Responsum
Founded 2020 · 35 employees on LinkedIn · 3 known investors
Responsum provides a modular privacy management platform that automates governance policies, Records of Processing Activities (RoPA), Data Subject Requests, and Data Protection Impact Assessments (DPIAs) for organizations subject to data protection regulation. It serves privacy teams and DPOs, as illustrated by its work with Brussels Airport Company.
Also known as RESPONSUM
Investors · 3
Also in the syndicate · 1
Company profile
researched Aug 2026RESPONSUM is a Belgium-based software company that sells a modular compliance operations platform covering privacy management, security and controls, risk management, assessments and reviews, vendor management, AI governance, and awareness and training. Core workflows include Records of Processing Activities (RoPA), DPIAs, LIAs and TIAs, data subject requests, cookie consent, an AI register, risk assessments and framework mapping, supported by APIs and integrations, a customizable platform layer, automation and smart suggestions, a task and collaboration hub, and unlimited guest access. The platform is positioned against frameworks including GDPR, UK GDPR, the UK DUA Act 2026, ISO 27001, NIST, NIS2, DORA, the EU AI Act, PDPA and PDPL, as well as custom frameworks.
The company markets an AI layer ("Responsible AI") that generates draft vendors, assessments and processing activities from prompts, detects missing or inconsistent records and applies bulk fixes, with granular permissions, logging of all conversations and access, and human approval before changes are saved. Customers can connect external models via MCP while keeping permissions, logging and approvals centralized. RESPONSUM emphasizes an EU-only setup with EU vendors, locations and infrastructure.
Beyond software, RESPONSUM sells services: implementation packs, migration/transition from prior GDPR software vendors or spreadsheets, custom integrations, GDPR consultancy, and DPO as a Service delivered by consultants ranging from junior to senior profiles with more than 18 years of experience. The company also publishes CSR commitments, including renewable energy efforts and planting trees for every new customer through Belgian organization GoForest, and issued a 2021 CSR report.
Founding story
RESPONSUM originated as a spin-off of CRANIUM, a Belgian privacy, security and data management consultancy founded in 2016 that had run over 100 international DPO missions. CRANIUM found that a large share of its time went to administrative work, prompting the creation of a software platform to automate that work and free capacity for consultancy. Alex Van Cauwenbergh, CEO of CRANIUM until 2021, became CEO of RESPONSUM in November of that year; co-founder Bavo Van den Heuvel serves as Chief Knowledge Officer and leads the expertise behind product development.
Business model
B2B SaaS subscription for a modular privacy, security, risk and AI governance platform, offered in packages by company size (startup, mid-market, enterprise) with migration, onboarding and employee training included in all pricing packages. Additional paid services include implementation, custom integrations, transition packs, GDPR consultancy and DPO as a Service. A free trial and demo are offered as entry points, and the site uses Stripe as a payment processor.
Recurring software subscriptions across pricing packages, complemented by professional services fees (implementation, integrations, migration, consultancy and DPO as a Service).
Traction
More than seventy companies were reported as platform users at the time of the 2021 round. The website cites Brussels Airport Company as a reference customer and publishes testimonials from DPOs, legal counsel, CEOs and an information security officer. Vendor-claimed performance figures include 9.3x faster setup, up to 83% time savings and 62% less work overlap. A third-party data provider lists 21-50 employees.
Latest developments
Current positioning centers on an AI-powered compliance operations platform with a Responsible AI companion, AI governance for the EU AI Act and AICA rules, MCP support for customer-supplied models, and framework coverage including NIS2, DORA and the UK DUA Act 2026. Recent blog topics cover NIS2 readiness, an EU AI Act guide, the acquisition of RealCGR's GDPR division and vendor assessments.
▸Full profile — market position, technology, go-to-market, geography, history
Market position
Positions itself as an all-in-one European alternative to point tools and spreadsheets, explicitly citing migrations from Excel or OneTrust, and claims reduced work overlap by combining privacy, risk, security, AI governance and third-party risk management in one platform. At the time of its 2021 financing, more than seventy companies were reported to be using the platform.
European build and hosting with GDPR-compliant EU vendors and infrastructure; breadth of modules in a single platform; deep customization of fields, flows and reports; migration support from any prior tool completed within one day to eight weeks; and an AI layer constrained by granular permissions, full logging and mandatory human review. Domain expertise is inherited from consultancy roots, with services including DPO as a Service.
Technology
Cloud SaaS platform with linked data across modules, automation and reminders, dashboards and custom reporting, APIs and out-of-the-box plus custom integrations. An embedded AI companion generates records and assessments from prompts, flags incomplete or inconsistent data, and supports bulk remediation under role-based permissions, audit logging and human approval; external models can be connected via MCP. Infrastructure, vendors and data locations are stated to be within the EU. Public-facing web stack includes WordPress/Elementor, HubSpot Analytics, Google Ads, Amazon SES and Stripe.
Go-to-market
Inbound and direct sales through demo bookings, custom quotes and a free trial on the website, supported by content marketing (articles, eBooks, webinars, digital events, glossary, one-pagers), tools such as a privacy maturity calculator and DPIA checklist, customer success stories, event presence, and an implementation/consultancy partner network with a partner signup program. Following its 2021 investment, the company hired a sales and marketing team and a customer support expert.
Privacy teams, DPOs, legal counsel, compliance and information security functions in organizations subject to data protection and security regulation; segments span startups, mid-market and enterprise, plus data protection consultancies. Referenced users include Brussels Airport Company.
Geography
Headquartered at Excelsiorlaan 43, 1930 Zaventem, Belgium, with a stated European infrastructure and vendor footprint and ambitions to expand beyond Belgium; framework coverage spans EU, UK and other jurisdictions, and testimonials reference a global business user.
History
Before the 2021 investment round, RESPONSUM was financed by its founders, a €486,000 grant from Flanders Innovation & Entrepreneurship (VLAIO) and a €350,000 loan from Flemish private equity firm PMV. In 2021 it secured capital from Volta Ventures starting at €1M and extendable to €2.5M, with Koen De Waele of Volta Ventures and business angel Catalina Daniëls joining the board; proceeds were earmarked for SaaS product development, international expansion and hiring. A 'Multiple Regulations' module was planned for late 2021 to support companies outside the EU, including the USA. The company later acquired the GDPR division of RealCGR. The product line has since expanded from GDPR management, awareness and e-learning into security controls, risk, vendor management and AI governance.
Compiled by commissioned research from 8 cited public sources — announcements, filings, and press listed under research sources below.
Key figures
latest reportedCompany-reported or press-reported figures, each dated to when it was claimed — not independently audited.
Timeline · 6
launches, deals, and filingsCompany blog lists an acquisition of RealCGR's GDPR division.
Alex Van Cauwenbergh, previously CEO of CRANIUM, became CEO of RESPONSUM in November.
Prior to the Volta Ventures round, the company received a €486,000 grant from Flanders Innovation & Entrepreneurship (VLAIO).
RESPONSUM announced capital from investment company Volta Ventures starting at €1M and extendable up to €2.5M. Koen De Waele (Volta Ventures) and business angel Catalina Daniëls joined the board of directors. Proceeds were allocated to scaling the SaaS platform, international expansion and hiring sales, marketing and customer support staff.
Prior to the Volta Ventures round, the company received a €350,000 loan from Flemish private equity firm PMV.
A 'Multiple Regulations' module was announced for addition by the end of the year to enable companies in other countries, such as the USA, to use the platform.
Dated company events from announcements, filings, and press; legal rows summarize public dockets and regulator releases.
▸Research sources · 8
primary sources listed
- Responsumresponsum.eu · web
8 public sources were cited for this profile; the first-party ones are listed here.
Frequently asked questions
- What does Responsum do?
- Belgian SaaS company offering an AI-assisted platform for privacy, security, risk and AI governance compliance.
- Who are Responsum's investors?
- Responsum's investors include North Texas Angel Network, Volta Ventures.