Security and EU hosting
Your auditor will ask how we protect your data.
Your management system holds sensitive information: risks, incidents, evidence and AI systems. Here is how Basenorm protects it, where it is hosted and how you stay in control of access.
Hosted in the Netherlands. Your data stays in the EU.Security in brief
- Hosting
- The NetherlandsMicrosoft Azure, West Europe region
- Encryption
- TLS 1.3 and AES-256In transit and at rest
- Isolation
- A database per organisationNo shared tables between customers
- Access
- SSO, MFA and rolesOwner, admin, user and auditor
01 / Measures
How we
protect your data.
These measures apply to every customer, in every plan.
- Encrypted
Data is encrypted in transit with TLS 1.3 and at rest with AES-256.
- Hosted in the EU
Based and hosted in the Netherlands, on Microsoft Azure in the West Europe region.
- Separated per organisation
Every organisation has its own database. Data is not shared between customers.
- SSO and MFA
Single sign-on via Microsoft Entra ID. Multi-factor authentication can be enforced per organisation.
- Roles and permissions
Roles for owner, admin, user and auditor. Least privilege by default.
- Audit trail
Every action is recorded in an immutable audit trail, exportable for external audits.
02 / Hosting and agreements
Where your data is,
and on what terms.
Basenorm B.V. is a Dutch company. Your data stays on EU infrastructure and every customer receives a data processing agreement.
- 1Data location
Microsoft Azure, West Europe region, in the Netherlands.
- 2Infrastructure
Microsoft Azure holds certifications such as ISO 27001 and SOC 2 for its cloud services. These apply to the infrastructure, not to Basenorm as a company.
- 3Data processing agreement
Every customer receives a data processing agreement under the GDPR.
- 4AskNorman and MCP
Which information and actions are available through AskNorman and MCP depends on your permissions and how the connection is set up.
03 / For your auditor
What you can show.
Auditor access
Give your auditor read access to controls and evidence with the auditor role.
Audit trail export
Export the audit trail to show who did what, and when.
Security documentation
Ask our team for the security documentation you need for your supplier assessment.
04 / Questions
Questions about
security.
Where is our data stored?
Basenorm is based and hosted in the Netherlands, on Microsoft Azure in the West Europe region. All customer data stays on EU infrastructure.
Is our data encrypted?
Yes. Data is encrypted in transit with TLS 1.3 and at rest with AES-256.
Is our data separated from other customers?
Yes. Every organisation has its own database, so data is not shared between customers.
Can we use single sign-on?
Yes. Basenorm supports single sign-on via Microsoft Entra ID, and multi-factor authentication can be enforced per organisation.
Do we get a data processing agreement?
Yes. Every customer receives a data processing agreement.
Is Basenorm itself certified?
The certifications such as ISO 27001 and SOC 2 mentioned on this page belong to Microsoft Azure, the infrastructure Basenorm runs on. Ask our team for the security documentation you need for your supplier assessment.
Questions about security
Talk to us about your supplier assessment.
We answer your questions about how we protect your data, or walk you through it in a demo.
- Your security questionnaire.
- The data processing agreement.
- Roles, SSO and auditor access.
Hosted in the Netherlands. Your data stays in the EU.