About Basenorm
Compliance that starts from the control.
Basenorm is an EU-native platform for ISO 42001 and ISO 27001. You run your AI management system and your ISMS on one control library, with AskNorman as an assistant and your team in charge of every decision.
Hosted in the Netherlands. Your data stays in the EU.In brief
- Based in
- The NetherlandsA European company
- Hosting
- Microsoft Azure, West EuropeYour data stays in the EU
- Focus
- ISO 42001 and ISO 27001With NIS2, DORA, GDPR and the AI Act
- Assistant
- AskNormanIn Basenorm or via MCP
01 / What Basenorm is
One library,
many standards.
Basenorm is built around the control, not around a single framework or a single audit.
- 1Control-first
You define a control once and link it to every standard it counts for. Evidence is attached to the control, not to a framework project.
- 2ISO 42001 and ISO 27001 together
Your AI management system builds on your ISMS. Shared processes are maintained once, and AI-specific requirements are added where they are needed.
- 3Assurance between audits
Controls, evidence and owners stay current throughout the year, so your auditor sees how your management system works.
02 / Why we built it
The same control,
in five spreadsheets.
We saw security and compliance teams maintain the same control in separate spreadsheets for each standard, with evidence scattered across drives.
- 1One place for each control
A control lives once, with its owner, its evidence and the standards it counts for.
- 2AI as a new management system
ISO 42001 and the AI Act add AI governance to the work. We built it on the ISMS you already have, instead of next to it.
- 3European by default
European frameworks, hosting in the Netherlands and a database per organisation, from the start.
03 / Principles
How we
build.
These principles guide the product and how we work with customers.
- You decide
AskNorman explains, drafts and searches. Your team assesses and decides.
- Security by design
Encryption in transit and at rest, a database per organisation and an immutable audit trail.
- No empty claims
We show where a control counts and where it does not. Overlap is assessed per control.
- Open to your tools
Connect your own AI assistant through MCP, or bring your own API key.
04 / Questions
Questions about
Basenorm.
What is Basenorm?
Basenorm is an EU-native platform for ISO 42001 and ISO 27001. You run your AI management system and your ISMS on one control library: shared controls and evidence are maintained once, and AI-specific requirements are added where they are needed.
What is an online ISMS?
An online ISMS is software that holds the policies, risk assessments, controls, evidence, internal audits and management reviews of an information security management system, such as one based on ISO 27001. Basenorm is an online ISMS that also carries your AI management system for ISO 42001.
Where is Basenorm based and where is our data hosted?
Basenorm is a Dutch company. Customer data is hosted on Microsoft Azure in the West Europe region in the Netherlands and stays in the EU.
Who works with Basenorm?
CISOs, security officers, IT managers and compliance leads at European organisations that run ISO 27001, are adding ISO 42001, or need to meet NIS2, DORA or the AI Act.
Does Basenorm certify our organisation?
No. An independent certification body performs the audit and decides on the certificate. Basenorm helps you set up, run and demonstrate your management system.
Book a demo
Meet the team behind Basenorm.
In a demo we look at your situation and show how Basenorm works.
- Where you stand with ISO 27001 and ISO 42001.
- What you can reuse from today.
- How AskNorman fits your team.
Hosted in the Netherlands. Your data stays in the EU.