Compliance frameworks: ISO 27001, NIS2, GDPR, DORA and more
Activate a framework and start with a ready set of tasks, policies, controls and risk assessments. We add new frameworks continuously.
Your data stays in Scandinavia
ISO 27001-certified data centre
In Denmark, not on a US cloud platform.
Encrypted backups
Daily encrypted copies, stored separately in Norway.
Developed in Norway
By the same team that advises you.
You decide on AI
We never send your data to AI services unless you choose to.
Common questions
What is a GRC platform?
A GRC platform (governance, risk and compliance) gathers risk assessments, controls, policies and evidence for frameworks like ISO 27001 and NIS2 in one place. You follow up actions and can show the auditor how each requirement is met. Cyrigo starts with the risk assessment, so compliance follows from real risk work.
We use Excel and SharePoint. Why change?
Spreadsheets work until several people, suppliers and frameworks are involved. Then versions drift, actions go unfollowed and the same evidence is collected twice. Cyrigo keeps risks, systems, suppliers and controls connected, so a change in one place shows everywhere it matters. You can upload your existing risk assessments to get started.
Where is our data stored?
In Scandinavia: in an ISO 27001-certified data centre in Denmark, with daily encrypted backups stored separately in Norway. The platform does not run on a US cloud provider, all access is logged, and we never send your data to AI services unless you choose to. We use Microsoft 365 for our own email and office work, and list every subprocessor in our privacy policy.
We don’t have a security team. Can we still use Cyrigo?
Yes. You can start with one of our GRC consultants working in the platform with you, as CISO as a Service or for a fixed ISO 27001 or NIS2 package. When the consultant steps back, everything is documented and you carry on yourselves.
Does Cyrigo cover the Digital Security Act?
Yes. The Norwegian Digital Security Act is one of the frameworks in Cyrigo, next to NIS2 and ISO 27001. Evidence you collect for one is reused for the others, so you don’t document the same control twice.
See Cyrigo with your own frameworks
We show you the platform with the frameworks you work with, and answer your questions about method and expert support.
Book a demo
