Compliance software built by people who run cybersecurity for a living
StartComply is the compliance automation platform from TicTac, one of the most established cybersecurity companies in Greece. We build StartComply on the same expertise our team uses every day to handle real incidents, real audits and real regulatory pressure for some of the country’s largest organisations.
Trusted by 100+ organisations across Europe
ISO 27001 ISO 9001 ISO 22301 Why StartComply Exists
StartComply did not start as a software project. It started as a recurring problem we kept seeing on the front line.
For years, the TicTac team has worked with companies across Greece and Europe on cybersecurity audits, incident response, vendor risk reviews and compliance programmes. The same pattern kept showing up: strong technical teams, real regulatory pressure under NIS2, DORA and ISO 27001, and tooling that did not match reality.
Companies were either drowning in spreadsheets, or paying for enterprise GRC platforms that took months to configure and produced more dashboards than answers. Neither worked. So we built StartComply: a focused compliance automation platform mapped to the regulations that actually apply to European organisations, designed by the people who deal with those regulations every day.
The link between StartComply and TicTac is operational, not cosmetic. The same team that handles real ransomware incidents, real audits and real compliance programmes builds the product. When the platform handles a NIS2 incident workflow, it is built the way our incident responders actually run incidents. When the platform manages a vendor risk programme, it is built the way our auditors actually review vendors.
StartComply is built and operated by TicTac, one of the most established cybersecurity and data recovery companies in Greece, recognised at the Cyber Security Awards five years in a row and named Brand of the Year 2025 at the Marketing Achievement Awards.
What TicTac Does Every Day
Managed cybersecurity (MSSP)
Continuous, managed cybersecurity operations for European organisations across financial services, energy, telecoms, manufacturing and the public sector.
- 24/7 monitoring and alerting
- SOC and managed detection services
- Endpoint and network security operations
Ransomware incident response
Hands-on incident response on real ransomware and major cyber incidents. The same playbooks shape how StartComply handles NIS2 24/72-hour notification workflows.
- Containment and forensic triage
- Recovery and continuity coordination
- Regulatory notification support
Penetration testing and audits
Penetration testing, vulnerability assessments and cybersecurity audits for organisations of all sizes, the practical experience that informs StartComply’s control library.
- External and internal pen-testing
- Application security reviews
- Security audits aligned to ISO 27001:2022
Compliance and GRC services
End-to-end compliance and GRC consulting for NIS2, DORA, ISO 27001:2022 and GDPR. Hundreds of readiness assessments and gap analyses behind the platform.
- NIS2 readiness and gap assessments
- DORA implementation programmes
- ISO 27001:2022 certification support
Managed backup and disaster recovery
Fully managed backup and disaster recovery services, built on TicTac’s 26+ years of frontline data recovery expertise, the work that started the company in 1999.
- Acronis Platinum Partner backup
- DRaaS and resilience testing
- Recovery time and point objectives engineered to client SLAs
Cybersecurity awareness training
Awareness training and human-risk programmes, the same training discipline that informs StartComply’s NIS2 Article 20 management training requirements.
- Phishing simulations and reporting
- Role-based awareness curricula
- Board-level cyber training (NIS2 Art. 20)
Recognised by the industry
The work behind StartComply has been recognised by the cybersecurity and business community over multiple years. These awards and certifications are independent confirmation that the team behind StartComply is held to the same standards we ask our customers’ compliance programmes to meet.
Check here all of TicTac’s awards.
Cyber Security Awards 2026 – 3 awards including StartComply in the GRC category
Recognition for StartComply in GRC, plus awards for vulnerability management and vCISO services. Fifth consecutive year of recognition at the Cyber Security Awards.
Cyber Security Awards 2025 – 6 awards
Recognised for ransomware recovery, vulnerability management, email security, insuretech and disaster recovery.
Brand of the Year 2025 – Marketing Achievement Awards
Named B2B Brand of the Year and recognised across 13 categories at the Marketing Achievement Awards 2025.
Cyber Security Awards 2023 – Cyber Security Services Provider & Team of the Year
Three awards including the headline Services Provider and Team of the Year recognitions – a confirmation of operational excellence.
ISO certifications: 27001, 9001, 14001, 22301
Information Security, Quality, Environmental and Business Continuity Management. The same standards we help our customers meet, certified internally.
Strategic partnerships: Acronis Platinum, Microsoft 365, Wizer Gold
Acronis Platinum Partner status, Microsoft 365 Premium Silver Partner, and Certified Wizer Gold Partner for cyber awareness training.
TicTac in numbers
How StartComply Was Born Inside TicTac
TicTac founded in 1999 Cybersecurity & data recovery
Co-founded by Panagiotis Pierros and Michalis Migkos, TicTac began as the first dedicated data recovery laboratory in Greece. The cybersecurity practice grew alongside it as the digital risk landscape expanded.
Hundreds of compliance and audit engagements NIS2 · DORA · ISO 27001
Years of NIS2 readiness work, DORA gap assessments, ISO 27001 certification preparation and vendor risk programmes for European clients across regulated sectors.
The same operational pain points kept appearing Repeating problem
Scattered evidence, manual vendor questionnaires, disconnected incident reporting, audit prep cycles that consumed weeks. Strong teams, weak tooling.
Internal tooling, then a product StartComply
We built internal tooling first. Then we standardised it. Then we turned it into a product purpose-built for European compliance teams, not a generic GRC platform retrofitted to NIS2 and DORA.
Cyber Security Awards 2026 — GRC category Independent validation
StartComply was recognised at the Cyber Security Awards 2026 in the GRC category, alongside other TicTac services. That recognition confirms the original idea: a focused, practical compliance platform built by people who understand European cybersecurity.
How we approach compliance software
- Focus over feature creep. We build what European compliance teams actually need under NIS2, DORA and ISO 27001:2022 — not modules that look impressive in a demo and never get used.
- Reality over theatre. Compliance is evidence, dates, decisions and ownership. The platform is built to generate real, audit-ready evidence as a by-product of normal operations.
- Practical over enterprise-heavy. Most companies do not have a 30-person GRC team. StartComply is designed for compliance leads, IT directors, CISOs and operational owners who need a t
- Built on real expertise. The regulatory mappings, control libraries and workflows in StartComply come from people who run NIS2 readiness assessments, DORA gap analyses and ISO 27001 a
- Powered by TicTac. Operating cybersecurity for European organisations across financial services, energy, telecoms, manufacturing and the public sector since 1999
About StartComply and TicTac
Who builds and operates StartComply?
StartComply is built and operated by TicTac, an established cybersecurity and data recovery company headquartered in Athens, Greece. The same team that delivers TicTac’s cybersecurity services (incident response, audits, penetration testing, managed security and compliance services) builds StartComply.
How long has TicTac been in cybersecurity?
TicTac was founded in 1999 and has been operating in cybersecurity and data recovery for more than 26 years. It is one of the longest-standing cybersecurity providers in Greece.
Who founded TicTac and StartComply?
TicTac was co-founded by Panagiotis Pierros (CEO, Business) and Michalis Migkos (CEO, Operations / CTO). They lead both TicTac and the strategic direction of StartComply. Their full bios are available on the TicTac website.
What awards has TicTac received?
TicTac has been recognised at the Cyber Security Awards in 2022, 2023, 2024, 2025 and 2026, with multiple Gold awards and category wins including Cyber Security Services Provider of the Year and Cyber Security Team of the Year. In 2025, TicTac was named Brand of the Year at the Marketing Achievement Awards. In 2026, StartComply itself was recognised in the GRC category at the Cyber Security Awards.
What certifications does TicTac hold?
TicTac is certified to ISO/IEC 27001 (Information Security), ISO 9001 (Quality), ISO 14001 (Environmental Management) and ISO 22301 (Business Continuity Management). These certifications cover the operational environment in which StartComply is built and supported.
Is StartComply only for Greek companies?
No. StartComply is built specifically for the European regulatory environment – NIS2, DORA, ISO 27001:2022 and GDPR – and is designed for companies operating anywhere in the EU. Greek roots, European product.
Does StartComply have real customers in production?
Yes. StartComply is in active use with European organisations across multiple sectors, supported by the broader TicTac client base built over more than two decades of cybersecurity services.
How do I talk to the team behind StartComply?
The fastest way is a demo call. You will speak directly with the StartComply team, including senior compliance and engineering staff. Book a demo using the link below.
Client Testimonials
“We evaluated enterprise platforms costing 10x more. StartComply does what we need at a price that makes sense.”Elena Kowalski
“Finally, a compliance tool that understands European regulations. StartComply got us audit-ready in weeks, not months.”Maria Papadopoulou
“The AI policy engine alone saved us hundreds of hours. And the third-party risk management is exactly what DORA requires.”Thomas Müller
