MCP, API and agents

MCP, API and agents for ISO 42001 and ISO 27001

Your compliance work continues beyond the platform. Work from your own AI assistant, let a system deliver data or have an agent run a defined task. Basenorm brings the work and the evidence together, for your AI management system and your ISMS.

See an example
Hosted in the Netherlands. Your data stays in the EU.

Three ways to connect

MCP
Your AI assistantChatGPT or Claude uses the available Basenorm tools
API
Your own systemsSubmit data, update tasks, record results
Agents
Defined tasksWith an owner and a moment of review
Access
Your permissionsEvery connection works within the rights you grant

01 / Ways to connect

Three ways to connect Basenorm

01

Work from an AI assistant (MCP)

A supported assistant such as ChatGPT or Claude uses the available Basenorm tools. The connection works within the permissions you grant.

02

Connect your own systems (API)

Submit data from a source application, update tasks and record results through the available API capabilities.

03

Let agents do defined work

Let an agent carry out a defined task. Set who owns it, which access it needs and when someone reviews the result.

02 / Example

From source
to evidence

A practical example. An agent checks a source system on a schedule, and the result lands with the right task in Basenorm.

Example flow
  1. 01A check is scheduled

    Basenorm holds the task, the owner and the requirements for the result.

  2. 02An agent checks the source

    The agent retrieves the permitted data from an external system.

  3. 03The result comes back

    The result is recorded against the right task through MCP or the API.

  4. 04A colleague reviews the exception

    If the result needs attention, the configured review follows. A person decides on the follow-up.

The example is illustrative. Available actions depend on the tools, permissions and configuration.

03 / Access

SOURCE, CONNECTION, RESULT

You decide
what gets access

Discuss which data an integration needs and which actions it may take. Include processing by the external tool in your agreements.

Security and data
Per connection
MCP

AI assistant. Brings a question or an instruction.

API

Source application. Delivers data and evidence.

MCP / API

Your own agent. Carries out the task and its follow-up.

MCP stands for Model Context Protocol, an open standard that lets AI assistants use the tools of other applications.

04 / Questions

Questions about
MCP, API and agents

What is MCP?

MCP stands for Model Context Protocol. It lets a supported AI assistant, such as ChatGPT or Claude, use the available Basenorm tools. Which information and actions are accessible depends on your permissions and how the connection is set up.

What can we do through the API?

You can submit data from a source application, update tasks and record results. Which capabilities you use depends on your configuration.

Does an agent decide on compliance?

No. An agent carries out a defined task, such as checking a source system. You set the owner, the access it needs and when someone reviews the result. People decide on the follow-up.

Where is our data processed?

Basenorm is hosted in the Netherlands and your data stays in the EU. An external tool you connect, such as an AI assistant, processes data under its own terms. Include that processing in your agreements.

Start with your own question

Show us where you are, and we will show you what is possible

Bring the tool or system you want to connect. We tailor the demo to your situation.

In the demo we look at
  • Working from ChatGPT or Claude via MCP.
  • Which systems you can connect through the API.
  • How you set ownership, access and review for agents.
ISO 42001 + ISO 27001

Hosted in the Netherlands. Your data stays in the EU.

Your starting point

See what Basenorm
can do for you

Choose what you want to discuss. We are happy to help you make your next step concrete.

In your demo we look at
  • Which existing processes you can reuse.
  • What you need to add for your AI systems.
  • How you manage controls and evidence together.

We only use your details to plan your demo. Privacy policy