TÜVIT

TÜVIT (TÜV Informationstechnik GmbH) is a German IT security testing and certification body that evaluates and certifies products, systems, and management processes against formal security standards, including Common Criteria, Security Qualification (SQ), ISO/IEC 27001, and IT-Grundschutz. Unlike most companies in this matrix, TÜVIT doesn’t sell defensive software; it independently verifies that other vendors’ claims about security hold up under accredited testing, a function that underpins procurement decisions across government, finance, and critical infrastructure in Germany and the EU.

Founded in 1995 and based in Essen, Germany, as part of the TUV NORD Group, TUVIT operates an accredited testing laboratory under DIN EN ISO/IEC 17025:2018 and holds ISO/IEC 17065 accreditation covering IT security, Common Criteria, smart cards, and data privacy. Its licensed auditors also perform IT-Grundschutz and ISO/IEC 27001 assessments, and the lab itself maintains a certified ISO/IEC 27001:2022 information security management system.

The company’s relevance to CISOs is indirect but structural: Common Criteria and Security Qualification certificates from an accredited body like TUVIT are often required for government and critical-infrastructure procurement, meaning vendors selling into those markets need a TUVIT (or equivalent) certification to be eligible at all. This is a mature, non-disruptive category by nature, but the accreditation itself is one of the stronger and more independently auditable evidence bases of any company in this dataset.