D-mærket as a predefined framework
Add D-mærket in the Frameworks module and the controls arrive with it, in D-Seal's own structure and naming. The evidence tasks beneath them are .legal's own catalogue, with descriptions and practical tips.
Get ready for the D-seal
D-Seal's own criteria sit in the platform under a formal agreement with D-Seal, mapped 1:1 with the level 3 criteria. Work the controls, collect the documentation, and export it per task so it can be transferred into D-Seal's own supervisory tool at the audit.
Unlimited users • Free onboarding and support • No commitment
.jpeg)
.jpg)
.jpg)
.jpg)
-1.png)
.jpeg)
.jpg)
D-seal readiness Maria could see how much of the work was already done
Maria Holm is group GRC lead at Meridian Nordic. Their ISO 27001 certificate answers the international question, and D-mærket is the Danish one, so before she committed to anything she wanted to know what it would actually cost her in work. The platform could tell her before she switched the framework on, because D-mærket and ISO 27001 draw on the same catalogue of evidence tasks. Then she added D-mærket in the Frameworks module, the controls arrived with it, and she worked through the ones that were left.
-
The evidence already collected counted towards D-mærket before anything new was planned.
-
The controls came loaded with the framework, in D-Seal's own structure and naming.
-
Each control's tasks hold the documentation, with a frequency so they come back.
-
The documentation exports per task, so the audit hand-off is not a rebuild.
D-seal readiness A Danish mark that covers two things at once
The D-seal is Denmark's certification scheme for IT security and responsible data use, and it is the first mark to combine those two. It was established by the Danish Industry Foundation together with the industry confederations and the Danish Consumer Council, and it is supported by the Danish Business Authority.
-
More than 130 organisations have been awarded the mark, and over 2,200 are in the process.
-
Security and responsible data use are assessed together, not as two separate exercises.
-
Some organisations use it as an alternative to ISO 27001, others as a step on the way towards it. Which one fits your market is your call, not ours.
D-seal readiness The criteria are D-Seal's, not our interpretation of them
.legal and D-Seal have a formal reproduction agreement, which permits us to incorporate and apply D-Seal's criteria inside the platform. So what you read in .legal at control level is what D-Seal wrote.
-
The mapping is 1:1 with the D-Seal level 3 criteria at control level, ids and naming included.
-
Beneath each control sit evidence tasks from .legal's own catalogue, with descriptions and practical tips we wrote ourselves.
-
That distinction is deliberate: the criteria are the scheme's, the practical route through them is ours.
D-seal readiness Your scope comes from D-Seal, the controls come loaded
Your scope is D-Seal's call, not ours, and it is not something we assess for you. What .legal does is carry the scheme's own classification and hold the controls that come with it.
-
The framework arrives with classification by company groups I to IV, the scheme's own categories.
-
The implementation groups are cumulative, so controls from lower categories are included at the higher levels.
-
Specialist modules for Privacy and Security by Design and Default, Reliable Algorithms and AI, and NIS2 sit on top of the classification.
D-seal readiness Documentation the audit can actually receive
Most of the work is not the controls, it is the evidence underneath them. Each control carries tasks with a description, a status and somewhere to put the proof, and a task either links to a policy document you already have or stands on its own.
-
Attach the documentation to the task, comment on it, and close it. The record stays on the task.
-
Documentation exports per task, specifically so it can be transferred into D-Seal's own supervisory tool at the audit.
-
D-Seal does the audit and awards the mark. We hold the plan and the documentation up to that point.
D-seal readiness The same work counts towards ISO 27001
Both frameworks sit on the same evidence base, so this is not two projects. A task you document under the D-seal also counts on an ISO 27001 basis, and you can see how far you already are before you activate anything.
-
The platform shows how far you are towards a framework you have not switched on, read off the tasks you already carry out.
-
A fully implemented D-seal is estimated to take you around 70% of the way to ISO 27001. It is an estimate, an illustration of how much carries over, not a measurement.
-
If you later go for ISO 27001, you see exactly what the remaining gap is instead of starting again.
D-seal readiness We build the plan, not the filling-in
That sentence is the honest version of what you get. The platform gives you the framework, the controls, the tasks and the place the evidence goes, and your colleagues do the work.
-
Nothing is scanned. .legal documents that you work in a certain way, it does not detect anything, and incidents are registered by hand.
-
There is no aggregated verdict that says you comply. You get progress on the documentation and status per line, which is what an auditor can be shown.
-
We are not lawyers and not an audit body. No advice, no final stamp, and the scope decision stays with you and D-Seal.
D-seal readiness Frameworks this covers
The Danish mark, and the international standard it overlaps with.
-
D-mærket (the D-seal)
Learn about D-mærketD-Seal's own criteria in the platform under a formal reproduction agreement, mapped 1:1 with the level 3 criteria and classified by company groups I to IV.
-
ISO 27001
Learn about ISO 27001The Annex A controls on the same shared evidence, so the D-seal work shows up as progress here too, whether ISO 27001 is your next step or not.
Our Customers
+400
companies
+10.000
users
+79.000
contracts
+14.000
processing activities
.legal's team has consistently demonstrated a commitment to innovation while being responsive to the needs of our mutual clients.
With .legal, we've gained a simpler and more manageable solution that better suits our needs
.legal has been the right choice for us. .legal are professional and welcoming with skilled employees.
Firstly, it means that not all the work is in one place (me), and secondly, that the understanding of GDPR is implemented throughout the organisation.
From .legal, we experience an incredibly high degree of flexibility and willingness to adapt features to our local needs.
.legal's team has consistently demonstrated a commitment to innovation while being responsive to the needs of our mutual clients.
With .legal, we've gained a simpler and more manageable solution that better suits our needs
.legal has been the right choice for us. .legal are professional and welcoming with skilled employees.
Firstly, it means that not all the work is in one place (me), and secondly, that the understanding of GDPR is implemented throughout the organisation.
From .legal, we experience an incredibly high degree of flexibility and willingness to adapt features to our local needs.
We are satisfied with the switch to .legal – it has strengthened our compliance work, made processes easier to manage and more transparent, and improved cross-team collaboration
It just works! It is so easy and user-friendly, and the overview of processing activities is brilliant.
.legal has really understood what it means to create a user-friendly and efficient solution. Privacy is an attractive product compared to price and functionality.
.legal continuously update the platform to ensure their customers always remain compliant. In our view, any other choice would be a downgrade.
The implementation of .legal has made a difference in the way we handle compliance. The system has created structure and overview, which has had concrete benefits.
We are satisfied with the switch to .legal – it has strengthened our compliance work, made processes easier to manage and more transparent, and improved cross-team collaboration
It just works! It is so easy and user-friendly, and the overview of processing activities is brilliant.
.legal has really understood what it means to create a user-friendly and efficient solution. Privacy is an attractive product compared to price and functionality.
.legal continuously update the platform to ensure their customers always remain compliant. In our view, any other choice would be a downgrade.
The implementation of .legal has made a difference in the way we handle compliance. The system has created structure and overview, which has had concrete benefits.
Use cases
Book demo
Find the job you need done
Every use case is a real piece of compliance work, told the way it actually runs in the platform. Filter by who you are, what you work with, and which frameworks you answer to.
Compliance & GRC leadCISO & IT securityDPOLegal counselExecutive & board
Energy & utilities
SMVMid-marketEnterprise & group
GDPRNIS2ISO 27001CIS18DORAePrivacyAI ActD-mærketData Act
Compliance & GRC lead
Run awareness training that reaches every colleague
Send out training and policies, chase the stragglers automatically, and prove every colleague completed it. You bring the material, we run the rails.
See awareness training
Compliance & GRC lead
Manage compliance across a group of companies
Run every company in the group from one platform, document once at group level, and still report entity by entity. Delivered by the Group Companies add-on.
See group compliance
Legal counsel
Run due diligence on your vendors
Classify a vendor on your own criteria, get the answers and documents you need with no login for them, and move the approved ones straight into contracts.
See vendor due diligence
Compliance & GRC lead
Multi-framework compliance: do the work once
Do a control once and it counts across every framework it maps to, with a simulated score on the ones you haven't started yet.
See multi-framework compliance
CISO & IT security
Get NIS2-ready without starting from scratch
Build on the ISO 27001 work you've already done, switch NIS2 on, and let a simulated score show how far ahead you already are.
See NIS2 readiness
DPO
From twelve spreadsheets to one record of processing
Your GDPR documentation already exists, it just lives in spreadsheets. Export what you have and we structure it in .legal for you, typically inside two weeks.
See the move off spreadsheets
No use cases match that combination yet. Try removing a filter.
