Three new mandatory European regulations landed on the same companies in less than two years: NIS2 in October 2024, DORA in January 2025, and the EU AI Act phasing in through August 2026. Personal liability for management. €10M to €35M fines on the table. Audits arrive without warning.

We have watched the same scramble play out from both sides. Jan spent a decade at berylls by AlixPartners and Volkswagen building the governance frameworks that kept billion-euro organisations honest in front of regulators. Kyle was the founding engineer at Debtist — went from zero to 10M ARR shipping fast, and learned what an unprepared audit feels like when the notice arrives on a Tuesday.

Re-entry exists because the gap is not a new regulation — it is the lack of a control library that maps the systems you already run to the specific articles your auditor will cite, refreshes every night, and exports a BSI-aligned PDF the auditor can accept directly. We built it because nobody else was building it for the German-speaking mid-market.