FRAMEWORK .legal | D-Seal Framework
.jpeg)
.jpg)
.jpg)
.jpg)
-1.png)
.jpeg)
.jpg)
D-SEAL FRAMEWORK A complete framework for IT security and responsible data use
D-Seal (D-mærket) is Denmark's certification scheme for IT security and responsible data use – the first of its kind in the world to combine both disciplines in a single certification. We have mapped all eight criteria into a clear, action-oriented framework with automated compliance tracking and integration with your existing security standards.
-
Complete D-Seal framework covering all 8 certification criteria
-
Tailored to your company group (I–IV) – only see the requirements that apply to you
-
Real-time compliance tracking shows exactly where you stand with D-Seal
-
Reuses existing ISO 27001, NIS2 and GDPR tasks – avoid duplicate work
D-Seal Framework D-Seal's Eight Criteria:
Our D-Seal Framework covers the full certification, structured around eight criteria – four mandatory for all companies, and four conditional based on your business activities.
-
1. Management Governance & Leadership Anchoring (Mandatory)
Ensure IT security and responsible data use are anchored at management level with clear policies, roles, responsibilities and risk management processes.
-
2. Security Awareness & Safe Behaviour (Mandatory)
Establish a culture of security awareness through training, guidelines and ongoing employee engagement to reduce human-factor risks.
-
3. Technical IT Security (Mandatory)
Implement appropriate technical security measures including access control, network security, encryption, logging, patch management and incident response. -
4. Data Transparency & Control (Mandatory)
Ensure transparency about data collection, processing and sharing. Provide individuals with control over their personal data in line with GDPR and beyond. -
5. Vendor IT Security Requirements (Conditional)
If you use vendors for personal or business-critical data processing, ensure they meet adequate IT security and responsible data use standards. -
6. Privacy & Security by Design and Default (Conditional)
If you develop software, build privacy and security into the development lifecycle from the outset – not as an afterthought. -
7. Reliable Algorithms & AI (Conditional)
If you develop or use algorithms or AI, ensure they are transparent, fair, explainable and subject to appropriate human oversight. -
8. Data Ethics (Conditional)
Establish and communicate a data ethics policy addressing responsible data use beyond legal requirements – primarily applicable to Groups II–IV.
D-SEAL FRAMEWORK Tailor your D-Seal compliance strategy
D-Seal is available to any Danish company with a CVR number, but requirements are proportionate to your size and complexity. The certification groups your company into one of four categories:
How to design your D-Seal framework:
-
Determine your company group (I–IV) based on employees and revenue
-
Identify which conditional criteria apply to your business activities
-
Focus on areas where you have gaps – leverage existing compliance work
-
Complete the self-assessment and prepare documentation for audit
D-Seal Framework Who Can Get D-Seal Certified?
Any company with a Danish CVR number can pursue D-Seal certification, from small consultancies to large financial institutions. Companies are categorised into four groups based on size:
Group I: 0–9 employees, revenue up to DKK 7.9 million – small service and consulting firms
Group II: 10–49 employees, revenue DKK 8–155.9 million – small manufacturers, local utilities
Group III: 50–249 employees, revenue DKK 156–313 million – regional utilities, larger manufacturers
Group IV: 250–999 employees, revenue over DKK 313 million – national enterprises, financial institutions
Certification process: Self-assessment → Audit request → Auditor review → Certification → Annual renewal. Valid for one year.
D-SEAL FRAMEWORK Leverage synergies with existing compliance frameworks
D-Seal is built on internationally recognised standards and aligns closely with frameworks you may already be working with. Leverage your existing compliance investments:
Framework Synergies:
-
Existing security controls satisfy multiple D-Seal criteria simultaneously
-
Documentation and processes can be reused across frameworks
-
D-Seal explicitly aligns with NIS2 requirements through a dedicated module
-
ISO 27001 certification simplifies the D-Seal self-assessment significantly
Our Customers
+400
companies
+10.000
users
+79.000
contracts
+14.000
processing activities
