Security
We sell security. So we had better practise it.
Your ISO records say a lot about your company. This is how we look after them.
In the EU
The app, the database and your files run on Cloudflare, with data stored in the European Union.
Sign-in with MFA
Sign in with Microsoft, or with a password plus an authenticator app. External auditors always need a second step.
Organizations kept apart
Every organization only sees its own data. An automatic test tries to cross that line on every change we make.
Keys locked away
Keys for Odoo, Microsoft and GitHub are stored encrypted and never shown again.
A log you can trust
Every important action is written to a chained log. Changing one line afterwards breaks the chain, so it shows.
AI that doesn't learn from you
Hero uses Claude by Anthropic under business terms: your data is not used to train the model.
Who helps us run HeroNorm
The services that may process your data for us:
Cloudflare
Hosting, database and file storage (EU)
Anthropic
Claude, the AI behind Hero
Soniox
Speech to text, when you speak instead of type
SMTP2GO
Sending invites and notices by email
We run our own ISO 27001 work in HeroNorm. Questions about security? Ask us through the contact form. Contact