Assurance layer
Several frameworks, one library.
Assurance is for organisations that run several frameworks in parallel, such as ISO 27001 and ISO 42001. Shared controls and evidence are maintained once, with the full Unified Control Library and Governance Graph.
Hosted in the Netherlands. Your data stays in the EU.In brief
- Price
- On requestDepending on frameworks and users
- Frameworks
- Up to 3 in parallelSuch as ISO 27001, ISO 42001 and NIS2
- Users
- Up to 10 internal usersPlus auditor access
- Integrations
- API and integrationsFor your existing stack
01 / Who it is for
Assurance
fits when.
You run more than one framework and want to stop doing the same work twice.
- 1ISO 27001 and ISO 42001 together
You extend your ISMS with an AI management system and want shared controls managed once.
- 2Several audits in parallel
ISO 27001, SOC 2 or NIS2 run side by side and share evidence.
- 3A growing team
More owners, more risks and more evidence, in one connected model.
02 / What is included
In the
Assurance layer.
Everything in Foundation, plus the full library, graph and integrations for several frameworks.
- Up to 3 compliance frameworks included (e.g. ISO 27001, SOC 2, GDPR, NIS2, DORA)
- Up to 10 internal users included
- Full Unified Control Library with cross-framework mappings
- Full Governance Graph for risks, controls, assets and evidence
- Continuous evidence automation across infrastructure and SaaS tools
- Risk management, analytics and readiness dashboards
- AskNorman AI advanced: 2M tokens/month on Basenorm-managed models (≈ 400 to 1,000 queries), or bring-your-own API key (no token limits)
- API & integrations for your existing stack
- Priority in-app and email support
- Upgrade anytime as your organisation grows
03 / Next step
Compare the layers.
04 / Questions
Questions about
Assurance.
Which frameworks can we combine?
Up to three frameworks in parallel, for example ISO 27001, ISO 42001 and NIS2, on one control library.
How much work do we reuse?
That depends on your scope. ISO 42001 and ISO 27001 share the structure of clauses 4 to 10, and ISO 27001 and NIS2 share 70 to 80% of their controls according to Basenorm’s published mapping. Reuse is assessed per control.
Can we upgrade anytime?
Yes. You can move to a next layer as your organisation grows.
Book a demo
Run your frameworks on one library.
In a demo we look at your frameworks and what they share.
- Which controls count for several frameworks.
- How evidence is linked once.
- How the Governance Graph shows ownership.
Hosted in the Netherlands. Your data stays in the EU.