Matproof

Matproof sells a single answer to a problem most European security and compliance teams solve six times over: mapping one control set across DORA, NIS2, GDPR, ISO 27001, SOC 2, and the EU AI Act, then collecting the evidence continuously instead of rebuilding it before every audit. The platform is EU-native - built and hosted in Europe, with customer data stored on infrastructure in Germany and an EU-based AI processing option. For teams handling financial-services (DORA) or essential-entity (NIS2) obligations, that data-residency posture is part of the product, not a footnote.

The tooling spans the full compliance-to-evidence loop. Continuous evidence collection runs alongside security testing; cloud security posture monitoring performs ongoing configuration checks across AWS, Azure, and Google Cloud, turning findings into tracked corrective actions that double as reusable compliance evidence. Penetration testing integrates the same way - vulnerabilities become managed actions rather than a PDF nobody reads. An AI Governance module handles AI-system discovery and classification to support EU AI Act obligations, and the platform exposes a REST API alongside MCP (Model Context Protocol) server hosting.

The scope is deliberately bounded: Matproof is a software provider, not an audit firm or consultancy. Audits and certifications are performed by independent accredited bodies. The product targets compliance officers, security teams, founders, and technology leaders across regulated European industries, financial services, critical infrastructure, SaaS companies chasing SOC 2 or ISO 27001, and organizations deploying AI systems.