Foundation layer
One framework, done properly.
Foundation is for organisations with one primary framework, often ISO 27001. You set up your management system on the same library that later carries ISO 42001 and other frameworks.
Hosted in the Netherlands. Your data stays in the EU.In brief
- Price
- From €250 per monthNo hidden fees
- Frameworks
- 1 primary frameworkSuch as ISO 27001
- Users
- 5 internal usersPlus a read-only auditor workspace
- AskNorman
- IncludedWith MCP, or your own API key
01 / Who it is for
Foundation
fits when.
You have one framework to set up or maintain, and a small team that needs structure.
- 1Your first ISO 27001
You build an ISMS for the first time and want structure from day one.
- 2One primary audit driver
One framework drives your work, for example a customer requirement for ISO 27001.
- 3A small security team
A security officer or IT manager carries the work, with a few owners in the business.
02 / What is included
In the
Foundation layer.
Everything you need for one framework, on the same library that grows with you.
- 1 primary compliance framework included (ISO 27001, SOC 2, GDPR or NIS2)
- 5 internal users included
- Unified Control Library for a single assurance scope
- Automated evidence collection for core infrastructure and SaaS integrations
- Policies & procedures templates powered by AskNorman AI
- Basic Governance Graph for controls and evidence
- AskNorman AI: 100k tokens/month on Basenorm-managed models (≈ 20 to 50 queries, depending on complexity), or bring-your-own API key (no token limits)
- Auditor read-only workspace
- Email support
- No hidden fees
04 / Questions
Questions about
Foundation.
Which frameworks can we choose?
One primary framework, such as ISO 27001, SOC 2, GDPR or NIS2. Ask our team about ISO 42001 in your situation.
Can we upgrade later?
Yes. You move to the Assurance layer when you add frameworks, and your controls and evidence come with you.
Is AskNorman included?
Yes, with a monthly token allowance on Basenorm-managed models, or without limits when you bring your own API key. The MCP server is included.
Book a demo
Start with one framework.
In a demo we look at your framework, your team and your first steps.
- How you set up your first management system.
- Which owners you need in the business.
- How you add frameworks later.
Hosted in the Netherlands. Your data stays in the EU.