Compliance management in your own Azure environment.
Manage your ISMS and quality system across multiple standards in one platform: from risks and controls to audits and management review. Your data never leaves your own Azure subscription.
Multiple standards, one system
One register of risks, controls, documents and people, mapped to every standard you enable. One control can satisfy requirements in several standards at once.
Your environment, your data
Deploys into your own Azure subscription. No vendor access, no telemetry: nothing leaves your tenant.
Audit-ready
SoA, management review packet, audit trail and evidence in one place. Generate the documents your auditor asks for.
Standard modules
All modules →How it works
Deploy via Azure Marketplace
Into your own subscription, in about 15 minutes. You start with a local admin account.
Enable your standard modules
Pick the standards you need. Microsoft Entra ID SSO can be connected later, optionally.
Get to work
Risks, controls, documents, people and audits in one coherent system.
Ready for the NBIV inspection
ABRO 2026 sets obligations for suppliers to the Dutch MoD. NormControl covers the full standard, from security plan to evidence trail.
Not SaaS. Your own instance, your own database.
Every customer runs their own NormControl deployment in their own Azure subscription. The vendor has no access to your data and receives no telemetry.
The full architecture story →