Platform
One control library for ISO 42001 and ISO 27001.
Basenorm brings controls, risks, evidence and owners together in one EU-native platform. You maintain shared work once and add what each standard asks for.
Hosted in the Netherlands. Your data stays in the EU.The platform in brief
- Library
- Unified Control LibraryA control is defined once and linked to every standard it counts for
- Relations
- Governance GraphControls, risks, evidence and owners connected
- Assistant
- AskNormanIn Basenorm or via MCP from your AI assistant
- Hosting
- The NetherlandsMicrosoft Azure, West Europe region
01 / How it works
Four steps.
One system.
The control is the starting point. Everything else, from risks to evidence and owners, attaches to it. Standards are views on the same set of controls.
- 1Define controls once
Set up a control in the Unified Control Library and see which standards it counts for.
- 2Link risks, evidence and owners
Connect what supports a control, so evidence is maintained once.
- 3See what is open per standard
Follow per standard which controls and evidence still need work.
- 4Ask Norman, then decide
Ask about status and gaps. You review the evidence and decide the next step.
Whether a control and its evidence are adequate is assessed per organisation.
02 / Building blocks
What you manage
in Basenorm.
These are the objects of your management system. They are not separate modules: they share one data model, so a change is visible wherever it matters.
- Controls
Owner, status and the standards each control counts for.
- Risks
Inherent and residual risk, linked to controls and assets.
- Documents and policies
Versions, owners and review dates, linked to controls.
- Evidence
Linked once to a control and reused where that control counts.
- Tasks
Recurring checks and follow-up actions with owners and deadlines.
- Assets, suppliers and AI systems
Systems, suppliers and AI systems with owner, criticality and intended use.
03 / Continuous assurance
Between audits,
not only around them.
Both ISO 42001 and ISO 27001 ask for a management system that keeps improving. Basenorm supports that cycle, so the state of your controls is current when you need it.
- 1Plan
Set scope, assess risks and choose controls.
- 2Do
Carry out controls and link the evidence.
- 3Check
Monitor, run internal audits and hold management reviews.
- 4Act
Follow up on findings and improve.
04 / The platform
Look deeper.
Unified Control Library
One control, multiple standards. See where a control counts and where it does not.
02Governance Graph
Follow the links between controls, risks, evidence and owners.
03AskNorman
Ask about your controls, risks and evidence, in Basenorm or via MCP.
04Security and EU hosting
How Basenorm protects your data, hosted in the Netherlands.
05 / Questions
Questions about
the platform.
What is Basenorm?
Basenorm is an EU-native platform for ISO 42001 and ISO 27001. You run your AI management system and your ISMS on one control library, and add other frameworks when you need them.
Which frameworks does Basenorm support?
ISO 42001 and ISO 27001 lead. NIS2, DORA, GDPR, the EU AI Act, SOC 2, ISAE 3402, PCI DSS, HIPAA, BIO and your own frameworks run on the same library.
Can we use our own AI assistant?
Yes. Via MCP you work with AskNorman from a supported AI assistant, such as ChatGPT or Claude. Which information and actions are available depends on your permissions and how the connection is set up.
Where is our data stored?
Basenorm is based and hosted in the Netherlands. All customer data stays on EU infrastructure and every customer receives a data processing agreement.
How do we start?
In a demo we look at your current setup and scope. Pricing for the Foundation layer starts at €250 per month; see the pricing page for details.
Book a demo
See the platform in your own context.
Together we look at your standards, your current setup and your next step.
- Which controls and evidence you can reuse.
- How risks, evidence and owners connect.
- How AskNorman fits the way your team works.
Hosted in the Netherlands. Your data stays in the EU.