For investment firms and private equity
Protect the value of your investments One compliance standard for your portfolio
Run ISO 27001 and ISO 42001 for your holding and every portfolio company in Basenorm. Set one standard, roll it out per company and see centrally where each business stands. Compliance becomes a business driver instead of a cost.
Hosted in the Netherlands. Your data stays in the EU.Illustration · fictional data
Why it matters
Compliance affects
the value of your portfolio
Legislation such as NIS2 and DORA places responsibility with management. Customers ask for demonstrable security. And at exit, the buyer looks at what you can show.
- ValueProtect value
An incident or fine at one portfolio company affects the whole investment. Under NIS2, fines for essential entities can reach €10 million or 2% of worldwide annual turnover.
- GrowthCompliance as a business driver
An ISO 27001 certificate or demonstrable NIS2 measures open doors with customers who require them. Compliance then contributes to revenue.
- ExitReady for due diligence
Controls, evidence and audits are recorded per portfolio company. You show where things stand instead of scrambling at the last minute.
Across the deal cycle
From acquisition to exit
Acquisition: a baseline at entry
Map where a new portfolio company stands against the portfolio standard. You immediately see what needs to happen.
Value creation: a plan towards certification
Split the work into tasks with owners and deadlines. AI and agents help with execution, your team reviews the result.
Exit: demonstrably in order
Evidence, reviews and the audit trail are ready for the buyer, the auditor and the board.
One standard
Standardise compliance
across every company
Basenorm manages a holding with its underlying companies. You set the standard once and every company works with it, with its own owners, tasks and evidence. Reuse shared controls and policies, and add what is specific to each business.
- 01Set the portfolio standard
Choose the frameworks and controls that apply to every company.
- 02Roll out per company
Each company gets its own scope, owners and tasks, in its own database.
- 03Reuse what already works
Link existing policies, controls and evidence to multiple frameworks at once.
- 04See centrally where you stand
Follow open tasks, reviews and audits per company from the holding.
Together with your advisers
Work with your own
auditors and advisers
Give auditors read access to controls and evidence. Advisers and partners work with your portfolio companies on the same platform. The work stays in one place, even with several parties involved.
See the partner programmeThe foundation matters
Hosted in the Netherlands
Separated per company
Frequently asked questions
Questions from
investors
Can every portfolio company have its own environment?
Yes. Basenorm manages a holding with its underlying companies. Each company has its own scope, owners and database, and the holding sees the whole.
Which frameworks can we share across the group?
The Regulatory layer includes all current and future frameworks. You start with ISO 27001 and ISO 42001 and reuse those controls for NIS2, DORA or the AI Act. You decide which frameworks apply to each company.
What if we acquire a new company?
You add the company to the holding and compare it with the portfolio standard. You see what is in place and what still needs to happen.
Where is our data stored?
Basenorm is hosted in the Netherlands and your data stays in the EU.
See it with your own portfolio
Show us where your portfolio stands
We go through your holding and one or two portfolio companies together and show what one standard looks like.
- Which frameworks your portfolio needs
- How to roll out one standard per company
- How to follow progress from the holding
Hosted in the Netherlands. Your data stays in the EU.