TruSecure · cyber governance, risk & complianceOne platform for NIS2, DORA, ISO 27001 and whatever comes next.
TruSecure helps organisations run cyber governance, risk and compliance without spreadsheets and without the pre-audit scramble. We helped shape the technical foundation of the platform, built the software and designed the user experience for their customers.
- In production
- national NIS2 transpositions mapped
- 27
- control library for every framework
- 1
- between two rounds of evidence
- 6 h
- modules in one platform
- 9
Nine modules, one control model
- 01ApplicabilityWhich rules apply, based on country, sector, size and criticality.
- 02Control libraryEvery control stored once, linked to every framework it covers.
- 03EvidencePulled from connected systems every six hours, with its source attached.
- 04RiskA live register, with exceptions that expire and get reviewed again.
- 05SuppliersOne record per supplier, for every regulation that refers to it.
- 06PolicyAI drafts a first version tied to the controls, and a person approves it.
- 07IncidentsIncidents and resilience tests tracked against their regulatory deadlines.
- 08ReportingBoard reports drawn from the real state of the controls.
- 09Audit trailThe AI's proposal and the person's approval in one chain.
- NIS2
- DORA
- GDPR
- EU AI Act
- Cyber Resilience Act
- ISO 27001
- ISO 27701
- ISO 42001
- ISO 22301
- SOC 2
- NIST CSF 2.0
- NIST AI RMF
- CIS Controls v8
Every framework reads from the same controls. Finish one, and the progress shows up in the others right away.
Building TruSecure was not simply another software project. We were creating an entirely new way for organisations to manage cyber governance, risk and compliance. Complex regulations, continuous evidence collection, monitoring and AI-assisted workflows all needed to come together in one trustworthy and intuitive product.
Deritron was exactly the technology partner we were looking for. They combined excellent engineering with a genuine understanding of our mission and the complexity of the problem. They helped us shape the technical foundation of the platform, develop the software and create a clear user experience for our customers.
Even when requirements evolved and new technical challenges appeared, the communication remained direct and transparent. Problems were addressed proactively, details were not overlooked, and the team consistently took ownership of delivering a robust solution.
The result speaks for itself: TruSecure now has a secure and scalable software platform that can support our customers and the further growth of our company. We value Deritron not only as a development partner, but as a trusted extension of our own team. We recommend them without reservation to any organisation that wants to build a serious software product with skill, care and a true partnership mindset.
The problem
An organisation can easily fall under five regulations at once: NIS2, DORA, GDPR, the AI Act, with ISO 27001 or SOC 2 on top. Every framework wants its own evidence, and that evidence lived in folders, emails and spreadsheets gathered just before the audit.
TruSecure wanted to turn that around: regulations, continuous evidence collection, monitoring and AI-assisted workflows in one product that is trustworthy and still easy to work with.
One control, every framework
The platform first works out which rules apply, based on country, sector, size and criticality. Each control then lives once in the library, linked to every framework it covers. Close a control for ISO 27001 and it shows up for NIS2 straight away.
Around that library sit a risk register with exceptions that expire, supplier risk with one record per supplier, incidents with their regulatory deadlines, and board reports drawn straight from the real state of the controls.
Evidence that collects itself
Read-only connectors look into AWS, Azure, GCP and on-premise systems. Every six hours the platform pulls fresh evidence, with its source attached. A control that drifts is flagged right away; routine fixes close themselves and the rest goes to a named owner.
AI proposes, people sign off
AI reads the connected systems, maps controls and proposes evidence and policy text. A named person approves every step, and proposal and approval end up in one audit trail, with identity, timestamp and outcome.
Where it stands
TruSecure now runs as a secure and scalable platform that supports their customers and the further growth of the company.
Xcellerate
Soetaert · Transport Builder
WUK
Ardosolar