Investment focusCompliance, testing and certification
Compliance, testing and certification

Selling a compliance services company: occupational safety, data protection, customs, product compliance, certification

For years you have met obligations for hundreds of businesses. We buy your company where Arsipa and Customs Support are too big.

Confidential. Only the three partners see your enquiry.
Last updated: September 23, 2026 · +49 40 89741812
Safety specialist on a site inspection at a mid-sized client
AI-generated image
429,318companies with 10 to 49 employeesDestatis 2024
103,333companies subject to the Whistleblower Protection Act (HinSchG, ≥ 50)Destatis 2024
29,500companies under NIS2secjur 2026
109,000successions per year until 2029KfW 2026
Confidential from the first minute
Does this sound familiar?

Six compliance service providers facing the succession question

You built your company over decades. We know these situations from talks with owners. One of them is probably yours.

Your safety specialist service has 12 specialists and no company doctor left

Your safety specialists serve 300 businesses under DGUV Regulation 2. You buy in occupational health care externally, and the company doctor retires in 2027.

Your customs agency in Hamburg has 40 framework clients

You have handled import and export clearance for 20 years. CBAM and the EU customs reform bring work, and also new software costs. Customs Support has been in touch, but you do not want to become site number 40.

Your certification body lives on audit cycles

You audit ISO 9001, 14001 or 45001 with DAkkS accreditation. Your clients return every three years, the surveillance audit every year. The accreditation depends on you personally.

Your DPO firm has 300 mandates and one worry: Section 38 BDSG

You are the external data protection officer for 300 companies. The federal and state governments want to drop the obligation to appoint one from 20 people. You wonder what your company will be worth then. We have an honest answer, see the FAQ.

Your firm is the EU authorized representative for 80 manufacturers

You hold mandates for product compliance, CE marking and market surveillance. Your clients are based in Asia and the US and rarely switch. There is no successor.

You do a bit of everything

Occupational safety, data protection, fire safety and whistleblowing systems from one source for 400 clients. You have lived add-on growth without calling it that. This is exactly the platform we want to buy.

Auditor in a certification audit with a company's quality manager
AI-generated image
We speak your language

Terms your business uses every day

Anyone who wants to buy your company has to understand what your people are talking about. This is our vocabulary.

Basic careThe fixed base of hours under DGUV Regulation 2 that you must document for each client every year.
Risk assessmentThe obligation under Section 5 of the Occupational Safety and Health Act (ArbSchG) that is never finished at the client and reopens with every change.
Direct representationYou file declarations in the client's name and are not personally liable for the duties.
Surveillance auditThe annual audit between initial certification and recertification that carries your revenue in the three-year cycle.
ROPA (VVT)The record of processing activities under Art. 30 GDPR that is the first thing missing with every new mandate.
Responsible personThe contact person in the EU that retailers without an EU seat have needed for their products since the GPSR.
Mandate with a termAn officer contract that renews every year and brings predictable revenue.
Nonconformity reportThe document after the audit whose corrective actions you must follow up before the certificate is issued.

Your year, as we know it

January to MarchAnnual planning of hours, first safety committee meeting, activity reports for the previous year to management.
April to JunePeak season for surveillance audits, briefing rounds and site inspections before the holidays.
July to SeptemberHoliday gaps in the team, audit dates move, follow-ups on nonconformity reports pile up.
October to DecemberRecertifications before year-end, hour reconciliation for basic care, renewal of mandates and approvals.
Systems we work with in this sector:ATLASAEBDAKOSYBEOQuenticveriniceLUCIDgoAML
How you can tell we know your business

Numbers, rules, deadlines: what is moving your sector right now

A buyer has to know the market. These are the facts we work with.

Companies in Germany by number of employees

Number of legal units
10 to 49: 429,318 legal units10 to 49429,31850 to 249: 84,701 legal units50 to 24984,701250 and more: 18,632 legal units250 and more18,632
Source: Destatis business register 2024
What this means for you

More than half a million businesses need external officers. The providers are regional and owner-managed.

Regulation sets the pace

1973ASiG: company doctor and safety specialist mandatory
07/2023HinSchG: reporting channel from 50 employees
12/2025NIS2 Implementation Act in force, ~29,500 entities affected
01/2026New DGUV Regulation 2: minimum share of 20% each for company doctor and safety specialist
by 12/2026Planned: removal of Section 38 BDSG

Six facts you can quote

  1. 01There are 3,543,865 legal units in Germany, of which 429,318 have 10 to 49 and 84,701 have 50 to 249 employees (Destatis business register 2024).
  2. 02103,333 companies with at least 50 employees must operate an internal reporting channel under HinSchG (Destatis 2024).
  3. 03About 109,000 SMEs per year plan a succession until 2029 (KfW succession monitoring 01/2026).
  4. 04IfM Bonn expects 186,000 handovers from 2026 to 2030, 31% of them in business services (IfM Bonn 2025).
  5. 05About 29,500 companies fall under the NIS2 Implementation Act, only about 18,500 had registered by 07/31/2026 (secjur, mars solutions 2026).
  6. 0698,810 obliged entities are registered with the FIU, out of more than 1 million in the non-financial sector (FIU 2024, Transparency International DE 2021).
AI efficiency in this sector

Which segment gains most from the technology

Our assessment for each segment of this sector, side by side. The bar shows what share of today's working time can be automated with available technology.

6segments assessed
3.5Average AI impact, scale 1 to 5
15% to 60%Range of automatable working time
SegmentAI impactAutomatable working timeStrongest lever
Customs agency545% to 60%Suggested tariff classification
Data protection consulting435% to 50%Semi-automatic record of processing activities
Product compliance435% to 50%Automatic check of conformity documents
AML, whistleblowing, fire safety325% to 40%Risk analysis from client data
Occupational safety services320% to 35%Risk assessment from templates
Certification body215% to 25%Audit report from notes

GTP assessment as of September 2026. Not a market study. Sources and limits are on each segment page.

Why we buy this sector in particular

Three reasons why we buy in this sector

The obligation stays, whoever governs

Occupational safety under ASiG has been law since 1973. Businesses with more than 50 employees need standard care with a fixed minimum share of 20% (DGUV Regulation 2, revised 01/01/2026, and BGN 2026). This revenue stays even in a recession.

The market is large and fragmented

Germany has 429,318 companies with 10 to 49 employees and 84,701 with 50 to 249 (Destatis business register 2024). Each needs several officers. The providers are mostly owner-managed and regional.

Consolidators buy large providers, we buy from €0.5m EBITDA

Arsipa has kept buying since Warburg Pincus came in (03/2025). Customs Support Group is active in many European countries. Both need large acquisitions. We buy from €0.5m EBITDA.

What your company is worth

Valuation in five sentences, range with source

Valuation logic

  1. We value on the basis of sustainable EBITDA.
  2. Recurring retainers count for more than project revenue.
  3. A high share of mandatory services raises the multiple.
  4. Dependence on the owner lowers it.
  5. We show our calculation openly in the first call.

Value drivers

  • High retainer share of revenue
  • Churn below 10% per year
  • At least 5 qualified specialists with their own client contact
  • Documented processes for inspection, report and follow-up

Value reducers

  • High share of one-off and project revenue
  • Owner as the only knowledge holder or the only accredited person
  • High share of very small mandates below 20 people (Section 38 exposure)

What you get in the first call

The first call takes 30 minutes, is confidential and is held with a partner. We work out your value with your numbers and name the three factors that move it most, including possible discounts. Afterwards you get our assessment in writing, even if we decline.

Request a confidential first call
Market range, third-party source

What comparable companies trade at in the market

Size classEBITDA multiple
Micro-cap, revenue below €5m
The relevant class for most succession cases in this segment
3.5x to 5.5x
Small-cap, revenue €5m to €50m5.0x to 7.0x

Category business services (B2B). Source: DUB KMU-Multiples Q2/2026. The DUB figures show asking prices and price expectations on a business marketplace. They do not include completed transactions. The range comes from an independent third party and is not an offer from GTP.

From multiple to cash

The multiple gives the enterprise value. What reaches your account depends on four items:

Net financial debt
Loans, leases and shareholder accounts are deducted, cash is added.
Working capital
We assume a normal level. An account emptied before the sale reduces the price.
Investment backlog
Vehicles, measuring equipment and software due in the next two years are deducted from the price.
Payment structure
Part of the price is paid only after signing, through a rollover or a performance-based component.
What lowers the value

If one of these points applies, the value drops:

  • The owner personally holds the key customers
  • Short remaining terms or contracts that can be terminated at any time
  • If a large share of revenue depends on one customer, the price goes down.
  • No second management level that runs the business without the owner

We calculate your value in the first call using your numbers. We go through the four items openly with you, even if the result is below your expectations.

What we plan

After the acquisition: what stays and what is added

We build a group from several owner-managed businesses. Each business stays independent and shares back office and purchasing with the others.

Independent, as before

  • Name, brand and your phone number
  • Location and premises
  • Your team and local management
  • Client contracts and the familiar contacts
  • Your prices and your professional signature

What applies to your company, we put in the purchase agreement.

New in the group

Back-office relief
The system handles invoicing runs, documentation and standard correspondence. Your people check and approve.
Recruiting
Joint job postings, training paths and cover between the businesses in the group.
Professional exchange
Four meetings a year with the other owners and managers. Assess interpretation questions, standards and prices together.
Joint client development
Your clients often need services from the sister businesses too. We only recommend them with your consent.
Purchasing and software
Licenses, insurance and measuring equipment on terms a single business does not get.
Capital
Equity from the fund is available for filling positions, expanding locations or add-on acquisitions.
Why this route

Succession is settled, and your business stays independent under its own name. In the group it buys more cheaply and finds staff more easily. You decide whether you keep leading or leave after the handover.

Two types of buyer, one difference

Mid-sized direct buyer or large consolidator?

If the highest price matters most, look at both types of buyer. The table shows what each route means for your team and your role.

Generation Tech PartnersLarge consolidators (Arsipa, Customs Support)
Purchase priceCalculated openly with your numbersOften higher
ResponseUsually within 72 hours, with reasonsWeeks, often in an auction
Name and locationStayOften rebranding and a head office
Your role afterwardsInterim managing director, advisory board, rollover of up to 25%Usually exit after handover
TeamStays, gets back-office reliefIntegration into group processes
Sector knowledgeMarket data, regulation, sub-segments on this pageYes, often deeper

Both routes work directly or through an M&A advisor. We are just as happy to work with an advisor.

Dr. Sebastian Herfurth, Partner at Generation Tech Partners
Why we buy this segment
Your clients have obligations to meet, and your business makes sure they do. We buy businesses that do this reliably. Professional responsibility stays with the people who carry it today.

I am responsible for the purchase agreement and the handover. For businesses that need a license or accreditation, the deal structure decides whether the approval survives the change of ownership.

For M&A advisors, tax advisors and succession advisors

Minimum sizes and teaser metrics for compliance service providers

Here are our minimum sizes per segment and the metrics we need in the teaser.

Minimum sizes per segment

SegmentMinimum size
Occupational safety and company doctor services (platform)150 or more active client companies, 5 specialists
Customs and export controlGuideline of 50 framework clients
Certification and inspection bodiesAccreditation held by at least two people
Data protection and information security150 or more mandates, mostly retainer revenue
Product compliance with a mandate character50 or more mandates with a term
AML, whistleblowing, fire safetyOnly as an add-on

These metrics belong in the teaser

  • Number of client companies or mandates served
  • Retainer share of revenue, churn rate
  • Revenue share of the largest client
  • Accredited or appointed persons per service

What you get from us

  • You usually get a clear answer with reasons within 72 hours. A no also comes in writing.
  • We only approach your client through you.
  • The price in our indicative offer only changes if due diligence shows something different from your documents.
  • Capital comes from our €60m fund. We do not look for investors during the process.
  • If your client does not fit us, we tell you who might.
Frequently asked questions

What owners ask us

Will the DPO obligation be dropped, and what does that mean for the value of my company?

Probably yes, with some lead time. The federal and state governments plan to remove Section 38 BDSG by 12/31/2026 (conference of state premiers, 12/04/2025). As of June 2026 there was no draft bill yet. Very small mandates below 20 people lose value. Mandates with GDPR obligations, an ISO role or a reporting channel remain valuable. That is how we value your mandate book.

Do you also buy occupational safety service providers with less than €5m revenue?

Yes. Our acquisition profile starts at €0.5m EBITDA. More important than size are at least 150 active client companies, a business based on term contracts and at least 5 qualified specialists.

How are you different from Arsipa or Customs Support?

The difference is the size of the target. Arsipa buys with Warburg Pincus behind it. Customs Support operates internationally. Both need large acquisitions. We buy companies with €0.5m to €5m EBITDA. With us, your company becomes the platform on which we build further add-ons.

Can I sell a customs agency if I only have 40 framework clients?

Yes. 50 framework clients is our guideline. Below that, we are happy to take a look if client loyalty is high. What matters is churn below 10%, the powers of attorney and whether your clerks hold the client relationships.

How long do I have to stay after the sale?

You decide. 6 to 24 months as interim managing director is common, often followed by an advisory board seat. For accreditations tied to you personally, we plan together how to build up a second authorized signatory.

What happens to my specialists?

All employment contracts remain in place. That is a condition of the purchase. The system takes over documentation and standard checks, your specialists check and approve. This sector is short of specialists. There is plenty of demand.

How quickly do I get an answer?

Usually within 72 hours after the first call. You get a written assessment with a value range, open questions and a proposal for next steps. If your company does not fit, we say so just as clearly.

Should I sell with an M&A advisor?

That is your decision. Many owners work with an advisor, and we are happy to work with them. A good advisor prepares documents and saves both sides time. If you come directly, the partners run the process themselves. In any case, you should bring in your own lawyer and tax advisor.

Our team, the process at a glance, press and common questions about selling are on our main site.

First step

Talk to a buyer who knows your sector

A 30-minute call is enough to know whether we fit. Afterwards you get a written assessment with reasons.

Request a confidential first call

Or call us: +49 40 89741812

ConfidentialOnly the three partners see your enquiry. An NDA is possible in advance on request. We share nothing with third parties.
Back
Request a confidential first call