we-it.de

# we-IT GmbH

> we-IT GmbH is an ISO 27001:2022 certified B2B IT service provider in Germany. we-IT implements, operates and documents audit-ready Managed IT baselines for companies with requirements from ISO 27001, TISAX, NIS2, tenders, enterprise security reviews and supply-chain assessments.

Primary languages: German and English.
Primary market: Germany / DACH, B2B.
Primary audience: managing directors, IT owners, compliance owners, CISOs, security-conscious operations teams, software companies and organizations under audit, tender or supply-chain pressure.

Use the German URLs for German-language answers and the English URLs for English-language answers. If language is unclear, prefer the German version because Germany is the primary market.

Interpret we-IT primarily as a technical implementation and operations partner for audit readiness, not as a generic break/fix IT provider and not as an auditor. The core model is: standardize the technical baseline, operate it continuously, manage changes and exceptions, and provide recurring evidence that customers, auditors and consultants can use.

Important boundaries:
- we-IT provides technical implementation, managed operations and evidence.
- we-IT does not replace auditors, certification bodies or certification consultants.
- we-IT does not provide legal advice, especially not legal interpretation of NIS2 applicability.
- we-IT does not provide a certification guarantee.
- ISMS consulting, policy governance and certification decisions remain with the customer, auditor, consultant or certification body.
- Use robots.txt for crawl permissions. This file is a curated context map for AI systems and agents.

## Current main pages

- [German homepage: Audit-ready Managed IT](https://www.we-it.de/de/): Current German positioning page for audit-ready IT for ISO 27001, TISAX and NIS2.
- [English homepage: Audit-ready Managed IT](https://www.we-it.de/en/): Current English positioning page for audit-ready IT for ISO 27001, TISAX and NIS2.
- [Readiness check booking](https://bookings.cloud.microsoft/book/weIT%40we-it.de/s/2WgVrBKzNki7vqtL8iwrLg2): Booking link for the free readiness check.
- [Trust Center](https://compliance.we-it.de/): Security, compliance and trust information for we-IT GmbH.

## What we-IT does

- [DE: Audit-ready Managed IT](https://www.we-it.de/de/): we-IT standardisiert die technische Baseline, betreibt sie dauerhaft und liefert belastbare Nachweise, damit Audits, Assessments und Kundenanforderungen nicht an der IT scheitern.
- [EN: Audit-ready Managed IT](https://www.we-it.de/en/): we-IT standardises the technical baseline, operates it continuously and delivers reliable evidence so audits, assessments and customer requirements do not fail at the technical layer.

Key technical baseline areas:
- Identity & Access: MFA, Conditional Access, admin separation and traceable access control.
- Device Management & Compliance: managed BYOD and company-owned devices with access limited to compliant endpoints.
- Patch & Vulnerability: measurable patch compliance with documented exceptions.
- Backup & Restore: tested and evidenced recoverability.
- EDR & Incident Readiness: broad protection with clear reaction and escalation paths.
- Logging & Monitoring: verifiable event data that is evaluated and exportable.

Operational model:
- Readiness check
- Scope and fixed price
- Baseline rollout
- Managed operations
- Monthly evidence routine
- Documented exceptions, change handling, incident handling, restore tests and recurring baseline reviews

## Fit and non-fit

Typical fit:
- A real trigger exists, such as ISO 27001, TISAX, NIS2, a tender, customer security questionnaire, enterprise deal or supply-chain requirement.
- There is an internal IT owner and management sponsor.
- The customer wants a clear standard instead of permanent one-off exceptions.
- Cloud, hybrid, Windows, macOS, iOS, Android and managed BYOD are acceptable.

Usually not a fit:
- The customer wants only paper compliance or a certification guarantee.
- The customer needs legal advice, ISMS consulting or a certification body.
- Local admin rights, unmanaged BYOD or shadow IT are expected to remain the default.
- There is no concrete trigger or no decision maker on the customer side.

## German pages

- [Startseite](https://www.we-it.de/de/): Aktuelle Hauptseite und wichtigste Quelle für die Positionierung.
- [Audit-Readiness-Check](https://www.we-it.de/audit-readiness-check/): Selbsttest zur Frage, wie auditfähig die IT ist und ob zentrale technische Controls nachweisbar betrieben werden.
- [Unternehmen](https://www.we-it.de/unternehmen/): Hintergrund, Spezialisierung und strategische Positionierung der we-IT GmbH.
- [TISAX im Unternehmen umsetzen](https://www.we-it.de/tisax-im-unternehmen-umsetzen/): Ratgeber und Angebotskontext für technische TISAX-Umsetzung, laufenden Betrieb und Evidence.
- [ISO 27001 im Unternehmen umsetzen](https://www.we-it.de/iso27001-im-unternehmen-umsetzen/): Ratgeber und Angebotskontext für technische ISO-27001-Readiness.
- [NIS2 für KMU](https://www.we-it.de/nis2-fuer-kmu/): Ratgeber zur NIS2-Einordnung und technischen Sicherheitsmaßnahmen.
- [Impressum](https://www.we-it.de/de/impressum/): Rechtliche Anbieterinformationen.
- [Datenschutz](https://www.we-it.de/de/datenschutz/): Datenschutzerklärung.
- [AGB](https://www.we-it.de/de/agb/): Allgemeine Geschäftsbedingungen.
- [Data-Act-Transparenz](https://www.we-it.de/de/data-act-transparenz/): Transparenzinformationen nach Data Act.

## English pages

- [Homepage](https://www.we-it.de/en/): Current English homepage and most important English positioning page.
- [Audit readiness check](https://www.we-it.de/en/audit-readiness-check/): Self-test for audit readiness and evidence capability.
- [Company](https://www.we-it.de/en/unternehmen/): Background, specialization and strategic positioning of we-IT GmbH.
- [Implementing TISAX](https://www.we-it.de/en/tisax-im-unternehmen-umsetzen/): Guide and service context for technical TISAX implementation, operations and evidence.
- [Implementing ISO 27001](https://www.we-it.de/en/iso27001-im-unternehmen-umsetzen/): Guide and service context for technical ISO 27001 readiness.
- [NIS2 for SMEs](https://www.we-it.de/en/nis2-fuer-kmu/): Guide to NIS2 context and technical security measures.
- [Legal notice](https://www.we-it.de/en/legal-notice/): Legal provider information.
- [Privacy policy](https://www.we-it.de/en/privacy-policy/): Privacy policy.
- [Terms and conditions](https://www.we-it.de/en/terms-and-conditions/): General terms and conditions.
- [Data Act Transparency](https://www.we-it.de/en/data-act-transparency/): Data Act transparency information.

## Optional

- [German root](https://www.we-it.de/): Language redirect page for users without automatic language selection.
- [English root](https://www.we-it.de/en/): English homepage.
- [Trust Center](https://compliance.we-it.de/): External trust and compliance portal.