Security
Platform security & reliability
Your data is protected by enterprise-grade infrastructure — 100% EU data residency, multi-layer redundancy, and continuous 24/7 threat monitoring built into every Norrsent deployment.
SEE NORRSENT IN ACTIONEU data sovereignty
Your data never leaves European soil
All EU customer data is processed and stored exclusively within EU borders — Germany and Ireland. No data is transferred to the US, UK (post-Brexit), or any non-EU country.
Primary region
Frankfurt, Germany
eu-central-1
- —Production database & live data
- —Multi-AZ automatic failover
- —30-day point-in-time recovery
- —AES-256 encryption at rest
Disaster recovery region
Dublin, Ireland
eu-west-1
- —Daily automated snapshots
- —30-day retention policy
- —Geographic disaster recovery
- —Encrypted cross-region transfer
Multi-layer data protection
Bank-grade protection with zero data loss
Multi-AZ High Availability
Automatic failover in under 2 minutes with synchronous replication to a standby database. Zero data loss (RPO = 0). Continuous protection against hardware failure without manual intervention.
Point-in-Time Recovery
30-day automated backups allow restoration to any second within the retention window. Protection from data corruption, accidental deletion, ransomware, and application bugs.
Cross-Region Disaster Recovery
Daily snapshots replicated to Ireland provide geographic redundancy. All transfers remain within the EU, ensuring GDPR and Schrems II compliance throughout the disaster recovery lifecycle.
Security and Compliance Controls
Deletion protection enabled across all data stores. Full audit trails captured via CloudWatch logging. AES-256 encryption enforced at rest and in transit for every data path.
Compliance & certifications
Built to meet the standards your organisation requires
ISO 27001
Aligned
SOC 2 Type II
Aligned
GDPR
Compliant
Schrems II
Compliant
NIS2 Directive
Ready
AWS (host)
SOC 2 + SOC 3 attested
AWS infrastructure
Built on the world's most trusted cloud
Norrsent is hosted on AWS — infrastructure that holds SOC 2, SOC 3, and ISO 27001 certifications and is used by the world's most security-conscious enterprises. Norrsent itself is ISO 27001 + SOC 2 Type II aligned. Our stack layers defence-in-depth controls across every tier.
Threat detection & monitoring
24/7 continuous monitoring
AI-powered threat detection
AWS GuardDuty continuously analyses network traffic, API calls, and access patterns to detect threats before they escalate — without manual rule configuration.
Real-time security event monitoring
All security events are captured and surfaced in real time. Anomalous access, configuration changes, and policy violations trigger immediate alerts.
Automated incident response
Documented incident response procedures are triggered automatically on detection. Response workflows are tested regularly to ensure consistent execution under pressure.
Complete audit trails
Every system access, configuration change, and data operation is logged with user identity, timestamp, and full context — creating an immutable record for security review and compliance.
No additional cost
Enterprise security at SaaS pricing
The security infrastructure described on this page is included in every Norrsent plan at no additional cost — equivalent to $15,000–50,000 per month to build in-house or $2,000–10,000 per month from enterprise security vendors.
For your security team
We’ve already
written the answers.
Most security questionnaires ask the same things. We’ve packaged ours — architecture diagram, ISO 27001 / SOC 2 control alignment, encryption + identity model, region map, and the pre-answered standard questionnaire — into a single pack we send on request.
- Architecture diagram + data-flow model
- ISO 27001 + SOC 2 control mappings
- Encryption, identity, and access model
- Region map and data-residency proof
- Standard security questionnaire — pre-answered
Get the full security architecture pack.
Architecture overview, control mappings (ISO 27001, SOC 2 alignment), encryption + identity model, region map, and the questionnaire your team usually sends — pre-answered. Sent to your inbox within one business day.
Get started
See Norrsent security in the context of your risk programme