Docue is a fast-growing legal tech company helping businesses create legally binding documents quickly and confidently. Their smart platform combines automation, expert-built templates, and electronic signing in one solution.

Today, SMEs across Europe rely on Docue to handle everything from employment contracts to commercial agreements, with localized legal content for Finland, Sweden, Germany, the UK, and Poland.

‍

As their customer base grew, especially with large, security-conscious enterprises, Docue needed to strengthen their information security posture. Instead of hiring consultants or launching a complex project, they turned to Cyberday.

Compliance pressure kicks in

Docue had strong security practices in place from the start, especially around product development and maintenance. But these practices weren’t formally documented or structured under any recognized compliance framework.

“We weren’t aiming for a certificate initially,” said Lars Remes, Docue’s product manager and CISO. “But our customers, some of them large public companies, started asking questions. Eventually, the pressure to prove compliance became unavoidable.”

NIS2 and national cybersecurity laws added to that urgency. Docue realized ISO 27001 certification would soon be a baseline requirement for vendors like them.

They needed a solution that wouldn’t pull team members away from their core work.

“We evaluated different solutions. What appealed about Cyberday was that it gave us the tools and knowledge to handle the work ourselves, at our own pace.”
_{Lars Remes, Product Manager & CISO, Docue}

A system that fit

Docue chose Cyberday because it gave them control. “We could get started immediately, without needing to schedule a kick-off workshop or make a big project plan,” Lars said.

Even without a certification goal at the outset, Cyberday gave them a concrete path forward. They started small, getting visibility into what needed to be done, and gradually involved more people from finance, administration, and other departments.

“It was important that we could start using the system without having to commit to a huge project,” Lars said.

Cyberday’s structured task lists, role assignments, and dashboard views helped Docue bring structure to what was a significant, months-long effort.

"We just set the goal: everything needs to be green in Cyberday. That gamified the process in a good way."

“Cyberday helped us stay on top of the process, but certification still required sustained commitment from across the company,” Lars said.