Basenorm vs IsoPlanner
Basenorm vs IsoPlanner Two Dutch ISMS platforms, two philosophies
IsoPlanner is the Microsoft 365-native ISMS for teams that already live inside SharePoint, Teams and Outlook, with broad ISO-standards coverage at a low entry point because it rides on top of your existing M365 tenant. Basenorm is the platform-agnostic EU online ISMS with an AI-first workflow and a Governance Graph, built for teams who want controls, risks and evidence modelled as linked entities rather than embedded as M365 artefacts.
Hosted in the Netherlands. Your data stays in the EU.Basenorm in brief
- Vendor
- Dutch companyEuropean by origin
- Hosting
- The NetherlandsMicrosoft Azure, West Europe
- Lead frameworks
- ISO 42001 and ISO 27001With NIS2, DORA, GDPR and the AI Act
- Pricing
- Public, from €250 per monthFoundation layer
01 / Why Basenorm
What stays the same, whoever we are compared with.
ISO 42001 and ISO 27001 on one library
Your AI management system builds on your ISMS. Define a control once and see which standards it counts for, and which not.
EU-native by default
A Dutch vendor, hosted in the Netherlands, with a database per organisation. No opt-in needed for EU hosting.
AI that assists, people who decide
AskNorman explains, drafts and searches, in Basenorm or in your own assistant through MCP. Your team assesses and decides.
02 / When to choose which
An honest choice.
Choose IsoPlanner if
- Your organisation is deeply committed to Microsoft 365 and works primarily in SharePoint, Teams and Outlook.
- You want a low entry point that builds on M365 licensing you already have.
- Broad ISO-standards coverage (40+ standards) is a plus for your programme.
- Being a Microsoft Partner solution matters for your procurement or IT approval.
- You value the track record of a Dutch vendor already serving 600+ organisations.
Choose Basenorm if
- ISO 27001 plus NIS2, DORA and EU AI Act is your real scope, not only ISO-standards breadth.
- You want an AI-first workflow (AskNorman) that drafts controls and interprets evidence, not M365-form-driven data entry.
- Platform-agnostic governance matters: you don't want your ISMS welded to your current M365 tenant.
- A Governance Graph with semantic entity relationships fits how you think about controls, risks and assets.
- You prefer publicly listed pricing to evaluation-call pricing.
03 / Feature by feature
Side by side.
| Topic | Basenorm | IsoPlanner |
|---|---|---|
| ISO 27001 support | Supported | Supported |
| SOC 2 support | Supported | Supported |
| ISO 9001 support | Supported | Supported |
| NIS2 native coverage | Supported | Supported |
| DORA native coverageIsoPlanner's 40+ standards list includes broad compliance but DORA depth is less emphasised than ISO standards. | Supported | Partial |
| EU AI Act supportISO 42001 overlap; the EU AI Act itself is not explicitly listed in IsoPlanner's standards set. | Supported | Partial |
| BIO (Dutch public-sector baseline) | Supported | Supported |
| AI-first assistant as primary surfaceIsoPlanner uses Microsoft Copilot integration; AskNorman is Basenorm's purpose-built primary surface. | Supported | Partial |
| Governance Graph (linked entities) | Supported | Not available |
| Unified Control Library (define once, map many) | Supported | Partial |
| Microsoft 365 native deploymentIsoPlanner runs natively inside SharePoint, Outlook, Teams, Power BI, Dynamics. Basenorm integrates with M365 but runs as a standalone platform. | Partial | Supported |
| Platform-agnostic (works without M365)IsoPlanner requires a Microsoft 365 tenant. | Supported | Not available |
| Continuous audit-readiness model | Supported | Supported |
| Statement of Applicability management | Supported | Supported |
| Evidence collection automationIsoPlanner collects evidence via M365 artefacts; Basenorm through AI document analysis and integrations. | Supported | Supported |
| Multi-framework control mapping | Supported | Supported |
| Custom frameworks | Supported | Supported |
| EU-headquartered vendorBoth are headquartered in the Netherlands. | Supported | Supported |
| Publicly listed pricingIsoPlanner pricing is via free trial or demo request; not publicly listed. | Supported | Not available |
| Free trial availableBasenorm: a trial is available on request through a demo. Both offer free trials. | Partial | Supported |
Comparison information is based on publicly available sources as of April 2026. Vendor features and pricing change frequently; please verify with each vendor before making a decision.
04 / In detail
Microsoft 365-embedded vs platform-agnostic
IsoPlanner's core idea is to work where your team already works, inside SharePoint, Teams, Outlook, Power BI and Dynamics. It's a strong idea if your organisation is deeply committed to M365. Basenorm is platform-agnostic: it integrates with M365 (and Google Workspace, Jira, Confluence, Slack) but runs as a standalone SaaS with its own data model, so your ISMS is not welded to any one productivity suite.
- IsoPlanner: M365-tenant-native; lives inside SharePoint lists, Teams and Outlook.
- Basenorm: standalone SaaS with integrations; no platform dependency.
- If your team lives in Google Workspace or a hybrid stack, IsoPlanner is less of a fit.
EU regulatory depth beyond ISO standards
IsoPlanner's 40+ standards catalogue is broad across ISO families (27001, 9001, 14001, 45001, 27701, etc.) and includes NIS2. Basenorm goes deeper on EU-specific regulation, NIS2, DORA, EU AI Act, AVG and BIO as first-class frameworks, with regulatory updates integrated within 24-48 hours of publication by EU institutions.
- IsoPlanner: broad ISO-standards breadth, strong for multi-ISO programmes.
- Basenorm: deeper EU regulatory modelling for NIS2, DORA, EU AI Act, BIO.
- For public-sector (BIO) and multi-EU-regulation programmes, Basenorm's EU depth is typically the differentiator.
Data model: M365 artefacts vs Governance Graph
IsoPlanner models the ISMS as M365 artefacts, SharePoint lists for controls and risks, documents in document libraries, tasks in Planner or Teams, reports in Power BI. It's familiar to M365 power users. Basenorm uses a Governance Graph: controls, risks, assets, suppliers, policies and evidence are first-class entities with semantic relationships, so a change in one propagates its consequences to all linked entities.
- IsoPlanner: ISMS objects modelled as M365 artefacts.
- Basenorm: ISMS objects as first-class entities with semantic relationships in the Governance Graph.
- The Governance Graph scales better when you have many overlapping frameworks and many interrelated entities.
Pricing transparency
IsoPlanner's entry price is low because it builds on your existing M365 licensing, but IsoPlanner itself requires a free-trial sign-up or demo call to see pricing. Basenorm publishes pricing publicly on basenorm.com/pricing. Both are Dutch vendors; both can be evaluated by Dutch compliance teams in their local language.
- Basenorm: publicly listed pricing; standalone SaaS.
- IsoPlanner: low entry point on top of M365; pricing disclosed after trial or demo.
- Total cost comparison should include M365 tenant and per-user licences for IsoPlanner deployment.
Switching to Basenorm
Switching from IsoPlanner to Basenorm
Organisations move from IsoPlanner to Basenorm when two things converge: their compliance scope grows into EU-specific regulation (NIS2, DORA, EU AI Act, BIO) where native modelling matters, and their ISMS starts feeling constrained by its M365 container. The migration path exports ISMS content from IsoPlanner's SharePoint lists, Word documents and Power BI reports, then uploads it to Basenorm where AskNorman maps each artefact semantically to the Unified Control Library. Your Word policies and Excel risk registers do not need to be rewritten, they become source documents that AskNorman interprets into linked entities in the Governance Graph. Most teams complete the migration inside one quarter. Existing M365 integrations stay useful: Basenorm continues to pull evidence from SharePoint, Teams and OneDrive, even after the ISMS itself moves out of M365.
05 / Questions
Frequently asked
questions.
Is Basenorm an alternative to IsoPlanner?
Yes, for organisations whose scope extends beyond ISO-standards breadth into EU-specific regulation (NIS2, DORA, EU AI Act, BIO) and who want a platform-agnostic ISMS with AI-first workflow rather than an M365-embedded one.
Is IsoPlanner Dutch?
Yes. IsoPlanner is headquartered in Driebergen-Rijsenburg, the Netherlands, the same country as Basenorm.
Does Basenorm require Microsoft 365?
No. Basenorm is a standalone SaaS platform and integrates with Microsoft 365, Google Workspace, Jira, Confluence, Slack and other tools. It does not require an M365 tenant.
How does IsoPlanner's Microsoft 365 integration compare to Basenorm's?
IsoPlanner lives natively inside M365 (SharePoint, Teams, Outlook, Power BI, Dynamics), the ISMS is modelled as M365 artefacts. Basenorm integrates with M365 to pull evidence and documents but stores ISMS data in its own Governance Graph, which means your ISMS is not dependent on your M365 tenant's lifecycle.
Which is a better choice for NIS2 and DORA?
Both cover NIS2 and DORA, but Basenorm treats them as first-class frameworks in its core data model with regulatory updates integrated within 24-48 hours. IsoPlanner covers NIS2 through its 40+ standards catalogue; DORA depth varies.
How do pricing models compare?
IsoPlanner has a low entry point because it builds on your existing M365 tenant; pricing is disclosed after a free-trial sign-up or demo. Basenorm publishes pricing publicly on basenorm.com/pricing. Total cost comparison should include M365 per-user licences for IsoPlanner deployment.
Book a demo
Compare it in your own context.
In a demo we look at your frameworks and how Basenorm fits next to what you use today.
- Which frameworks you run now and next.
- How ISO 42001 builds on your ISO 27001.
- What moving your controls and evidence involves.
Hosted in the Netherlands. Your data stays in the EU.
Disclosure: Basenorm is the platform we build. We aim for accuracy and fairness, cite public sources where possible, and encourage you to verify every claim with the respective vendor.