Kardu
Carduelis carduelis, the European goldfinch, in flight

The thistle is a thick-stemmed plant, armed with spines, that few dare to touch. Carduelis carduelis, the European goldfinch, does not avoid it, it seeks it out. With its fine beak and characteristic precision, it extracts exactly what it needs from where others see only obstacles.

From Europeto Europe.

We built Kardu because European SMEs deserve a compliance tool designed for them: simple, efficient and without dependence on expensive solutions that do not benefit the European ecosystem.

The principles we don't negotiate.

Every product and architecture decision passes through these three filters.

Security by design

We build Kardu with the same principles we preach. Every architecture decision prioritizes the security and privacy of our clients' data.

Europe by design

We are not an American company with servers in Europe. We are a European product, built for European companies, with data that never leaves the EU.

The human always decides

No decision affecting compliance status is made without explicit human action. Automation prepares. The human judges.

The system never asserts non-compliance, it signals gaps

No evidence, no control

Every action generates an immutable record

Public pricing. No mandatory demo

Data in Frankfurt. No CLOUD Act exposure

Open sub-processors. Always

César Mella Díaz

THE FOUNDER

Passionate about cybersecurity and technology, in an attempt to bring efficiency to the European ecosystem, he built the platform he needed himself.

1

December 2025

The idea is born

After years managing compliance with spreadsheets and American tools, the decision: build what we needed.

2

February 2026

Building the MVP

We started building the SaaS after two months of research with European operations teams and compliance managers.

3

March 2026

First pilot companies

We started working with the first European companies that want to lead their compliance.

4

August 24, 2026

Now

Full MVP

Official launch with all 5 complete frameworks and public Trust Center.