4 min readGRC
Read article
What is Kardu?
Kardu is a governance, risk and compliance platform built for European SMEs. Here's what it does, who it's for and why it exists.
César Mella Diaz2 Jun 2026
Essential resources for compliance and cybersecurity
Clear guides to understand what your clients ask for and how to respond.
4 min read
8 min readGRC
Does compliance pay off for an SME?
For an SME, compliance that only avoids fines runs at a loss. Compliance that lets you prove your security on time wins you contracts. The figures, with their sources, and a return model with its assumptions in plain sight.
César Mella Diaz3 Oct 2026
6 min readLaw 21.719
How do you comply with Chile's Law 21.719?
Seven practical actions, in order, so your SME is ready when Chile's data protection law, Law 21.719, takes effect.
César Mella Diaz15 Sept 2026
5 min readLaw 21.719
Does your SME need a data protection officer?
What the data protection officer under Chile's Law 21.719 is, when you have to appoint one, who can do it in an SME and what the law asks of them.
César Mella Diaz15 Sept 2026
7 min readLaw 21.719
Is GDPR compliance enough for Chile's Law 21.719?
If your company already complies with GDPR because it operates in Europe, you don't start from zero with Chile's Law 21.719, but you don't comply automatically either. These are the differences that matter: deadlines, fines, breaches, transfers and the infringement prevention model.
César Mella Diaz15 Sept 2026
6 min readNIS2
What is NIS2?
NIS2 is the European cybersecurity directive that requires thousands of companies to demonstrate active security measures. Here's what it is, who it applies to, and why it affects suppliers who aren't even on the list.
César Mella Diaz1 Jun 2026
6 min readISO 27001
Is your client asking for ISO 27001?
If a large client sent you a security questionnaire or asked for your ISO 27001, it's not a whim: often it's their own obligation. Here's why it lands on you and how to answer it without a consultant.
César Mella Diaz1 Mar 2026