Codara
Codara is an Austrian legal compliance platform that tracks regulatory changes, court rulings and draft legislation across Austrian, German federal and EU law, scoring each change by department and turning it into auditable tasks.
What is Codara?
Codara is a SaaS legal compliance platform from Codara Group GmbH in Vienna, marketed as a Legal Compliance Operating System: three products on one platform rather than three separate tools. Codara Regulatory Monitoring, the flagship, connects in real time to official primary sources, namely RIS in Austria, NEURIS in Germany, EUR-Lex, Findok and parlament.gv.at. It assesses how relevant each change is to the customer's company and to individual departments, converts the affected provisions into assignable tasks and maintains a digital legal register. Its audit trail is built for organisations documenting compliance under ISO 9001, 14001, 27001, 45001, 50001 and EMAS. Codara Judikatur Monitoring scans new court decisions. Around a thousand rulings surface each week and typically one to five reach a given customer's report. Coverage spans OGH, VfGH, VwGH, DSB, BVwG, BG, LG, AUSL and BFG, with up to ten keywords per field of law, daily or weekly delivery by e-mail or dashboard, and cited sources linked automatically. Codara Legislative Radar follows Austrian bills in consultation and EU legislation, adding AI impact analysis, version history, change highlighting and a drafted position statement. It is still in pilot and accessible only through a waiting list. Codara insists on human-in-the-loop: the AI prepares, a person decides. Development is in-house, and a domain-specific Legal LLM is being built with Sigmund Freud Privatuniversität, CERHA HEMPEL and Fraunhofer Austria under FFG funding, though it has not shipped. Customers work through an online dashboard at dashboard.codara.com alongside e-mail reports, and the site mentions integrating results into an internal workflow system, naming ServiceNow as an example. The company grew out of GesetzeFinden.at, the free public legal platform it still runs at roughly 30,000 visits a month. It was registered in 2024 as Digico Software GmbH and renamed Codara Group GmbH in October 2025. Two further modules, Bescheidmanagement and a Policy Manager, are announced for late 2026. Access is business-only, and every engagement starts with a scoping conversation rather than self-service sign-up.
What it does
- Detect changes in Austrian, German federal and EU law in real time from official primary sources
- Score how relevant each change is to your company and to each individual department, shown as a traffic-light system
- Turn legal provisions into concrete tasks with named responsibilities and binding deadlines
- Maintain a digital, audit-proof legal register (Rechtskataster) broken down by department
- Summarise new court rulings into a daily or weekly report with links to the cited sources
- Track bills in consultation and draft a position statement on them
- Produce a complete, exportable audit trail for an ISO audit or an internal control review
When to use Codara / When not to
A quick filter to help you decide if Codara is the right fit.
When to use Codara
- In-house legal and compliance teams at mid-sized companies and large groups that must prove they monitor legal change continuously
- Quality and EMAS managers who need documented evidence of legal compliance for ISO 9001, 14001, 27001, 45001 and 50001 audits
- Regulated operators in energy, industry, infrastructure, retail and healthcare, the sectors Codara draws its named clients from, including Austrian Power Grid, Wien Energie, Energie Steiermark, SPAR, KSV1870 and Borealis
- Law firms tracking new case law across the Austrian courts, as CERHA HEMPEL and Krichmayr Tinhofer describe in the site's testimonials
- Organisations bound by Austrian law, German federal law and EU law that value depth in one jurisdiction over shallow global breadth
When not to use Codara
- Consumers and private individuals: the terms apply exclusively to entrepreneurs under § 1 UGB and state that consumers under § 1 KSchG are not permitted to use the service
- Anyone looking for legal advice, since Codara states its output neither constitutes nor replaces legal advice
- Companies needing coverage beyond Austria, German federal law and the EU, as Codara explicitly positions itself against AI tools built on a global database
- Developers who want a public API or a mobile app to build on, because neither exists and no developer documentation was found
- Teams that do not work in German, as the website and the product material are entirely German with no English version
How to use Codara
A typical end-to-end flow, from setup to results.
- Request a demo or a scoping call from the website, since there is no self-service sign-up
- Complete the demo form, where first name, e-mail, product of interest and company name are required and surname and phone number are optional
- Go through the individual needs analysis that opens every project
- Have an account set up for you, which clause 5.4 of the terms requires before the modules will run
- Supply detailed company and department descriptions, as these are the basis for the Relevance Score and the recommendations
- For Judikatur Monitoring, select your fields of law, courts and topics, and add up to ten keywords per field
- Choose a reporting rhythm: daily or weekly digests by e-mail, or real-time alerts on individual changes
- Import an existing legal register if you have one, so current processes are not interrupted
- Work in the dashboard day to day, reviewing flagged changes and assigning tasks with owners and deadlines
- Join the waiting list if you want Legislative Radar, which is still in its pilot phase
Pros & Cons
Pros
- Plugged directly into official primary sources rather than a licensed third-party database
- Genuine depth on Austrian law, German federal law and EU law instead of shallow global breadth
- Gapless audit trail, which one client (Austrian Power Grid) describes presenting to an ISO auditor
- Summaries a non-lawyer can act on, which takes load off the legal department
- GDPR-compliant hosting on a server in Germany with encryption at rest
- Low entry price on Judikatur Monitoring at EUR 25.90 per user per month, plus a free four-week trial
- Named, checkable customer references in demanding sectors, an in-house development team and a pure SaaS model with no dependency on hourly consulting
Cons
- Narrow geographic coverage: Austrian law, German federal law and EU law only, with German Länder law still being added
- Website and product material are German only, with no English version and no language switcher
- No public API, no developer documentation and no mobile app
- No free plan and no self-service sign-up, every purchase running through a sales conversation, and consumers cannot subscribe at all
- No dedicated pricing page: prices sit inside the product pages, and the flagship Regulatory Monitoring starts at EUR 390 per month excluding VAT with a three-month test phase that is paid, not free
- A one-off connection fee may fall due on first registration with no published amount (clause 6.1.2), and prices may be indexed annually to the VPI 2020 index beyond 5% movement (clause 6.1.4)
- Part of the offer is not yet deliverable, with Legislative Radar in pilot and the Legal LLM still in development, and Codara publishes no security certification of its own and no quantified availability commitment, the terms promising only the greatest possible care
Pricing & Plans
All prices below exclude VAT, to which 20% is added. Codara offers no permanently free plan. The lowest published entry point is the Judikatur Monitoring Starter tier at EUR 25.90 per user per month, with Professional at EUR 79.90 per user per month and an Enterprise tier on request. That is not the price of the flagship product: Codara Regulatory Monitoring starts at EUR 390 per month for Small Business and EUR 1,490 per month for Large Business, with Enterprise on request. No price is published for Codara Legislative Radar, which remains in pilot. A free four-week trial without commitment is available on Judikatur Monitoring for new customers only, whereas the Regulatory Monitoring test phase lasts three months and is paid. Invoicing is monthly in advance (clause 6.1.1) with payment due within 15 days (clause 6.2.1). A one-off connection fee may be charged on first registration, its amount not published (clause 6.1.2), and prices may be indexed annually to the VPI 2020 index from 1 January at the earliest, subject to a 5% threshold (clause 6.1.4). The free GesetzeFinden.at platform is a separate product on a different domain, not a Codara plan.
- EUR 25.90 per user per month excluding VAT
- one field of law
- weekly reports
- up to 10 keywords
- summarised rulings
- EUR 79.90 per user per month excluding VAT
- up to five fields of law
- daily or weekly reports
- unlimited keywords
- on request
- everything in Professional
- for teams of five or more
- with flexible fields of law
- from EUR 390 per month excluding VAT
- dashboard access
- automatic monitoring
- monthly report
- general legal register
- general AI summaries
- from EUR 1
- 490 per month excluding VAT
- dashboard for up to eight people
- individual legal register across up to five departments
- per-department configuration and AI summaries
- real-time notifications
- prioritisation via the Relevance Score
- on request
- unlimited dashboard users
- unlimited departments and legal registers
- audit log
- individual audit reports
- Priority Support with a 48-hour response time
- no tier published
- as the product is in pilot and access runs through a waiting list
Data, GDPR & hosting
A consolidated view of how Codara handles your data.
GDPR overview
GDPR implementation is explicit and reasonably detailed. The privacy policy, last updated on 20 January 2026, names the GDPR and the Austrian TKG 2021 as its framework, lists data subject rights under Articles 15 to 21, identifies the Datenschutzbehörde at Barichgasse 40-42, 1030 Wien as the supervisory authority and sets out the right to lodge a complaint under Article 77. Subprocessors are named, transfers outside the EU rely on standard contractual clauses, and hosting is declared GDPR-compliant on a server in Germany. No data protection officer has been appointed, the company stating this is not legally required, and as an Austrian controller established in the EU it needs no Article 27 representative. One inconsistency is worth flagging: the Impressum gives datenschutz@gesetzefinden.at for data protection questions while the privacy policy gives datenschutz@codara.com.
Who owns the data?
Codara Group GmbH, Stubenring 24/13, 1010 Wien, is the controller; no data protection officer has been appointed, which the company says is not legally required. Customers supply and retain ownership of a detailed company profile covering legal form, sector, core business, target markets, structure, sites, departments, economic indicators, relevant fields of law, risks and opportunities. Codara states it will not process the data provided for purposes beyond the contract, the customer's consent or another GDPR-compatible ground, with one exception: statistical use, and only once the data has been anonymised. Data inside the products is kept for as long as the product is supplied.
Reuse rights
The terms limit what customers may do with the output. Clause 5.3 obliges the customer not to pass search content and results to third parties, and clause 2.2.3 makes commercial redistribution of AI-generated content grounds for immediate termination, so results are for internal use rather than resale or republication. On Codara's side, data is processed to deliver the product and to handle sales contact, newsletter and demo requests. Consent under Art. 6(1)(a) GDPR covers the newsletter and demo requests; legitimate interest under Art. 6(1)(f) covers HubSpot and the personal data of third parties that appears in the non-anonymised RIS and Findok rulings the product processes, names included. Clause 1.3.2 has the customer accept that Codara uses AI models in the applications marked as such. Matomo anonymises IP addresses at collection and cookies last at most 12 months, while transfers outside the EU rely on the standard contractual clauses 2010/87/EC and 2004/915/EC. Whether customer data is ever used to train models is never addressed anywhere on the site.
Data retention & training
Hosting summary
Codara states twice on its site that all Codara products are hosted in a GDPR-compliant way on a server in Germany. Data is encrypted at rest where possible, is reachable only over secure HTTPS/SSL connections, and passwords cannot be viewed by anyone, including Codara's own staff. No wider hosting region is declared: the site says Germany and nothing more. The privacy policy names the company's own subprocessors, namely Amazon Web Services EMEA SARL in Luxembourg for the central database and backend infrastructure, Vercel Inc. for hosting the website, Google Ireland for Google Workspace, Fynk GmbH in Vienna, Matomo/InnoCraft and HubSpot. These are Codara's suppliers, not product connectors. Some recipients sit outside the EU, and those transfers rely on the standard contractual clauses 2010/87/EC and 2004/915/EC. One distinction is worth keeping straight: the public marketing site runs on HubSpot infrastructure with Vercel DNS, whereas it is the product platform that Codara declares hosted on a German server. The controller is Codara Group GmbH in Vienna, so Austrian and EU law applies.
Things to keep in mind
Risks and trade-offs to weigh before adopting Codara.
- The headline price is not the flagship's price. EUR 25.90 per user per month buys Judikatur Monitoring, while Regulatory Monitoring, the product the site leads with, starts at EUR 390 per month, and every figure excludes 20% VAT.
- The two trial regimes are opposites: four weeks are free on Judikatur Monitoring, but the three-month Regulatory Monitoring test phase is paid, and clause 2.2.1 grants no entitlement to a test phase at all, nor a second one on renewal.
- Costs can exceed the sticker price. A one-off connection fee may be charged on first registration with no published amount (clause 6.1.2), and prices may be indexed annually to the VPI 2020 index (clause 6.1.4).
- The site publishes two different data protection addresses, datenschutz@gesetzefinden.at in the Impressum and datenschutz@codara.com in the privacy policy, and the support contact it names is an individual's mailbox rather than a service alias.
- Identity and vintage do not line up neatly: the company was registered on 31 July 2024 as Digico Software GmbH and renamed Codara Group GmbH in October 2025, the site nonetheless says it was founded at the end of 2024, and codara.com is a second-hand domain whose earliest web archive capture belongs to an unrelated American recruiting software firm.
- Delegating judgement is the real human risk. The terms are explicit that the output is neither legal advice nor a substitute for it, yet relevance scores and AI summaries make it easy to accept a traffic-light colour instead of reading the provision, and an audit trail records the decision without improving it.
- Part of the offer is not yet deliverable, with Legislative Radar in pilot and the Legal LLM still in development. Note also that the ISO 9001, 14001, 27001, 45001, 50001 and EMAS standards quoted throughout the site are obligations of the customer that the tool helps document, not certifications held by Codara, which publishes none of its own.
Setup & Integrations
Technical difficulty
Technically undemanding: Codara is a browser-based web application, so there is nothing to install, no API to wire up and no infrastructure to provision. The real effort is organisational. Every project opens with a conversation and an individual needs analysis, and the customer must produce a detailed company profile and department descriptions, since these drive the Relevance Score and the recommendations. Judikatur Monitoring additionally needs fields of law, courts, topics and up to ten keywords configured. An existing legal register can be taken over and reused. Optional integration with an internal workflow system such as ServiceNow is mentioned but not documented, and no go-live timeframe is published.
Deployment
Integrations
Behind Codara
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
What is Codara?
Which legal sources does Codara monitor?
Which countries does Codara cover?
How much does Codara cost?
Is there a free trial?
Is there a free plan?
Where is the data hosted?
How does Codara handle the risk of AI hallucination?
Is there an API or a mobile app?
Who can subscribe, and does Codara give legal advice?
Should you pick Codara?
Codara is a deliberately narrow tool, and that is its strongest argument. Instead of a shallow global regulatory database, it goes deep on Austrian law, German federal law and EU law, plugging straight into RIS, NEURIS, EUR-Lex, Findok and parlament.gv.at rather than licensing somebody else's copy. Its credibility rests on named, checkable customers, among them Austrian Power Grid, Wien Energie, Energie Steiermark, SPAR, KSV1870 and Borealis, which counts for a good deal in a company only entered in the Austrian commercial register on 31 July 2024 and renamed from Digico Software GmbH to Codara Group GmbH as recently as October 2025. Two things deserve attention before you budget. First, the two price ranges sit far apart: the EUR 25.90 per user per month headline belongs to Judikatur Monitoring, while Regulatory Monitoring, the product the site actually leads with, starts at EUR 390 per month, and every figure excludes 20% VAT. Second, the two trial regimes are opposites, with four free weeks on Judikatur Monitoring against three paid months on Regulatory Monitoring. There is no pricing page and no self-service sign-up, so every evaluation begins with a sales conversation. The roadmap is active but not all of it is deliverable today. Legislative Radar is a pilot behind a waiting list, the domain-specific Legal LLM is still being built with academic and industry partners, and two further modules are promised only for late 2026. It is also worth reading the ISO standards quoted throughout the site correctly: they are obligations the customer must meet, not certifications Codara holds. For a German-speaking, EU-regulated organisation that has to prove it watches the law, Codara is a serious and unusually well-sourced option. Outside that perimeter, it is simply not built for you.
- Choosing a selection results in a full page refresh.
- Opens in a new window.