NachweisKompass
NachweisKompass is a German-language web tool that turns an AI chat conversation into workplace safety paperwork for small companies: risk assessments and employee safety briefings written to German ArbSchG and DGUV rules, then exported as Word files.
What is NachweisKompass?
NachweisKompass is a German web application that produces occupational health and safety documentation for small and mid-sized companies, using an AI chat as the input method. It targets employers who carry a legal duty under the German Arbeitsschutzgesetz but have no safety specialist on staff, and it says so plainly: the product is meant to be usable ohne Vorwissen im Arbeitsschutz, without prior knowledge.
Two documents sit at the centre of the product. The first is the Gefahrdungsbeurteilung, the risk assessment German law requires for each workplace or activity. The second is the Unterweisung, the safety briefing an employer must give staff at least once a year, and again on hiring, on a change of task or after an accident. The vendor states that its templates follow DGUV rules and are updated in line with case law and technical regulations.
The advertised flow has four steps. The user describes a workstation or activity in a chat and the AI asks follow-up questions, a step given as roughly five minutes. The finished assessment, with hazards and protective measures, is returned immediately as a Word file. Briefings are then e-mailed to employees, who read them and confirm with a single click, which produces the record of proof. Finally, automatic reminders track due measures and recurring briefings. A Massnahmen-Tracking view holds the protective measures with responsibilities and completion status, replacing the spreadsheets the site names as the problem it solves.
Six sectors are addressed by name: office and administration, skilled trades, retail, production, services and hospitality. The tool is web-only, in German only, with no API and no mobile app. Sign-in is by password or through Google or Microsoft single sign-on.
The publisher is a sole proprietorship registered to Elisabeth Kraus at an address in Chiang Mai, Thailand, although the site markets itself as made in Germany. Customer data and documents are stored with Supabase in the EU, while hosting, e-mail and payments run through Vercel, Resend and Stripe in the United States, and the AI features call OpenAI and Google Gemini.
What it does
- Generate a legally structured risk assessment from a plain description of a workplace, given in chat
- Export every document as a formatted Word file ready to print, archive or show to an inspector
- Send digital safety briefings to employees by e-mail and collect their one-click confirmation as proof
- Track protective measures with owners, status and outstanding items in one place
- Receive automatic reminders for due measures and recurring briefings
- Keep all safety documents in a cloud archive available at any time
- Adapt the assessment automatically to the sector the business operates in
When to use NachweisKompass / When not to
A quick filter to help you decide if NachweisKompass is the right fit.
When to use NachweisKompass
- Owners and managers of German small and mid-sized companies who have no in-house health and safety specialist
- Trade and construction businesses that must produce a risk assessment on demand for their Berufsgenossenschaft
- Office and administrative teams replacing paper binders, spreadsheets and scattered e-mail records
- Retail, hospitality and production sites that keep forgetting recurring safety briefings and their proof of delivery
- Very small employers taking their first structured step into occupational safety documentation
When not to use NachweisKompass
- Organisations outside Germany: the templates, wording and legal references follow German ArbSchG and DGUV rules and do not transfer as-is
- Teams needing a language other than German, as the interface is German-only with no other locale served
- Buyers who require a published price list or a signed contract before signing up, since neither pricing page nor terms of service exist
- Companies with strict vendor-governance rules, given a third-country publisher with no EU establishment and no designated GDPR Article 27 representative
- Anyone needing an API, a mobile app or an integration into an existing EHS platform
How to use NachweisKompass
A typical end-to-end flow, from setup to results.
- Open the site and start a free account from the Kostenlos starten button, with no credit card required
- Register with an e-mail address, or sign in through a Google or Microsoft account
- Open the chat and describe the workstation or activity you want to assess, in plain German
- Answer the follow-up questions the AI asks to pin down the hazards, about five minutes of input
- Review the generated risk assessment with its hazards and proposed protective measures
- Export the finished document as a Word file for printing, archiving or an inspection
- Create a safety briefing and e-mail it to the employees concerned
- Collect the employees' one-click confirmations, which become the record of proof
- Assign protective measures, set responsibilities and follow their status in the tracking view
- Let the automatic reminders flag due measures and briefings that need repeating
Pros & Cons
Pros
- Aimed squarely at employers with no safety expertise, and requires none to get a first document out
- Very short time to a usable deliverable, with a first assessment advertised in about ten minutes
- Word export produces something that can be shown to an inspector or filed without rework
- Explicit first-party commitment that customer company data is not used to train AI models
- Subprocessors are named one by one in the privacy policy, which is unusual at this size
- Customer data and documents are stored in the EU according to the vendor
- Free to start without a credit card, and cancellable at any time
Cons
- No pricing is published anywhere: no pricing page exists and no amount appears on the site
- No terms of service or AGB is published at all, although the service takes payments through Stripe
- The publisher is established in Thailand, with no EU establishment and no Article 27 GDPR representative
- The site contradicts itself on origin: the Impressum says Thailand while the structured data and the tagline say Germany
- The privacy policy still contains an unremoved editing instruction addressed to the site operator
- No certification, no customer reference, no testimonial and no review appears anywhere on the site
- German only, with no API, no mobile app and no integration into an existing safety platform
Pricing & Plans
A free entry point is available: the site advertises Kostenlos starten with no credit card required and the possibility to cancel at any time, and its structured data declares an offer at 0 EUR. No paid price is public. The vendor publishes no pricing page, and no amount, plan name or billing period appears anywhere on the site or in its front-end code. That a paid tier exists can only be inferred indirectly, from Stripe being declared as the payment processor and from contract and payment data appearing among the categories processed. Because the entry price could not be established from any first-party source, no starting amount, currency or billing unit is stated here rather than publishing a figure the vendor never gave.
Data, GDPR & hosting
A consolidated view of how NachweisKompass handles your data.
GDPR overview
GDPR implementation is documented but incomplete. The privacy policy is structured around Articles 13 and 14, dated 5 January 2026, and names legal bases, purposes, data categories, retention periods, subject rights and every subprocessor. Transfers to the United States are said to rely on the Data Privacy Framework and standard contractual clauses. The homepage carries the claims Datenschutz nach DSGVO and Entwickelt nach DSGVO-Grundsatzen. Two gaps are material: the controller is established in Thailand, a third country, yet no EU representative under Article 27 GDPR is designated anywhere, and no data processing agreement is offered to customers, although they act as controllers of their own employees' data. No data protection officer is named and no security certification is claimed.
Who owns the data?
The controller named in the privacy policy and the Impressum is Elisabeth Kraus, a sole trader based in Chiang Mai, Thailand. Customer content, documents and account data sit with Supabase, whose location is given as the EU, with Frankfurt cited as an example. The vendor states it processes account, contract, content, usage, payment and log data to run the service, and lists the third parties involved: Vercel, Resend, Stripe, OpenAI and Google Gemini. Users keep the rights set out in Articles 15 to 21 GDPR and exercise them by writing to admin@nachweiskompass.de. Account data is deleted after cancellation, subject to German statutory retention periods. No data processing agreement is offered to customers.
Reuse rights
There is no published terms of service, so no contractual clause grants or restricts reuse of the documents the tool produces. What the privacy policy does say is that processing rests on contract performance, consent and legitimate interest, and that inputs to the AI features are sent to external AI providers. The homepage FAQ states that customer company data is not used to train AI models. The vendor explicitly asks users not to enter special-category data under Article 9 GDPR into AI prompts. In practice the risk assessments and briefings are exported as Word files the customer keeps and uses freely, but that freedom rests on the absence of a contract rather than on any stated grant of rights.
Data retention & training
Hosting summary
Hosting is split across the EU and the United States, and the vendor documents it service by service. Supabase holds user data, documents and authentication, with its location given as the EU and Frankfurt, Germany cited as an example rather than a firm commitment. Vercel hosts the web application in the United States. Resend sends notification e-mails and Stripe processes payments, both in the United States. The AI features call OpenAI and Google Gemini, described as possibly processing in the United States. Single sign-on runs through Google Ireland and Microsoft Ireland Operations, both in Dublin. Transfers to the United States are said to rely primarily on the Data Privacy Framework, with standard contractual clauses as a complement. Note that the controller itself is established in Thailand, so the jurisdiction of the responsible party differs from the jurisdiction where the data is stored.
Things to keep in mind
Risks and trade-offs to weigh before adopting NachweisKompass.
- Documents are legal deliverables: an AI-drafted risk assessment still needs a competent human review, and the vendor is the one asserting DGUV conformity
- No terms of service exists, so liability, service levels and what happens to your documents if the service stops are entirely undefined
- The publisher is a sole trader in a third country with no EU establishment and no Article 27 GDPR representative, which complicates enforcing data subject rights
- The site contradicts itself on its own origin, claiming made in Germany while its Impressum gives a Thai address; treat origin claims with care
- No price is published, so budget exposure after the free start is unknown before you have already loaded employee data
- Employee names, confirmations and workplace records are personal data of third parties; you remain their controller and are offered no data processing agreement
- Relying on generated templates can erode a team's own understanding of its hazards, which is precisely what a risk assessment is meant to build
Setup & Integrations
Technical difficulty
Very low. There is nothing to install, configure or integrate: the tool is a web application, and an account is created with an e-mail address or through Google or Microsoft single sign-on, without a credit card. No occupational safety knowledge is required according to the vendor, and no API, connector or administrative setup exists to configure. The only real input is describing a workstation in the chat, given as roughly five minutes, with a first risk assessment advertised in about ten minutes overall.
Deployment
Integrations
Supported languages
Behind NachweisKompass
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
What is NachweisKompass?
What documents does it actually produce?
How much does it cost?
Is my company data used to train AI models?
Where is the data hosted?
Who is behind NachweisKompass?
Is it available in English or other languages?
Is there an API or a mobile app?
How long is data kept?
Are there terms of service to review before signing up?
Should you pick NachweisKompass?
NachweisKompass is a narrow, clearly reasoned product. It picks one obligation German employers genuinely struggle with, the risk assessment and the annual safety briefing, and compresses it into a chat conversation that ends in a Word file and a signed-off record. For a small employer facing a visit from their Berufsgenossenschaft with nothing but a folder of spreadsheets, that is a real and well-scoped promise, and the four-step flow is credible.
The documentation around the product is better than its size would suggest. Every subprocessor is named, retention periods are spelled out against the relevant German statutes, transfer mechanisms are stated, and the vendor commits in writing that customer data is not used for AI training. Few tools this small go that far.
The reservations are structural rather than cosmetic. No price is published anywhere, and no terms of service exists at all, so a buyer cannot know what they will pay or what they are agreeing to before creating an account. The publisher is a sole trader established in Thailand with no EU establishment and, more pointedly, no Article 27 GDPR representative, while the site simultaneously markets itself as made in Germany and declares a German address in its structured data. The privacy policy still carries an editing note the operator forgot to delete.
Everything datable on the site points to January 2026, there is no archived history of the domain, and no customer reference or review appears anywhere. This is an early product worth a free trial by a German SME that can judge the output itself, but not one to commit employee records to before the pricing, the contract and the publisher's EU position are clarified directly with the vendor.
- Choosing a selection results in a full page refresh.
- Opens in a new window.