CloudSoul is an automation platform focused on cybersecurity compliance, primarily serving small and medium-sized enterprises in Luxembourg, Belgium, and the Netherlands. It provides compliance support for NIS2, ISO 27001, and vCISO, helping businesses identify gaps and close them in priority order. The platform combines automation tools and "human-in-the-loop" expertise, aiming to protect SMEs in a scalable way.
Key capabilities include: managing compliance as a to-do list, divided into five phases from scoping to audit-ready evidence, with each task having an owner, deadline, and time estimate. Model the company's business, dependencies, and potential risks through structured assessments, and all subsequent work is prioritized by risk. The risk register automatically receives issues found by tools, and overdue handling is reminded on the homepage. Map controls once and comply multiple times, with real-time completion coverage for ISO 27001, NIS2, CIS, DORA, GDPR, and TISAX, all based on the same control set. Policy templates and framework mapping support versioning, approvers, and employee acceptance tracking. Audit documents are automatically generated, every action is logged, and progress reports and audit packages can be generated on demand. Vendor and system inventories are centrally managed, covering supply chain risk and asset classification. Security incidents are classified by business impact, agents stream incidents into the platform, and what is escalated is what matters to the business. Vulnerability findings, cloud compliance checks, and patch oversight all provide recommended fixes and become evidence.
How to use: The platform provides automated insight collection and vCISO review, allowing businesses to run compliance and security work themselves, with guided plans, automatically generated evidence, and security tools within the same platform. It also provides security leadership support at different scales, from periodic reviews to a full vCISO function.
Use cases: Suitable for SMEs that need to achieve compliance with NIS2, ISO 27001, etc., especially companies in Luxembourg, Belgium, and the Netherlands. Case studies show that companies such as InWarmte use the platform to simplify security management.
Limitations: The platform is designed for sovereignty, hosted on EU-owned infrastructure, with European data residency. The models it runs are open source, deployed on its own hardware or served by European providers. Customer data is never used to train models. Specific pricing, a detailed feature list, and complete usage steps are not provided for now.