Designed for compliance.
Not just ticked off.

Mandatory for organisations in critical sectors: government, healthcare, energy, transport, finance.

NIS2 requires technical and organisational cybersecurity measures, incident reporting to national authorities (in the Netherlands the NCSC) and supply chain security.

Noveu sets up its measures along the technical requirements of NIS2: encrypted traffic via TLS, MFA, an audit log per organisation and supplier management. Your organisation remains the entity with the duty of care. Backups have been stored encrypted since 30 September 2026.

Mandatory for all Dutch government organisations: municipalities, provinces, central government and water authorities.

BIO2 (version 1.3) is based on ISO 27001:2023 and ISO 27002:2022 and sets minimum standards for information security within Dutch government.

BIO2 is the framework of your organisation. We provide technical and organisational evidence on request.

Dutch healthcare providers who email or chat patient data: GPs, hospitals, municipal health services (GGD) and pharmacists.

NTA 7516 sets requirements for the security of email traffic in healthcare, including identity verification of senders and encryption from sender to recipient.

The mail server is Stalwart. We provide technical and organisational measures on request for your audit.

Applies to all organisations that process personal data of EU residents.

The GDPR requires transparency about data processing, the right to be forgotten, data minimisation and a duty to report data breaches.

Your data and backups are stored in Germany, in a Hetzner data centre in Falkenstein. The Cloudflare, Inc. (US) edge runs under the EU-US DPF and SCCs; the AI generation layer runs via Mistral (a French company); according to Mistral, in the EU by default. All sub-processors are listed at /juridisch/sub-verwerkers (in Dutch).