eu-regulations/nis2-incident-reporting-24-hour-deadline

**GDPR Article 28: DPA Requirements & Processor Duties (2026)**
GDPR Article 28 explained: the mandatory DPA clauses, controller due-diligence duties, sub-processor authorisation, EDPB Opinion 22/2024, and how to prove it.
URL: https://www.orbiqhq.com/eu-regulations/gdpr-article-28

**You're NIS2-Affected — Now What? The Gaps Beyond ISMS**
You've checked whether your organization falls under NIS2. The answer is yes. You have an ISMS. And now you're discovering: between what your ISMS covers and what NIS2 operationally requires, there's a gap. This article shows where it lies – and how to close it.
URL: https://www.orbiqhq.com/eu-regulations/nis2-affected-operational-gaps-isms

**NIS2 Compliance Checklist: Complete Article 21 Requirements (2026)**
The complete NIS2 compliance checklist covering all ten Article 21 risk management measures. Assess your readiness, identify gaps between your ISMS and NIS2 requirements, and prioritise your compliance roadmap.
URL: https://www.orbiqhq.com/eu-regulations/nis2-compliance-checklist-article-21

**Incident Response Plan vs. Management System Under NIS2**
Every ISMS has an incident response plan. NIS2 requires an incident management system. The difference isn't semantic – it's operational. What an IMS must concretely deliver, which components it needs, and how to make the transition from plan to system.
URL: https://www.orbiqhq.com/eu-regulations/nis2-incident-response-plan-vs-management-system

**NIS2 Audit Readiness: From Documentation to Evidence**
NIS2 gives supervisory authorities the right to request evidence at any time. Not at your next audit. Not with advance notice. Any time. What this means for your evidence management – and why most organizations aren't prepared for it.
URL: https://www.orbiqhq.com/eu-regulations/nis2-audit-readiness-continuous-evidence

**ISO 27001 Is Not NIS2 Compliance: What's Actually Missing**
ISO 27001 provides the governance foundation for NIS2 – but not the operational execution. What's missing between ISMS documentation and actual NIS2 compliance, and why that's been a concrete problem since December 6, 2025.
URL: https://www.orbiqhq.com/eu-regulations/iso27001-not-nis2-compliance

**NIS2 Third-Party Risk Docs: What Auditors Want to See**
The specific evidence and documentation artifacts auditors check during NIS2 supply chain security assessments. Supplier registers, risk classifications, incident communication records, and how a trust center produces audit-ready third-party risk documentation as a natural byproduct.
URL: https://www.orbiqhq.com/eu-regulations/nis2-third-party-risk-documentation-audit-evidence

**NIS2 Directive (2026): Requirements, Deadlines & Scope**
NIS2 Directive (EU 2022/2555): who's in scope (sectors + size thresholds), Article 21 security measures, 24-hour incident reporting, and how to comply.
URL: https://www.orbiqhq.com/eu-regulations/nis2-directive

**DORA vs NIS2: Key Differences and Overlaps Explained**
DORA and NIS2 compared: scope, legal form, incident reporting timelines, penalties, and how lex specialis resolves the overlap between them.
URL: https://www.orbiqhq.com/eu-regulations/dora-vs-nis2

**EU Compliance Software: Complete Buyer's Guide (2026)**
How to choose EU compliance software in 2026. Covers NIS2, DORA, GDPR, and CRA requirements, key features to evaluate, EU data residency risks, and how Orbiq compares.
URL: https://www.orbiqhq.com/eu-regulations/eu-compliance-software

**TISAX Compliance: Complete Guide for Automotive Suppliers (2026)**
Complete guide to TISAX compliance in 2026 — assessment levels AL1/AL2/AL3, VDA ISA 6.0, ENX portal, costs, timeline, ISO 27001 overlap, and step-by-step process for automotive suppliers.
URL: https://www.orbiqhq.com/eu-regulations/tisax-compliance

**BSI IT-Grundschutz 2026: Grundschutz++ & Certification**
BSI IT-Grundschutz explained: 111 building blocks, BSI Standards 200-1 to 200-4, the Grundschutz++ reform, certification, NIS2 link and costs.
URL: https://www.orbiqhq.com/eu-regulations/bsi-it-grundschutz

**EU Pay Transparency Directive: Complete Guide (2026)**
The EU Pay Transparency Directive must be transposed by 7 June 2026. What it requires, who it affects, key deadlines, and how it compares to UK and Norwegian equivalents.
URL: https://www.orbiqhq.com/eu-regulations/eu-pay-transparency-directive

**Compliance Software for Germany: Buyer's Guide 2026**
Comparing the best compliance software for German companies in 2026. Covers ISMS, GRC, NIS2, DSGVO/GDPR, BSI IT-Grundschutz, and EU data residency requirements.
URL: https://www.orbiqhq.com/eu-regulations/compliance-software-comparison

**Gender Pay Gap Reporting 2026: UK, EU & Norway Compared**
Gender pay gap reporting in 2026: UK Equality Act 250+ employee duty, EU Pay Transparency Directive thresholds, Norway ARP, statistics, fines, and a compliance checklist.
URL: https://www.orbiqhq.com/eu-regulations/gender-pay-gap-reporting

**Pay Equity Software: Buyer's Guide for EU Compliance (2026)**
Compare the best pay equity software for EU Pay Transparency Directive compliance in 2026 — features, pricing, and how to meet the 7 June 2026 deadline.
URL: https://www.orbiqhq.com/eu-regulations/pay-equity-software

**NIS2: Internal Proof vs External Proof**
Most organizations focus on internal controls. NIS2 raises the bar by expecting evidence for both your own security posture and the ecosystem you operate in.
URL: https://www.orbiqhq.com/eu-regulations/nis2-internal-proof-vs-external-proof

---

### Compliance Automation Hub (26 articles)

**Automated Compliance Software Guide 2026**
Compare automated compliance software for EU teams, including GRC differences, NIS2/DORA readiness, data residency, pricing, and buying criteria.
URL: https://www.orbiqhq.com/compliance-automation/automated-compliance-software

**Regulatory Compliance Automation: NIS2, DORA and CRA**
Regulatory compliance automation helps teams operationalise NIS2, DORA, and Cyber Resilience Act requirements with continuous evidence collection, control mapping, and repeatable workflows.
URL: https://www.orbiqhq.com/compliance-automation/regulatory-compliance-automation

**Compliance Automation Tools: Buyer's Guide for 2026**
Discover the five categories of compliance automation tools, what each one does, and how to build the right toolstack for your regulatory requirements in 2026.
URL: https://www.orbiqhq.com/compliance-automation/compliance-automation-tools

**Compliance Management Software for Europe: 2026 Guide**
How to choose compliance management software for European requirements: NIS2, DORA, GDPR, ISO 27001, ISO 42001, TISAX, EU data residency, and audit-ready evidence.
URL: https://www.orbiqhq.com/compliance-automation/compliance-management-software

**Continuous Compliance: Beyond Point-in-Time Audits**
Continuous compliance automation replaces annual audit cycles with real-time control monitoring. Learn how it works, why it matters for NIS2 and DORA, and how to get started in 2026.
URL: https://www.orbiqhq.com/compliance-automation/continuous-compliance-automation

**GRC Software Buyer's Guide 2026: Choosing a Platform**
How to evaluate and buy GRC software in 2026. Covers buying criteria, platform tiers, EU compliance requirements, pricing benchmarks, and common mistakes to avoid.
URL: https://www.orbiqhq.com/compliance-automation/grc-software-buyers-guide

**Risk Management Frameworks: 7 Compared (2026 Guide)**
Compare the 7 major risk management frameworks — ISO 31000, NIST RMF, COSO ERM, COBIT 2019, FAIR, ISO 27005, and ENISA — and choose the right one for NIS2, DORA, and ISO 27001.
URL: https://www.orbiqhq.com/compliance-automation/risk-management-frameworks

**Security Compliance Automation: Evidence and Controls**
Security compliance automation replaces manual evidence collection with continuous control monitoring. Learn how it works, why it matters for NIS2 and DORA, and how to get started.
URL: https://www.orbiqhq.com/compliance-automation/security-compliance-automation

**Security Questionnaire Guide: Respond and Automate in 2026**
The complete guide to security questionnaires — formats (SIG, CAIQ, VSA), response strategies, AI automation, and how a Trust Center reduces inbound volume by 40–70%.
URL: https://www.orbiqhq.com/compliance-automation/security-questionnaire-guide

**Security Questionnaire Response Automation: How It Works**
Learn how to automate security questionnaire responses — cut completion time by 80%, build an AI-ready knowledge base, and stay compliant with NIS2 and DORA supply chain requirements.
URL: https://www.orbiqhq.com/compliance-automation/security-questionnaire-response-automation

**What Is an ISMS? The Definitive Guide (2026)**
Complete guide to ISMS: definition, how it works, ISO 27001 requirements, 8-step implementation, cost breakdown, and why 77,000 people search for it monthly.
URL: https://www.orbiqhq.com/compliance-automation/what-is-isms

**9 Best ISO 27001 Software Tools Compared (2026)**
Compare the 9 best ISO 27001 software platforms for 2026: Annex A 93-control coverage, Statement of Applicability, audit readiness, EU hosting, pricing.
URL: https://www.orbiqhq.com/compliance-automation/iso-27001-software

**10 Best ISMS Software Tools & Platforms (2026)**
Compare the 10 best ISMS software tools and platforms for 2026: ISO 27001 support, pricing, EU data residency, and pros & cons. Pick your ISMS tool fast.
URL: https://www.orbiqhq.com/compliance-automation/best-isms-software

**7 Best NIS2 Compliance Software & Platforms 2026 (EU Guide)**
Compare the 7 best NIS2 compliance software platforms of 2026 on Article 21 coverage, 24-hour reporting, EU data residency and pricing. Find your fit.
URL: https://www.orbiqhq.com/compliance-automation/nis2-software

**What Is ISO 27001? The Complete Guide for 2026**
ISO 27001 is the international standard for information security management. What it covers, how it works, and how to get started — 96,000+ orgs certified.
URL: https://www.orbiqhq.com/compliance-automation/what-is-iso-27001

**ISO 27001 for SaaS: The 2026 Practical Guide**
ISO 27001 certification for SaaS companies — scope, cloud-specific controls, timeline, costs, and how to use it as a sales accelerator. Covers NIS2 and EU market requirements.
URL: https://www.orbiqhq.com/compliance-automation/iso-27001-for-saas

**Compliance Platform for Startups**
A practical guide for startup founders choosing compliance software, ISO 27001 support, trust centers, pricing and EU requirements.
URL: https://www.orbiqhq.com/compliance-automation/compliance-platform-for-startups

**How to Get ISO 27001 Certified: A Practical 6-Step Guide**
A practical guide to getting ISO 27001 certified — from choosing a certification body to passing your Stage 2 audit. Covers costs, timelines, and what auditors actually check.
URL: https://www.orbiqhq.com/compliance-automation/how-to-get-iso-27001-certified

**Security Questionnaire Software: Buyer's Guide 2026**
Compare security questionnaire software in 2026: pricing, AI auto-fill, EU compliance support, and which tool fits your vendor risk programme.
URL: https://www.orbiqhq.com/compliance-automation/security-questionnaire-software

**Best GRC Software 2026: Top Platforms & Legacy Alternatives**
Compare the best GRC software for 2026: top platforms, pricing, and alternatives to legacy enterprise GRC suites. EU-ready for NIS2 & DORA. See the picks.
URL: https://www.orbiqhq.com/compliance-automation/best-grc-software

**Compliance Automation: The Definitive Guide for 2026**
Learn how compliance automation eliminates manual evidence collection, reduces audit prep by 80%, and keeps your company continuously compliant. Complete guide with tools, frameworks, and ROI analysis.
URL: https://www.orbiqhq.com/compliance-automation/compliance-automation

**ISO 27001 Certification: The Complete Guide for 2026**
Everything you need to know about ISO 27001 certification — requirements, cost, timeline, audit process, and how to maintain compliance. From initial gap analysis to successful certification.
URL: https://www.orbiqhq.com/compliance-automation/iso-27001-certification

**SMSI Guide: What It Is and How to Implement It in 2026**
SMSI (Système de Management de la Sécurité de l'Information) explained: the French term for ISMS, ISO 27001 requirements, step-by-step implementation, costs, and French market context.
URL: https://www.orbiqhq.com/compliance-automation/smsi-guide

**ISO 27001 Checklist: 14-Step Implementation Roadmap for 2026**
A practical ISO 27001 checklist covering all 14 implementation steps — from gap analysis to certification audit. Includes Annex A controls, documentation requirements, and common failure points.
URL: https://www.orbiqhq.com/compliance-automation/iso-27001-checklist

**10 Best Compliance Automation Software Tools (2026)**
Compare the 10 best compliance automation software tools for 2026: pricing, pros & cons, and EU (NIS2/DORA) support. Find the right platform fast.
URL: https://www.orbiqhq.com/compliance-automation/compliance-automation-software

**ISO 27001 Certification Cost: Complete Breakdown for 2026**
How much does ISO 27001 certification cost? Detailed breakdown of audit fees, internal resource costs, consultant fees, and ISMS software — for companies of all sizes.
URL: https://www.orbiqhq.com/compliance-automation/iso-27001-certification-cost

---

### Comparisons Hub (28 articles)

**Conveyor Alternative: Why EU Companies Evaluate Options**
Conveyor is the sharpest AI-native US trust center. But its AI agent and hosting are US-bound. Here's where the fit breaks down for EU buyers who need a sovereign, AI-readable proof layer.
URL: https://www.orbiqhq.com/comparisons/conveyor-alternative

**Trust Center vs. ISMS vs. Deal Room**
Trust Centers, ISMS, and Deal Rooms serve different purposes. Learn how they compare, when to use each, and how they work together for modern B2B security and compliance.
URL: https://www.orbiqhq.com/comparisons/trust-center-vs-isms-vs-deal-room

**Trust Center Data Sovereignty: EU Hosting vs. EU Sovereignty**
Your trust center contains penetration test reports, security architecture details, and compliance evidence. "EU hosted" doesn't mean what you think it means.
URL: https://www.orbiqhq.com/comparisons/trust-center-data-sovereignty-eu-hosting-vs-sovereignty

**Trust Center vs. GRC Tool: What EU Buyers Need**
You probably already have a GRC tool. The question isn't whether you need one — it's whether you also need a trust center, and whether they should come from the same vendor.
URL: https://www.orbiqhq.com/comparisons/trust-center-vs-grc-tool-european-buyers

**Vanta vs Drata: Honest Comparison for European Buyers (2026)**
Vanta vs Drata compared for European companies. Architecture, EU data hosting, NIS2/DORA support, trust center features, pricing models, and where Orbiq fits as the EU-native alternative.
URL: https://www.orbiqhq.com/comparisons/vanta-vs-drata

**7 Best Vanta Alternatives & Competitors in 2026 (Compared)**
Compare the 7 best Vanta alternatives and competitors in 2026 on pricing, EU data residency and framework coverage — cheaper options included. Find your swap.
URL: https://www.orbiqhq.com/comparisons/vanta-alternatives

**Drata Pricing 2026: Plans, Real Costs & Hidden Details**
Drata pricing runs $7,500 to $100,000+/year; the median Vendr contract is ~$24,600. Full tier breakdown, hidden costs up to 35%, negotiation tips, the SafeBase rebrand, and EU data residency.
URL: https://www.orbiqhq.com/comparisons/drata-pricing

**Vanta vs Secureframe: Honest Comparison for European Buyers (2026)**
Vanta vs Secureframe compared for European companies. Integrations, EU data hosting, NIS2/DORA support, pricing models, renewal traps, and where Orbiq fits as the EU-native alternative.
URL: https://www.orbiqhq.com/comparisons/vanta-vs-secureframe

**Drata Alternatives: The Best Option for EU Companies (2026)**
Looking for Drata alternatives? Compare the top Drata alternatives — Orbiq, SafeBase, Vanta, Secureframe, Conveyor, and Wolfia — for EU trust centers, with pricing, hosting, and framework coverage.
URL: https://www.orbiqhq.com/comparisons/drata-trust-center-alternative

**Secureframe Pricing 2026: Plans, Real Costs & Details**
Secureframe pricing ranges from $7,500 to $100,000+/year. Median contract is $20,000/year. Full breakdown with tier analysis, hidden costs, negotiation tips, and EU considerations.
URL: https://www.orbiqhq.com/comparisons/secureframe-pricing

**Drata vs Secureframe: Honest Comparison for European Buyers (2026)**
Drata vs Secureframe compared for European companies. SafeBase acquisition impact, EU data hosting, NIS2/DORA support, pricing, automation depth, and where Orbiq fits as the EU-native alternative.
URL: https://www.orbiqhq.com/comparisons/drata-vs-secureframe

**Sprinto Pricing 2026: Plans and Real Costs**
Sprinto pricing runs $6,000-$25,000+/year, median $15,000. Tier analysis, hidden costs, negotiation tips and what EU buyers should watch for.
URL: https://www.orbiqhq.com/comparisons/sprinto-pricing

**Best Vanta Alternative for EU Companies (2026)**
Vanta is the most widely adopted compliance platform globally. But for EU companies that already have an ISMS and need a standalone trust center under EU jurisdiction, the fit breaks down. Here's why.
URL: https://www.orbiqhq.com/comparisons/vanta-trust-center-alternative

**SafeBase Pricing 2026: Plans, Costs & the Drata Effect**
SafeBase pricing is fully custom. Acquired by Drata for $250M in 2025, it now sits inside Drata's GRC ecosystem. Breakdown of all plans, EU data sovereignty issues, and transparent alternatives.
URL: https://www.orbiqhq.com/comparisons/safebase-pricing

**Thoropass Pricing 2026: Plans and Real Costs**
Thoropass pricing benchmarks, AWS Marketplace entry points, hidden costs, negotiation tips, audit bundling, and EU compliance questions.
URL: https://www.orbiqhq.com/comparisons/thoropass-pricing

**Best Secureframe Alternative for EU Companies (2026)**
Secureframe is a strong compliance automation platform with 300+ integrations and 35+ frameworks. But for EU companies that need a standalone trust center under EU jurisdiction, here's where the fit breaks down.
URL: https://www.orbiqhq.com/comparisons/secureframe-alternative

**Vanta Pricing 2026: Plans, Hidden Costs & Alternatives**
Vanta pricing ranges from $10,000 to $80,000/year. Core plan starts ~$10K, Trust Center adds $6K, median contract is $20K. Full breakdown with hidden costs and negotiation tips.
URL: https://www.orbiqhq.com/comparisons/vanta-pricing

**UpGuard Pricing 2026: Plans, Real Costs & Hidden Details**
UpGuard pricing starts at $1,599/month billed annually for Starter Vendor Risk. Full breakdown of tiers, costs, negotiation tips, and EU compliance considerations.
URL: https://www.orbiqhq.com/comparisons/upguard-pricing

**SafeBase Alternative: Best Options for EU Companies (2026)**
SafeBase is now Drata's Trust Center. What that means for EU buyers — and what to look for in a trust center built for Europe. NIS2, DORA, GDPR-native options.
URL: https://www.orbiqhq.com/comparisons/safebase-alternative

**Wolfia Alternative: Best Options for EU Companies (2026)**
Looking for a Wolfia alternative? Compare top options for European companies — AI questionnaire automation, EU data residency, NIS2/DORA support, and where Orbiq fits.
URL: https://www.orbiqhq.com/comparisons/wolfia-alternative

**Compliance Automation vs GRC**
Compare compliance automation and GRC software, when each fits, and why EU companies should separate audit evidence from risk governance.
URL: https://www.orbiqhq.com/comparisons/compliance-automation-vs-grc

**Best Thoropass Alternative for European Companies (2026)**
Looking for a Thoropass alternative? Compare top options for EU companies — pricing, NIS2/DORA support, EU data residency, audit bundling, and where Orbiq fits.
URL: https://www.orbiqhq.com/comparisons/thoropass-alternative

**SafeBase vs Vanta: Honest Comparison for European Buyers (2026)**
SafeBase vs Vanta compared for European companies. Trust center architecture, EU data residency, NIS2/DORA support, pricing, G2 ratings, and where Orbiq fits as the EU-native option.
URL: https://www.orbiqhq.com/comparisons/safebase-vs-vanta

**Best UpGuard Alternative for EU Companies (2026)**
Looking for an UpGuard alternative? Compare the top options for EU companies — covering NIS2/DORA support, EU data residency, trust center needs, and where Orbiq fits.
URL: https://www.orbiqhq.com/comparisons/upguard-alternative

**ISMS vs Trust Center: Two Worlds, One Company**
ISMS and Trust Center serve completely different purposes. ISMS is your GRC governance system; Trust Center is your TrustOps communication hub. European regulations demand both. Here's why.
URL: https://www.orbiqhq.com/comparisons/isms-vs-trust-center

**Best Sprinto Alternative for European Companies (2026)**
Looking for a Sprinto alternative? Compare the top options for EU companies — covering pricing, NIS2/DORA support, EU data residency, and where Orbiq fits.
URL: https://www.orbiqhq.com/comparisons/sprinto-alternative

**Sprinto vs Drata: Honest Comparison for European Buyers (2026)**
Sprinto vs Drata for European buyers: pricing, G2 ratings, NIS2/DORA support, EU data residency, and where Orbiq fits as the EU-native option.
URL: https://www.orbiqhq.com/comparisons/sprinto-vs-drata

**Sprinto vs Vanta: Honest Comparison for European Buyers (2026)**
Sprinto vs Vanta for European buyers: pricing, G2 signals, NIS2/DORA support, EU data residency, and where Orbiq fits as the EU-first option.
URL: https://www.orbiqhq.com/comparisons/sprinto-vs-vanta

---

### Vendor Risk Management Hub (8 articles)

**Third-Party Risk Management Software: Buyer's Guide 2026**
Compare the best third-party risk management software in 2026 — TPRM platforms, key features, pricing, and how to choose the right tool for NIS2 and DORA compliance.
URL: https://www.orbiqhq.com/vendor-risk-management/third-party-risk-management-software

**Third-Party Risk Assessment: Guide + Free Template (2026)**
Learn how to conduct a third-party vendor risk assessment step by step. Covers what to assess, how to score risk, NIS2 and DORA requirements, and a free assessment template.
URL: https://www.orbiqhq.com/vendor-risk-management/third-party-vendor-risk-assessment

**Vendor Risk Assessment Software: Buyer's Guide 2026**
Compare the best vendor risk assessment software in 2026 — key features, pricing, NIS2/DORA requirements, and how to choose the right platform for your organisation.
URL: https://www.orbiqhq.com/vendor-risk-management/vendor-risk-assessment-software

**How to Build a Vendor Risk Management Program (2026)**
Learn how to build a vendor risk management program from scratch. Covers governance, vendor inventory, tiering, due diligence, contracts, monitoring, and EU regulatory requirements.
URL: https://www.orbiqhq.com/vendor-risk-management/vendor-risk-management-program

**Vendor Risk Assessment Template: Free Checklist for 2026**
Free vendor risk assessment template: a scored XLSX checklist covering security, compliance, data handling and business continuity for ISO 27001, NIS2 and DORA.
URL: https://www.orbiqhq.com/vendor-risk-management/vendor-risk-assessment-template

**The Vendor Risk Management Process: 6 Steps for 2026**
A practical guide to the vendor risk management process — from vendor identification and risk tiering through due diligence, continuous monitoring, and offboarding. With NIS2 and DORA alignment.
URL: https://www.orbiqhq.com/vendor-risk-management/vendor-risk-management-process

**Vendor Risk Management Tools — 2026 Comparison Guide**
Compare the top vendor risk management tools in 2026 — from security ratings platforms to full TPRM suites. Includes pricing, key features, and how to choose the right VRM tool for EU compliance.
URL: https://www.orbiqhq.com/vendor-risk-management/vendor-risk-management-tools

**Vendor Risk Management: The Definitive Guide for 2026**
Everything you need to build a vendor risk management programme — from VRM fundamentals and EU regulatory requirements to tool comparisons and maturity models. Complete 2026 guide.
URL: https://www.orbiqhq.com/vendor-risk-management/vendor-risk-management

---

### Glossary (50 entries)

**Risk Management Frameworks: Complete Guide for 2026**
Compare ISO 31000, NIST RMF, COSO ERM, COBIT 2019, ISO 27005, and FAIR — the major risk management frameworks for NIS2, DORA, and ISO 27001 compliance in 2026.
URL: https://www.orbiqhq.com/glossary/risk-management-frameworks

**Compliance Automation: How to Automate Compliance in 2026**
A practical guide to compliance automation — what it is, what it automates, how it differs from GRC tools, which frameworks it supports (ISO 27001, SOC 2, NIS2, DORA), and how to evaluate compliance automation platforms.
URL: https://www.orbiqhq.com/glossary/compliance-automation

**Third-Party Risk Management (TPRM): Definition**
A practical guide to third-party risk management — what it is, why it matters, how to build a TPRM programme, key frameworks and regulations (NIS2, DORA, ISO 27001), and how to move from manual vendor assessments to scalable trust operations.
URL: https://www.orbiqhq.com/glossary/third-party-risk-management

**Information Security Policy: What to Include**
A practical guide to information security policies — what they are, why they matter, what to include, how to write one that meets ISO 27001, NIS2, and SOC 2 requirements, and how to keep it effective beyond the initial certification.
URL: https://www.orbiqhq.com/glossary/information-security-policy

**Vendor Risk Assessment: How to Evaluate Third Parties**
A practical guide to vendor risk assessments — what they are, when to conduct them, what to evaluate, how to score vendor risk, and how to meet ISO 27001, NIS2, and DORA third-party requirements.
URL: https://www.orbiqhq.com/glossary/vendor-risk-assessment

**ISMS: What Is an Information Security Management System?**
A practical guide to Information Security Management Systems (ISMS) — what they are, how they work, what ISO 27001 requires, how to implement one, and how an ISMS relates to NIS2, DORA, and SOC 2 compliance.
URL: https://www.orbiqhq.com/glossary/isms

**SOC 2 Compliance: Who Needs It and How to Get Certified**
A practical guide to SOC 2 compliance — what it is, how it differs from ISO 27001, what the Trust Services Criteria require, how the audit process works, and what European companies need to know about SOC 2 in a NIS2 and DORA world.
URL: https://www.orbiqhq.com/glossary/soc-2-compliance

**ISO 27001 Certification: Requirements and How to Get It**
A practical guide to ISO 27001 certification — what it covers, how the audit works, what Annex A controls require, how it relates to NIS2 and DORA, and what European companies need to know about achieving and maintaining certification.
URL: https://www.orbiqhq.com/glossary/iso-27001-certification

**Security Questionnaires: How to Handle and Automate Them**
A practical guide to security questionnaires — what they are, why buyers send them, what they typically ask, how to respond efficiently, and how automation and Trust Centers are replacing the manual questionnaire process.
URL: https://www.orbiqhq.com/glossary/security-questionnaire

**Trust Center: Why You Need One and How to Build It**
A practical guide to Trust Centers — what they are, how they differ from GRC tools, what to publish, how they accelerate B2B sales, and why European companies need one for NIS2, DORA, and enterprise buyer requirements.
URL: https://www.orbiqhq.com/glossary/trust-center

**Data Sovereignty: What It Means for European Companies**
A practical guide to data sovereignty — what it is, how it differs from data residency and data localisation, why EU regulations demand it, and how European companies ensure sovereign control over their data.
URL: https://www.orbiqhq.com/glossary/data-sovereignty

**Penetration Testing: How It Works and Why You Need It**
A practical guide to penetration testing — what it is, the different types, how the process works, how often to test, what to do with results, and how pen testing fits into compliance frameworks like ISO 27001, SOC 2, NIS2, and DORA.
URL: https://www.orbiqhq.com/glossary/penetration-testing

**GDPR Compliance: Requirements and How to Achieve It**
A practical guide to GDPR compliance — what the regulation requires, how it applies to B2B SaaS companies, key obligations around data processing, data subject rights, international transfers, and how to demonstrate compliance to enterprise buyers.
URL: https://www.orbiqhq.com/glossary/gdpr-compliance

**Incident Response: How to Build a Plan That Works**
A practical guide to incident response — what it involves, how to build an incident response plan, the phases of handling security incidents, regulatory requirements under NIS2, DORA, and ISO 27001, and how to communicate incidents to customers and regulators.
URL: https://www.orbiqhq.com/glossary/incident-response

**NIS2 Compliance: Requirements, Scope and How to Prepare**
A practical guide to NIS2 compliance — what the directive requires, which organisations are affected, key obligations around risk management, incident reporting, supply chain security, and how to demonstrate compliance to regulators and buyers.
URL: https://www.orbiqhq.com/glossary/nis2-compliance

**DORA Compliance: Requirements, Scope and How to Prepare**
A practical guide to DORA compliance — what the Digital Operational Resilience Act requires, which financial entities and ICT providers are affected, key obligations around ICT risk management, incident reporting, resilience testing, and third-party risk management.
URL: https://www.orbiqhq.com/glossary/dora-compliance

**Cyber Resilience Act (CRA): Requirements and How to Prepare**
A practical guide to the EU Cyber Resilience Act — what the CRA requires for products with digital elements, who is affected, essential security requirements, conformity assessment procedures, and how software vendors can prepare.
URL: https://www.orbiqhq.com/glossary/cyber-resilience-act

**Zero Trust Architecture: Core Principles and Rollout**
A practical guide to Zero Trust architecture — what it is, how it differs from perimeter-based security, core principles like least privilege and micro-segmentation, implementation frameworks, and how B2B companies can adopt Zero Trust to meet compliance requirements.
URL: https://www.orbiqhq.com/glossary/zero-trust-architecture

**Cloud Security Posture Management (CSPM): How to Implement**
A practical guide to Cloud Security Posture Management — what CSPM is, how it detects misconfigurations, core capabilities, how it fits into cloud security architecture, and how B2B SaaS companies can use CSPM to meet compliance requirements.
URL: https://www.orbiqhq.com/glossary/cloud-security-posture-management

**Supply Chain Security: How to Manage Supplier Risk**
A practical guide to supply chain security — what it is, why supply chain attacks are increasing, key risk categories, how to assess and manage third-party risk, regulatory requirements under NIS2 and DORA, and how B2B companies can build resilient supply chains.
URL: https://www.orbiqhq.com/glossary/supply-chain-security

**Business Continuity Planning (BCP): How to Build One**
A practical guide to Business Continuity Planning — what BCP is, how it differs from disaster recovery, key components of a business continuity plan, how BCP maps to ISO 27001, NIS2, and DORA requirements, and how B2B companies can build resilience against disruptions.
URL: https://www.orbiqhq.com/glossary/business-continuity-planning

**Security Audit: Types, Process and How to Prepare**
A practical guide to security audits — what they are, types of security audits (internal, external, compliance), the audit process, how to prepare for ISO 27001, SOC 2, and NIS2 audits, and how B2B companies can use audit readiness as a competitive advantage.
URL: https://www.orbiqhq.com/glossary/security-audit

**Access Control: Models, Best Practices and Compliance**
A practical guide to access control — what it is, access control models (RBAC, ABAC, MAC, DAC), the principle of least privilege, how access control maps to ISO 27001, SOC 2, NIS2, and DORA requirements, and how B2B companies can implement effective access management.
URL: https://www.orbiqhq.com/glossary/access-control

**Security Awareness Training: How to Build a Programme**
A practical guide to security awareness training — what it is, why it matters for compliance and risk reduction, key topics to cover, how to measure effectiveness, compliance requirements under ISO 27001, SOC 2, NIS2, and DORA, and how B2B companies can build a security-conscious culture.
URL: https://www.orbiqhq.com/glossary/security-awareness-training

**Data Classification: Levels, Frameworks and Implementation**
A practical guide to data classification — what it is, classification levels, how to build a data classification scheme, regulatory requirements under ISO 27001, SOC 2, NIS2, GDPR, and DORA, and how B2B companies can use data classification to improve security and demonstrate compliance.
URL: https://www.orbiqhq.com/glossary/data-classification

**Encryption: Definition and Compliance Guide**
Learn how encryption protects data at rest, in transit, and in use. Covers AES, RSA, TLS, key management, and compliance requirements under ISO 27001, SOC 2, NIS2, DORA, and GDPR.
URL: https://www.orbiqhq.com/glossary/encryption

**Vulnerability Management: Definition and Compliance Guide**
Learn how to build a vulnerability management programme that satisfies ISO 27001, SOC 2, NIS2, and DORA. Covers scanning, prioritisation, remediation SLAs, and audit evidence.
URL: https://www.orbiqhq.com/glossary/vulnerability-management

**Endpoint Security: Definition and Compliance Guide**
Learn how to protect laptops, servers, and mobile devices with modern endpoint security. Covers EDR, XDR, MDM, hardening baselines, and compliance requirements under ISO 27001, SOC 2, NIS2, and DORA.
URL: https://www.orbiqhq.com/glossary/endpoint-security

**SIEM: The Complete Guide for Security and Compliance Teams**
Learn how to select, deploy, and operate a SIEM for threat detection, incident response, and compliance evidence. Covers log sources, detection rules, SOAR integration, and framework requirements under ISO 27001, SOC 2, NIS2, and DORA.
URL: https://www.orbiqhq.com/glossary/siem

**Identity and Access Management (IAM): Definition**
Learn how to implement identity and access management that satisfies ISO 27001, SOC 2, NIS2, and DORA. Covers SSO, MFA, RBAC, ABAC, privileged access, identity governance, and audit evidence.
URL: https://www.orbiqhq.com/glossary/identity-and-access-management

**Disaster Recovery: Definition and Compliance Guide**
Learn how to build and test disaster recovery plans that satisfy ISO 27001, SOC 2, NIS2, and DORA. Covers RPO, RTO, DR strategies, cloud DR, testing approaches, and audit evidence.
URL: https://www.orbiqhq.com/glossary/disaster-recovery

**Network Security: Definition and Compliance Guide**
Learn how to implement network security controls that satisfy ISO 27001, SOC 2, NIS2, and DORA. Covers firewalls, segmentation, IDS/IPS, VPN, DNS security, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/network-security

**DevSecOps: Definition and Compliance Guide**
Learn how to integrate security into your CI/CD pipeline and satisfy ISO 27001, SOC 2, NIS2, and DORA requirements. Covers SAST, DAST, SCA, container security, IaC scanning, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/devsecops

**API Security: Definition and Compliance Guide**
Learn how to secure APIs and satisfy ISO 27001, SOC 2, NIS2, and DORA requirements. Covers authentication, rate limiting, input validation, OWASP API Top 10, API gateways, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/api-security

**Threat Modeling: Definition and Compliance Guide**
Learn how to implement threat modeling that satisfies ISO 27001, SOC 2, NIS2, and DORA. Covers STRIDE, PASTA, attack trees, data flow diagrams, risk assessment, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/threat-modeling

**Data Privacy: Definition and Compliance Guide**
Learn how to implement data privacy controls that satisfy GDPR, ISO 27001, SOC 2, NIS2, and DORA. Covers data classification, consent management, DPIAs, data subject rights, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/data-privacy

**Security Operations Center (SOC): Definition**
Learn how to build and operate a Security Operations Center that satisfies ISO 27001, SOC 2, NIS2, and DORA requirements. Covers SOC models, SIEM integration, incident detection, threat hunting, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/security-operations-center

**Multi-Factor Authentication (MFA): Definition**
Learn how to implement multi-factor authentication that satisfies ISO 27001, SOC 2, NIS2, and DORA requirements. Covers MFA methods, FIDO2/WebAuthn, conditional access, phishing-resistant MFA, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/multi-factor-authentication

**Privileged Access Management (PAM): Definition**
Learn how to implement privileged access management that satisfies ISO 27001, SOC 2, NIS2, and DORA requirements. Covers PAM architecture, session management, just-in-time access, credential vaulting, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/privileged-access-management

**Cloud Security: Definition and Compliance Guide**
Learn how to implement cloud security controls that satisfy ISO 27001, SOC 2, NIS2, and DORA requirements. Covers shared responsibility, cloud-native security, CSPM, workload protection, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/cloud-security

**Business Impact Analysis (BIA): Definition**
Learn how to conduct a business impact analysis that satisfies ISO 27001, SOC 2, NIS2, and DORA requirements. Covers BIA methodology, RTO/RPO determination, critical process identification, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/business-impact-analysis

**Cyber Insurance: Definition and Compliance Guide**
Learn how cyber insurance works, what it covers, and how it connects to ISO 27001, SOC 2, NIS2, and DORA compliance. Covers policy types, coverage gaps, application requirements, and premium reduction strategies.
URL: https://www.orbiqhq.com/glossary/cyber-insurance

**Log Management: Definition and Compliance Guide**
Learn how to implement log management that satisfies ISO 27001, SOC 2, NIS2, and DORA requirements. Covers log collection, retention, analysis, SIEM integration, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/log-management

**Patch Management: Definition and Compliance Guide**
Learn how to implement patch management that satisfies ISO 27001, SOC 2, NIS2, and DORA requirements. Covers patching strategies, SLA timelines, vulnerability prioritisation, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/patch-management

**Ransomware Protection: Definition and Compliance Guide**
Learn how to implement ransomware protection that satisfies ISO 27001, SOC 2, NIS2, and DORA requirements. Covers prevention strategies, backup resilience, incident response, recovery planning, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/ransomware-protection

**Continuous Monitoring: Definition and Compliance Guide**
Learn how to implement continuous monitoring that satisfies ISO 27001, SOC 2, NIS2, and DORA requirements. Covers monitoring strategies, control effectiveness, automated evidence collection, and compliance reporting.
URL: https://www.orbiqhq.com/glossary/continuous-monitoring

**Change Management: Definition and Compliance Guide**
Learn how to implement change management that satisfies ISO 27001, SOC 2, NIS2, and DORA requirements. Covers change control processes, CAB reviews, risk assessment, rollback planning, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/change-management

**Role-Based Access Control (RBAC): Definition**
Learn how to implement role-based access control that satisfies ISO 27001, SOC 2, NIS2, and DORA requirements. Covers RBAC design, role hierarchy, least privilege, access reviews, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/role-based-access-control

**Data Loss Prevention (DLP): Definition and Compliance Guide**
Learn how to implement data loss prevention that satisfies ISO 27001, SOC 2, NIS2, and DORA requirements. Covers DLP strategies, data classification, policy design, monitoring channels, and compliance evidence.
URL: https://www.orbiqhq.com/glossary/data-loss-prevention

**Security Posture Management: Definition and Compliance Guide**
Learn how to implement security posture management that satisfies ISO 27001, SOC 2, NIS2, and DORA requirements. Covers posture assessment, control effectiveness, gap analysis, risk scoring, and compliance reporting.
URL: https://www.orbiqhq.com/glossary/security-posture-management

---

### Free Compliance Templates (17 templates)

**Free CRA Conformity Self-Assessment (2026) — Annex I, Excel**
Classify your product, pick the lawful Article 32 route and check every Annex I requirement before the CRA deadlines. Free XLSX, no email gate.
URL: https://www.orbiqhq.com/templates/cra-conformity-self-assessment

**Free Pay Transparency Gap Analysis Template (2026) — Excel**
Gender pay gap analysis aligned to Directive (EU) 2023/970: Article 9 metrics, category gaps, the 5% joint-assessment trigger. Free XLSX, no email gate.
URL: https://www.orbiqhq.com/templates/eu-pay-transparency-gap-analysis

**Free NIS2 Management Training Log (2026) — Article 20, Excel**
Track management-body cybersecurity training for NIS2 Art 20 audits: sessions, hours, renewal dates. Free XLSX, no email gate.
URL: https://www.orbiqhq.com/templates/nis2-management-training-log

**Free Subprocessor Register Template (2026) — GDPR, Excel**
Subprocessor list template with transfer mechanism, data categories, chain visibility and change-notice tracking columns. Free XLSX, no email gate.
URL: https://www.orbiqhq.com/templates/gdpr-subprocessor-register

**Free DORA Exit Strategy Template (2026) — Art 28(8), Word**
Article 28(8) exit strategy and per-provider exit plan: triggers, alternatives, transition, testing log. Free DOCX + PDF + MD, no email gate.
URL: https://www.orbiqhq.com/templates/dora-exit-strategy-plan

**Free DORA Register of Information Starter (2026) — Excel**
Human-readable Art 28(3) working register mapped to the ITS fields — maintain year-round, convert at reporting time. Free XLSX, PDF and MD, no email gate.
URL: https://www.orbiqhq.com/templates/dora-register-of-information-starter

**Free DPIA Template (2026) — GDPR Article 35, Word + PDF**
DPIA template with screening questions, Art 35(7) sections, likelihood×severity risk matrix, AI annex and DPO sign-off. Free DOCX, no email gate.
URL: https://www.orbiqhq.com/templates/dpia-template

**Free GDPR Breach Notification Letter Pack (2026) — Word**
Art 33 authority notification + Art 34 data-subject letter, ready to adapt inside the 72-hour window. Free DOCX pack with breach log — no email gate.
URL: https://www.orbiqhq.com/templates/gdpr-breach-notification-letter-pack

**Free GDPR RoPA Template (2026) — Article 30 Register, Excel**
Record of Processing Activities template: controller + processor sheets, lawful basis, transfers, retention columns. Free XLSX, PDF and Markdown, no email gate.
URL: https://www.orbiqhq.com/templates/gdpr-ropa-template

**Free NIS2 Incident Report Templates (2026) — 24h/72h/Final, Word**
All three NIS2 Article 23 report stages as ready-to-file forms: 24-hour early warning, 72-hour notification, one-month final report. Free DOCX pack, no email gate.
URL: https://www.orbiqhq.com/templates/nis2-incident-reporting-pack

**Free Vendor Security Questionnaire Template (2026) — Excel**
Free EU vendor security questionnaire (XLSX, PDF, MD): 67 tiered questions covering GDPR Art 28, NIS2 supply chain, DORA and data residency. No email gate.
URL: https://www.orbiqhq.com/templates/eu-vendor-security-questionnaire

**Free ISO 27001 SoA Template (2026) — All 93 Controls, Excel**
Free ISO 27001 Statement of Applicability template with all 93 Annex A controls pre-loaded (XLSX, PDF, MD): applicability, justification, status, evidence.
URL: https://www.orbiqhq.com/templates/iso-27001-statement-of-applicability-template

**CRA Vulnerability Advisory Template (Free DOCX & PDF)**
Free CRA vulnerability advisory template with CVE/EUVD fields, CVSS v4.0 scoring, subscriber notification email, and a filled sample advisory. Ungated.
URL: https://www.orbiqhq.com/templates/cra-vulnerability-advisory-template

**DORA ICT Provider Evidence Checklist: Free Template (XLSX)**
Free DORA ICT provider evidence checklist: RoI-aligned provider register fields, criticality tiers, evidence cadence per tier, and exit-strategy tracker.
URL: https://www.orbiqhq.com/templates/dora-ict-provider-evidence-checklist

**European Trust Center Readiness Checklist (Free, Scored)**
A free, scored European Trust Center readiness checklist: 58 line items across six stakeholder lanes, mapped to NIS2, DORA, and GDPR evidence expectations.
URL: https://www.orbiqhq.com/templates/european-trust-center-readiness-checklist

**GDPR Subprocessor Change Notice Template (Free DOCX & PDF)**
Free GDPR subprocessor change notice template with every EDPB-expected field, plus the notice email variant, objection handling, and approval workflow.
URL: https://www.orbiqhq.com/templates/gdpr-subprocessor-change-notice

**NIS2 Supplier Evidence Request Checklist (Free XLSX & PDF)**
Free NIS2 supplier evidence request checklist (XLSX, PDF, MD): evidence categories, criticality tiers, and cadences mapped to Article 21(2)(d) and 21(3).
URL: https://www.orbiqhq.com/templates/nis2-supplier-evidence-request-checklist

---

### Developers (4 articles)

**Agentic AI for Compliance: Agents in Trust Operations**
Agentic AI compliance uses autonomous AI agents to monitor certifications, answer questionnaires, and manage vendor workflows — learn how to build it.
URL: https://www.orbiqhq.com/developers/agentic-ai-compliance-guide

**Compliance as Code: A Developer's Guide**
Compliance as code defines and enforces compliance requirements through machine-readable code — learn the principles, tools, and API patterns to automate it.
URL: https://www.orbiqhq.com/developers/compliance-as-code-developer-guide

**How to Build an MCP Server for Compliance Automation**
Step-by-step tutorial for building a Model Context Protocol (MCP) server that wraps the documented Orbiq Admin API v1 surface for certifications, documents, knowledge base entries, access requests, and NDA workflows.
URL: https://www.orbiqhq.com/developers/build-mcp-server-compliance

**How to Build a Trust Center with the Orbiq API**
A step-by-step guide to building a trust center programmatically using the Orbiq REST API — brand config, documents, certifications, NDAs, and custom domains.
URL: https://www.orbiqhq.com/developers/how-to-build-trust-center-api

---

### Blog (8 articles)

**How We Made Our Trust Center Agent-Native**
AI agents are starting to run vendor due diligence. The question is whether your compliance infrastructure is ready to talk to them.
URL: https://www.orbiqhq.com/blog/agentic-trust-center

**The Compliance Catch-22: How Buyers Are Changing B2B Sales**
Why your biggest prospects are becoming your slowest deals, and how security review is reshaping modern B2B sales strategy.
URL: https://www.orbiqhq.com/blog/compliance-catch-22

**Data Residency vs Sovereignty: What EU Buyers Get Wrong**
Data residency is server location. Data sovereignty is legal control. Why the distinction matters in 2026 — under GDPR, the CLOUD Act, the EU Data Act, NIS2, and Schrems II.
URL: https://www.orbiqhq.com/blog/data-residency-vs-sovereignty

**How AI Agents Run Vendor Due Diligence**
AI agents are starting to run vendor due diligence in 2026. Here's how agent-mediated reviews work, what our search data shows, and how to prepare.
URL: https://www.orbiqhq.com/blog/how-ai-agents-run-vendor-due-diligence

**Building an AI Feature That Enforces Data Boundaries**
Building AI-powered compliance answers across three surfaces with access control that meets enterprise regulatory requirements.
URL: https://www.orbiqhq.com/blog/how-we-built-a-compliance-first-ai-feature-that-enforces-data-boundaries-by-design

**How a Demo Outage Made Us Rebuild Our AI Inference Stack**
A demo outage forced us to rebuild our entire AI inference architecture. We went from Mistral to Nebius Token Factory and saved 75% on our reasoning costs.
URL: https://www.orbiqhq.com/blog/inference-resilience

**Most SaaS products do not need their own MCP server**
Most SaaS products need accurate docs behind an MCP, not a hand-built tool per endpoint. A 54-trial eval took first-search accuracy from 28% to 85%.
URL: https://www.orbiqhq.com/blog/agent-operable-trust-center

**Why Security Reviews Are Becoming the New Sales Bottleneck**
The hidden cost of cybersecurity awareness in B2B sales cycles and what sales leaders are doing about it
URL: https://www.orbiqhq.com/blog/security-questionnaires-b2b-sales

---

## Frequently Asked Questions

**What is a Trust Center?**
A Trust Center is a centralized, customer-facing hub where companies publish security documentation, certifications, and compliance evidence with layered access controls. It replaces manual email-and-PDF security review workflows with self-serve access.

**How is Orbiq different from Vanta or Drata?**
Orbiq is standalone (not bundled with GRC), EU-native (Hamburg, Germany — no CLOUD Act exposure), transparent pricing (published, no "contact sales"), and built for ISO 27001/NIS2/DORA as primary frameworks rather than SOC 2. It works alongside your existing ISMS rather than replacing it.

**What is the difference between a Trust Center and a GRC tool?**
GRC tools face inward (managing your own internal compliance controls). Trust Centers face outward (communicating proof of your security posture to buyers, customers, and regulators). Companies with existing ISMS benefit from a standalone Trust Center; companies building compliance from scratch may prefer a bundled GRC+Trust Center.

**What is Trust Operations?**
Trust Operations is the discipline of making internal security posture visible and actionable for external stakeholders. Unlike GRC (which is inward-facing), Trust Operations focuses on revenue impact — turning compliance from a cost center into a deal accelerator.

**What regulations does Orbiq support?**
Orbiq provides operational compliance tooling for NIS2, DORA, GDPR (Articles 28, 32, 33, 34), and the Cyber Resilience Act. It supports ISO 27001, SOC 2, and other frameworks as primary compliance standards.

**How does Orbiq handle data sovereignty?**
Orbiq is an EU company (Orbiq GmbH, Hamburg) with EU hosting and EU subprocessors throughout the chain. This provides true data sovereignty — not just EU server location, but EU legal jurisdiction with no foreign government access under laws like the US CLOUD Act.

**Can I use Orbiq with my existing ISMS?**
Yes. Orbiq is designed as a standalone Trust Center that complements your existing ISMS. Your ISMS manages internal governance (what you do); Orbiq manages external proof (what you show to buyers, auditors, and regulators).

**How long does it take to set up?**
A basic Trust Center can be set up in 30 minutes. Full setup including restricted content, NDA flows, and knowledge base typically takes 1-2 hours.

**What does Orbiq cost?**
Plans start at €0/year (Free) and go up to €9,200/year (Enterprise). The most popular Team plan is €850/year. All pricing is published on the website — no "contact sales" required.

**How does AI Search work?**
Visitors can ask natural-language questions inside your Trust Center and receive grounded answers with source attribution. The AI only uses your published Trust Center content — no hallucinated or external information. An Agent Toolkit allows buyers to access your docs directly from ChatGPT or Claude.

**Does Orbiq support German language?**
Yes. The entire platform and all content are available in English and German. Trust Centers can be configured for multiple languages with localization support on Business plans and above.

**What is the NIS2 24-hour incident reporting requirement?**
NIS2 Article 23 requires a three-stage reporting regime: 24-hour early warning (indicating malicious/cross-border indicators), 72-hour qualified notification (initial severity assessment), and one-month final report with root cause analysis. Germany's NIS2UmsuCG entered force December 6, 2025.

**What is DORA and who does it affect?**
DORA (Digital Operational Resilience Act) applies to EU financial entities since January 2025. It requires client notification when ICT incidents impact financial interests, a continuously updated ICT provider register, and continuous monitoring rights beyond annual audit access.

**What is the Cyber Resilience Act?**
The CRA is the first EU regulation mandating cybersecurity at product level. Full application is December 2027 (vulnerability reporting from September 2026). It requires Security by Design, 24-hour vulnerability reporting to ENISA, and 5-year minimum security support periods.

---

## Website Structure

All pages are available in English (default) and German (`/de/` prefix).

**Main pages:**
- `/` — Homepage
- `/about` — About Orbiq
- `/pricing` — Plans and pricing
- `/trust-operations` — Trust Operations overview
- `/trust-operations/trust-operations-vs-grc` — Trust Operations vs GRC comparison
- `/trust-operations/vendor-assurance-vs-management` — Vendor Assurance vs Vendor Management

**Platform features:**
- `/platform/ai-search` — AI-Powered Trust Center Search
- `/platform/slack-ask` — Slack Ask Integration
- `/platform/ai-questionnaires` — AI-Supported Questionnaires
- `/platform/ai-evaluations` — AI-Powered Evaluations
- `/platform/continuous-monitoring` — Continuous Monitoring
- `/platform/document-watermarking` — Document Watermarking
- `/platform/integrated-nda-flow` — Integrated NDA Flow
- `/platform/hyper-customization` — Hyper Customization

**Use cases:**
- `/use-cases/fintech` — FinTech
- `/use-cases/healthtech` — HealthTech
- `/use-cases/hr-tech` — HR Tech
- `/use-cases/enterprise` — Enterprise
- `/use-cases/scaleup` — Scale-up
- `/use-cases/sme` — SME
- `/use-cases/govtech` — GovTech
- `/use-cases/saas` — SaaS

**Content hubs:**
- `/trust-center` — Trust Center Hub (19 articles — guides and resources)
- `/eu-regulations` — EU Regulations Hub (35 articles — operational compliance guides)
- `/compliance-automation` — Compliance Automation Hub (26 articles — buyer's guides and framework explainers)
- `/comparisons` — Comparisons Hub (28 articles — competitor comparisons and pricing breakdowns)
- `/vendor-risk-management` — Vendor Risk Management Hub (8 articles — vendor risk and third-party assurance guides)
- `/glossary` — Glossary (50 entries — compliance and trust terminology)
- `/templates` — Free Compliance Templates (17 templates — ungated and versioned, with Markdown variants for agents)
- `/developers` — Developers (4 articles — API and integration articles)
- `/blog` — Blog (8 articles — articles on B2B trust, compliance, and security operations)

**Legal:**
- `/privacy` — Privacy Policy
- `/terms` — Terms of Service
- `/dpa` — Data Processing Agreement
- `/msa` — Master Service Agreement
- `/support-policy` — Support Policy
- `/acceptable-use-policy` — Acceptable Use Policy
- `/imprint` — Imprint

**External:**
- https://docs.orbiqhq.com — API Documentation
- https://trustcenter.orbiqhq.com — Orbiq's own Trust Center
- https://www.orbiqhq.com/pricing — Pricing and signup options