Basenorm vs Instant 27001
Basenorm vs Instant 27001 Living platform or document toolkit?
Instant 27001 is a battle-tested ISO 27001 documentation toolkit with a 100% first-time certification track record across 2,500+ organisations, delivered as a one-time licence on top of Confluence or Microsoft 365. Basenorm is the AI-native living platform where controls, risks and evidence are connected entities, chosen when compliance scope extends beyond ISO 27001 and when your team wants an AI assistant for the ongoing operation, not only certification.
Hosted in the Netherlands. Your data stays in the EU.Basenorm in brief
- Vendor
- Dutch companyEuropean by origin
- Hosting
- The NetherlandsMicrosoft Azure, West Europe
- Lead frameworks
- ISO 42001 and ISO 27001With NIS2, DORA, GDPR and the AI Act
- Pricing
- Public, from €250 per monthFoundation layer
01 / Why Basenorm
What stays the same, whoever we are compared with.
ISO 42001 and ISO 27001 on one library
Your AI management system builds on your ISMS. Define a control once and see which standards it counts for, and which not.
EU-native by default
A Dutch vendor, hosted in the Netherlands, with a database per organisation. No opt-in needed for EU hosting.
AI that assists, people who decide
AskNorman explains, drafts and searches, in Basenorm or in your own assistant through MCP. Your team assesses and decides.
02 / When to choose which
An honest choice.
Choose Instant 27001 if
- You want a battle-tested ISO 27001 documentation toolkit with a money-back guarantee.
- A one-time licence fee (€2,495 to €4,495) is a better financial fit than a recurring SaaS subscription.
- Your programme already uses Confluence or Microsoft 365 as the operating platform.
- You prefer to host ISMS content on your own infrastructure (your Confluence or M365 tenant).
- ISO 27001 is the primary target; other frameworks are adjacencies you can add later.
Choose Basenorm if
- ISO 27001 is one framework among many (NIS2, DORA, EU AI Act, AVG, BIO) in your real scope.
- You want a living compliance platform with continuous monitoring, not static documents that need manual updating.
- An AI-first assistant (AskNorman) for drafting, analysis and gap detection fits your operating model.
- A Governance Graph with entity relationships fits how you think about controls, risks and evidence.
- You prefer a SaaS model with continuous product updates over a one-time licence you self-maintain.
03 / Feature by feature
Side by side.
| Topic | Basenorm | Instant 27001 |
|---|---|---|
| ISO 27001 supportInstant 27001's primary focus with a 100% first-time certification claim across 2,500+ organisations. | Supported | Supported |
| SOC 2 supportAvailable as an Instant 27001 add-on. | Supported | Partial |
| NIS2 coveragePositioned as compliance support rather than native modelling. | Supported | Partial |
| DORA coverage | Supported | Partial |
| GDPR / AVG support | Supported | Supported |
| EU AI Act supportVia ISO 42001 add-on. | Supported | Partial |
| BIO (Dutch public-sector baseline) | Supported | Partial |
| Pre-built ISO 27001 document templatesInstant 27001 ships ~20 policies and ~10 procedures ready to use. | Partial | Supported |
| One-time licence (no subscription)Instant 27001: €2,495 to €4,495 one-time. Basenorm: SaaS subscription. | Not available | Supported |
| Deployed on your own Confluence or M365 | Not available | Supported |
| AI-first assistant as primary surface | Supported | Partial |
| Governance Graph (linked entities) | Supported | Not available |
| Unified Control Library | Supported | Partial |
| Continuous platform updatesInstant 27001 ships template updates; Basenorm ships continuous platform updates. | Supported | Partial |
| Evidence collection automationInstant 27001 provides templates; evidence collection is manual inside Confluence or M365. | Supported | Partial |
| Multi-framework control mapping | Supported | Partial |
| Custom frameworks | Supported | Partial |
| Money-back guaranteeInstant 27001 offers a money-back guarantee. | Not available | Supported |
| Publicly listed pricingBoth publish pricing publicly. | Supported | Supported |
| EU-headquartered vendor | Supported | Supported |
Comparison information is based on publicly available sources as of April 2026. Vendor features and pricing change frequently; please verify with each vendor before making a decision.
04 / In detail
Document toolkit vs living platform
Instant 27001 is a documentation toolkit: pre-built policies, procedures, risk templates and a Statement of Applicability skeleton that you deploy into Confluence or Microsoft 365 and then maintain. It excels at getting organisations to their first ISO 27001 certification with a claimed 100% first-time success rate across 2,500+ organisations. Basenorm is a living platform: controls, risks, assets and evidence are entities in the Governance Graph, continuously monitored, with AskNorman interpreting evidence and drafting changes in response to framework updates.
- Instant 27001: documentation toolkit deployed to your own Confluence or M365.
- Basenorm: living SaaS platform with continuous monitoring and AI assistance.
- Different operating models: Instant 27001 optimises for certification; Basenorm optimises for ongoing operation.
One-time cost vs recurring SaaS
Instant 27001 licences at €2,495 (Startup) to €4,495 (Enterprise) as a one-time fee, a compelling financial model for teams that want certification without a long-term subscription. Basenorm is a recurring SaaS where the product itself evolves continuously, regulatory updates ship within 24-48 hours, and the platform grows with your scope. Both models are honest; they serve different financial preferences and compliance scopes.
- Instant 27001: €2,495 to €4,495 one-time licence; renewals optional for template updates.
- Basenorm: SaaS subscription with continuous product updates included.
- Include maintenance cost in the comparison: Instant 27001 teams self-maintain; Basenorm ships updates.
Framework scope: ISO 27001 or multi-framework
Instant 27001's core product is ISO 27001; other frameworks (SOC 2, ISO 27701, ISO 42001, VDA-ISA 6/TISAX) are add-ons. Basenorm is multi-framework from the core, with ISO 27001, NIS2, DORA, EU AI Act, BIO, AVG, SOC 2 and ISAE 3402 as first-class frameworks sharing a Unified Control Library. For teams targeting ISO 27001 only, Instant 27001's depth is excellent; for teams with a broader EU-regulatory scope, Basenorm's UCL scales better.
- Instant 27001: ISO 27001-primary with framework add-ons.
- Basenorm: multi-framework through the Unified Control Library from day one.
- NIS2, DORA and EU AI Act get native treatment in Basenorm; Instant 27001 positions them as compliance support.
AI-first vs template-first operation
Instant 27001's value is its template library: policies and procedures proven across 2,500+ certifications. Basenorm's value is AI-first operation: AskNorman drafts controls, interprets evidence and closes gaps continuously. Both reduce workload; the difference is whether your team prefers starting from proven templates and maintaining them manually, or starting from an AI assistant that keeps the content current.
- Instant 27001: proven pre-built templates, maintained by your team after deployment.
- Basenorm: AskNorman AI drafts, interprets and updates content as frameworks and evidence change.
- Combining both is possible: export Instant 27001 content into Basenorm and let AskNorman maintain it.
Switching to Basenorm
Switching from Instant 27001 to Basenorm
Teams move from Instant 27001 to Basenorm after their first ISO 27001 certification, when ongoing operation, not initial certification, becomes the bigger workload, or when scope expands beyond ISO 27001 into EU-specific regulation. The migration preserves everything Instant 27001 provided: export the policies, procedures, risk register, Statement of Applicability and audit records from Confluence or Microsoft 365; upload to Basenorm; AskNorman analyses each document and maps it semantically to the Unified Control Library. Your Instant 27001 template investment becomes the starting library for Basenorm's governance graph. Most teams complete the migration inside one quarter, with Basenorm's AskNorman taking over ongoing maintenance so the content stays current without manual template revisions.
05 / Questions
Frequently asked
questions.
Is Basenorm an alternative to Instant 27001?
Yes, for teams that have outgrown the documentation-toolkit model, typically after first certification or when compliance scope expands beyond ISO 27001 into NIS2, DORA, EU AI Act or BIO. For first-time ISO 27001 with a fixed one-time budget, Instant 27001 remains one of the strongest options.
What is Instant 27001?
Instant 27001 is a documentation toolkit (policies, procedures, risk templates, Statement of Applicability skeleton) delivered as a one-time licence on top of Confluence or Microsoft 365. It is headquartered in the Netherlands with a claimed 100% first-time certification success rate across 2,500+ organisations.
Can I import my Instant 27001 documentation into Basenorm?
Yes. Export your policies, procedures, risk register, Statement of Applicability and audit records from Confluence or M365 and upload them to Basenorm. AskNorman analyses and maps each document semantically to the Unified Control Library. Your template investment becomes the starting library for your governance graph.
Why choose a subscription SaaS over a one-time toolkit?
If your compliance operation is stable and ISO 27001 is your only framework, a one-time toolkit like Instant 27001 can be more cost-effective. If your scope expands, your frameworks evolve (24-48h regulatory updates), or you want continuous AI-assisted operation, a SaaS platform like Basenorm scales better.
Does Basenorm work on Confluence?
Basenorm runs as a standalone SaaS, not as a Confluence app. However, Basenorm integrates with Confluence to pull policy documents and link them to controls, so your existing Confluence content remains accessible after moving the ISMS governance to Basenorm.
Does Instant 27001 support NIS2 and DORA?
Instant 27001 positions NIS2 and DORA as compliance support with their ISO 27001 base. Basenorm treats both as first-class frameworks in the Unified Control Library with 24-48h regulatory updates, which is typically the differentiator for teams whose scope is EU-regulation-heavy.
Book a demo
Compare it in your own context.
In a demo we look at your frameworks and how Basenorm fits next to what you use today.
- Which frameworks you run now and next.
- How ISO 42001 builds on your ISO 27001.
- What moving your controls and evidence involves.
Hosted in the Netherlands. Your data stays in the EU.
Disclosure: Basenorm is the platform we build. We aim for accuracy and fairness, cite public sources where possible, and encourage you to verify every claim with the respective vendor.