Compliance

This is the Compliance demo. Every visitor shares this company, and it resets every night.

What you change here, everyone sees until the next reset. Email, payments, and the AI models are switched off.

Start your own trial
  • EU GDPR (2016)
  • ISO 27001:2022
  • NIS2
  • NIS2 Netherlands (Cbw, 2026)

Nothing found that matches the search criteria.

Start your own trial
SV
Sam de Vries
sam.devries@tidewell-it.example

Assistant

Describe what your organisation does: its business and size, where it operates, the systems and data it handles, its key third parties, and the regulations it's exposed to. This text is given to the Assistant on every conversation, so its risk suggestions, drafted policies, and applicability calls are grounded in your actual business instead of generic guesses. Write it yourself below, or open the Assistant and ask it to interview you about your organisation — it can write and save the profile for you.

This is distinct from the ISO 27001 Clause 4 Context of the Organisation artifact, which is a structured record of scope, issues, and interested parties. The Organisation Profile has no version history and makes no claim to satisfy any framework clause — it exists purely to make the Assistant smarter.

Tidewell IT is a managed IT service provider in Utrecht, the Netherlands, founded in 2014. We employ 43 people and look after about 120 small and mid-sized business customers, running their workplaces, networks, and hosting.

Our workplace service covers laptops, phones, Microsoft 365 administration, and a service desk that customers reach by phone and through a portal. Our network service covers firewalls, switching, wireless, and secure remote access. Our hosting service runs virtual platforms and customer backup from two Dutch data centres, where we rent suites from two colocation providers, Nordwave Colocation and Brightspan Datacenters.

For our own office work we use Microsoft 365, including email, Teams, and SharePoint. The remote monitoring tool and the ticketing system are what our engineers use every day to reach customer systems, so access to both is tightly controlled and reviewed.

The scope of our information security management system covers service delivery, the service desk, hosting operations, and the Utrecht office. Customers' own systems and the data in their own tenants are outside that scope, although we protect the access we hold to them.

We are working towards certification against ISO 27001, and we follow the Dutch Cyberbeveiligingswet (Cbw), which implements the NIS2 Directive, and the GDPR. Our customers expect us to show that we do what we say, so we keep our policies, risks, suppliers, and training records current and open to audit.

Security is part of every role. New starters follow an orientation, everyone completes awareness and phishing training each year, and Sam de Vries, our Information Security Officer, leads the programme together with the management board.

    Add comment

      Are you sure?

      This action cannot be reverted.

      Leave this page?

      Your changes on this form are not saved. If you leave, they are lost.