Meet
AskNorman™ AI
Basenorm's AI reasoning layer that interprets controls, risks and evidence across frameworks.
AskNorman is built on your Governance Graph and Unified Control Library. It understands your real compliance context and turns connected data into insight, prioritisation and confident decision-making.
AskNorman™
AI Reasoning Layer
Built on your Governance Graph
Compliance requires reasoning — not just automation.
Most compliance tools automate tasks. AskNorman reasons over your controls, risks, documents, assets and tasks because it understands how they are connected.
- Context-aware
- Regulation-aware
- Object-aware
- Audit-ready
- EU-first by design
Reasoning vs Automation
Traditional Tools
Automate tasks in isolation
AskNorman AI
Reasons over connected data
Understands connections between:
Connected Model
How AskNorman sees your data
AI Insight
"3 controls linked to risk R-007 have evidence gaps. Owner: Security Team."
AI that understands your compliance model.
AskNorman reasons over the same connected model that powers assurance: controls mapped across frameworks, linked to risks, evidence and ownership.
- Control gaps
- Evidence summaries
- Risk impact
- Owner validation
- Framework mapping
- Audit explanations
Natural language queries with real governance context.
Ask questions in plain language. AskNorman answers using your actual controls, risks and evidence.
- Show missing NIS2 mappings
- Which controls lack evidence
- What risks are affected by this asset
- Why is this control failing
- What changed since the last audit
Example Queries
Plain language queries with real governance context
Your Real Data
Not hallucinated — from your Governance Graph
Powered by your real data.
AskNorman does not hallucinate. It reasons over your Governance Graph, using real objects and relationships.
- Controls
- Risks
- Assets
- Documents
- Tasks
- Owners
- Frameworks
- Evidence
AI that understands all your frameworks.
Because controls are mapped once and reused, AskNorman reasons consistently across ISO 27001, SOC 2, NIS2, DORA, GDPR and the EU AI Act.
- ISO 27001
- SOC 2
- NIS2
- DORA
- GDPR
- EU AI Act
Consistent reasoning across all frameworks
Controls mapped once, understood everywhere
Action Required
AI that helps your team take action.
AskNorman highlights what matters now, not just what exists.
- Overdue tasks
- Missing evidence
- Incomplete controls
- High-risk assets
- Non-compliant states
Built for EU governance requirements.
AskNorman is designed around European regulatory logic, not retrofitted from US certification tooling.
- NIS2
- DORA
- GDPR
- EU AI Act
- ISO 27001
EU-First Design
Built for European regulatory logic