Last modified: 14 October 2026
Information Security
How we protect your information
Organisations trust Baseflow with their data, their source code and their systems. This page explains how we protect them, and where to find our information security policy statement.
Information is essential to Baseflow and to our clients, and deserves careful protection. Our information security policy applies to everyone who has access to Baseflow's information and systems: employees, temporary staff, third-party staff and visitors.
Our principles
Confidentiality, integrity and availability of information guide every choice we make about security. We protect information against internal and external threats, manage risks systematically, keep our business processes running and meet our legal and contractual obligations.
ISO/IEC 27001
We are working towards ISO/IEC 27001 certification and have set up our information security management system (ISMS) according to the requirements of the standard. Once the certificate is issued, we will publish it here.
Continuous improvement
We review our ISMS regularly through internal audits, management reviews and evaluations of incidents and risks, and use the results to keep improving it.
What our ISMS does
Our ISMS:
- describes how information security is organised, managed and safeguarded within Baseflow;
- is based on a systematic assessment and treatment of risks;
- sets out the measures that fit those risks;
- is reviewed and improved through the Plan-Do-Check-Act cycle;
- provides the framework for our information security objectives.
Scope
Baseflow has set the scope of the ISMS and described it in our scope statement and Statement of Applicability.
Our policy statement
Our information security policy statement sets out these principles in full.
Download the policy statement (PDF, Dutch)Report a security issue
Found a vulnerability or a security concern? Please send an e-mail to
security@baseflow.com