Regulatory layer
Many frameworks, many entities.
Regulatory is for complex organisations with multiple entities, frameworks and auditors. All current and future frameworks, cross-entity visibility and enterprise access controls, on one EU-native platform.
Hosted in the Netherlands. Your data stays in the EU.In brief
- Price
- On requestDepending on entities and users
- Frameworks
- All current and futureIncluding NIS2, DORA and the AI Act
- Entities
- Multi-entitySubsidiaries with cross-entity visibility
- Access
- SCIM and SSOWith advanced access controls
01 / Who it is for
Regulatory
fits when.
Your organisation has several entities, several supervisors and several auditors.
- 1Groups with subsidiaries
Each entity has its own scope, while the group needs one overview.
- 2Regulated sectors
NIS2, DORA or the AI Act apply next to ISO 27001 and ISO 42001.
- 3Enterprise requirements
SCIM, SSO, custom service levels and exports to your own tools.
02 / What is included
In the
Regulatory layer.
Everything in Assurance, plus all frameworks, multiple entities and enterprise controls.
- All current and future frameworks included
- Multi-entity and multi-subsidiary support
- 25 internal users included (more on request)
- Advanced Governance Graph and cross-entity visibility
- Unlimited API usage and exports to SIEM / BI tools
- AskNorman Enterprise: 10M tokens/month, or bring-your-own API key (no token limits)
- SCIM / SSO and advanced access controls
- Custom SLAs and support options
- Optional implementation via certified Basenorm partners
03 / Next step
Compare the layers.
04 / Questions
Questions about
Regulatory.
How do multiple entities work?
Each entity has its own scope, controls and evidence, and the group sees across entities where controls and risks are shared.
Can we connect our own tools?
Yes. The Regulatory layer includes unlimited API usage and exports to SIEM and BI tools.
Do you help with implementation?
Yes, optionally through Basenorm partners. Ask our team about the options.
Book a demo
Bring your entities onto one platform.
In a demo we look at your entities, your frameworks and your access requirements.
- How you structure entities and scopes.
- Which frameworks you share across the group.
- How SSO, SCIM and exports fit your stack.
Hosted in the Netherlands. Your data stays in the EU.