Customer story
Visit Opper (opens in a new tab)Opper builds an AI router that gives European companies access to AI models, hosted in Europe, through a single interface. Its customers are regulated companies across Europe, from small to large.
Göran Sandahl, CEO and co-founder, Opper
“We wouldn’t have been able to close many of the deals that we’re doing now unless we’d had this security posture and evidence in place.”
At a glance
- 12 weeks from first contact to ISO 27001 certificate
- Evaluated Vanta, chose Noru
- ISO 27001 and Noru’s Trust Center are now part of every sales conversation
The challenge
Opper’s team has a strong security background and built most of its processes from the ground up. Formalising that for ISO 27001 was a different job.
“When we decided to formalise our ISO 27001 work, we had to create evidence repositories, engage with an auditor and these kinds of things.”
The missing certificate soon showed up in sales.
“Not having a real ISO certification did affect our sales in the beginning. We increasingly started getting very serious customers with strict requirements coming to us and asking for it.”
The pattern was the same each time. Customers tried the platform, liked it, and wanted to move fast.
“Then quickly: okay, we want to move to production now. Can you share the ISO 27001 certificate? Deals were lost in that beginning phase.”
For an AI company, security isn’t a side topic.
“Engaging with AI models is a very sensitive topic. AI models can use data in the wrong way, but also create problems internally if they’re not secured correctly.”
Why Noru
“We felt we needed a centralised system to put some structure on the process itself and the evidence gathering, but also something with a fair amount of knowledge around the domain.”
Opper looked at other tools, including Vanta.
“Fairly quickly we decided to give Noru a shot, and we became very happy with the solution.”
Working with a Swedish team made the difference.
“Noru being a Swedish company like ourselves, with the ability to meet and talk, we felt this was a natural fit. We could work in a collaborative way on getting compliant, and get a lot of advice on the process itself. It was the best way for us to get compliant and continue staying compliant over time.”
The results
Certified in 12 weeks
“It took us about 12 weeks to complete the certification, from the initial contact with the Noru team to having the certification in hand.”
Security as a sales asset
“Nowadays, the ISO certification and the trust portal from Noru are essential to every part of our user journey.”
Structure that lasts
“We’re most happy with the way Noru structures the processes, the documentation and the evidence. A recent addition we really like is the new trust portal, which lets us present our security processes to our customers in a good way.”
Advice to others
“I would advise companies to start thinking about their security processes very early. That allows you to use tools like Noru to get the evidence and audits in place quickly and smoothly afterwards.”