Your OGSM contains your organization’s most sensitive information: where you’re heading, what you’ve chosen, and how you’re performing. Protecting that data is not a feature for us. It’s a precondition.
ISO 27001:2022 certified
Toolsfactory is certified against ISO 27001:2022, the international standard for information security management. That means our security is not a promise but an audited practice: risk management, access control, incident response and continuous improvement are independently verified.
How we protect your data
- Encryption: data is encrypted in transit and at rest.
- Access control: role-based permissions per team: viewers, responders, participants and administrators. You decide who sees what.
- Two-factor authentication: available on every plan.
- Single Sign-On: integrate with Microsoft Entra ID so your own identity policies apply (available as add-on).
- EU-based: Toolsfactory is a Dutch company; your data is processed under EU law and the GDPR.
AI and confidentiality
OGSM.online includes AI features to help you generate and improve your plan. Confidentiality comes first:
- You can review and remove confidential information before anything is sent to an AI model.
- Administrators can disable AI functionality for the entire environment.
- Your data is never used to train AI models.
Learn more about how AI works in the product on our AI page.
Transparency
- Current uptime and incident history: status.toolsfactory.nl
- Security questions or a vulnerability to report? Email help@toolsfactory.nl
Trusted by government organizations, pension administrators and international enterprises.