Security and compliance

At Bliksund, we take data security, privacy, and compliance seriously. As a trusted provider of digital solutions for emergency services, we know that reliability and integrity are critical.

Whether you're using our solutions for live video, patient care, or operational management — we ensure that your organisation is supported by secure, responsible, and compliant technology.

Security certifications and ISO standards

Bliksund operates an integrated management system for security, quality and environment. Our information security management system is certified to ISO/IEC 27001, with a yearly re-audit. T

he ISO/IEC 27001 framework governs our controls for encryption, access management, authentication and vulnerability handling. The certificate is available on request.

Our quality and environmental processes adhere to ISO 9001 and ISO 14001.

See certificate

Cyber Essentials Certified

Cyber Essentials is a UK government-backed scheme that helps organisations protect against common cyber threats.

Bliksund is Cyber Essentials Certified, demonstrating that we have implemented essential technical controls to safeguard our systems and protect sensitive data.

This certification provides reassurance that our digital infrastructure meets key baseline security standards.

DCB 0129 - Clinical Safety in Health IT

DCB 0129 is a clinical risk management standard for digital health solutions within the NHS.

Bliksund’s compliance with DCB 0129 is assured by SafeHand, confirming that we follow a structured approach to clinical safety throughout the design and development of our healthcare products.

This ensures that our solutions support safe use in clinical environments and help protect patient wellbeing.

Data hosting and infrastructure

Bliksund delivers both cloud and on-premises installations. The deployment model is agreed per customer. Cloud installations are hosted in European data centres.

For on-premises installations the data stays inside the customer's own environment. Data residency and the specific region are confirmed for each deployment.

Data protection and GDPR

Bliksund processes personal data in line with GDPR. A data processing agreement is available.

For a personal data breach, we follow GDPR notification obligations, including notifying the relevant supervisory authority within 72 hours where required and informing affected customers.

Our Data Protection Officer is Ida Gudmundsen, reachable at ida.gudmundsen@bliksund.com

Incident response

Bliksund maintains a documented incident response process covering identification, prioritisation, escalation, resolution and post-incident review.

Incidents are logged and tracked from first report to closure.

Any incidents can be reported to our support: support@bliksund.com

Is Bliksund GDPR compliant?

Yes. Bliksund processes personal data in accordance with GDPR across all markets where our products are deployed. A data processing agreement is available on request.

Is a data processing agreement available?

Yes. A data processing agreement is available. Please contact our Data Protection Officer at ida.gudmundsen@bliksund.com.

Where is data hosted?

Bliksund offers both cloud and on-premises deployment. Cloud installations are hosted in European data centres. For on-premises installations, data remains within the customer's own environment. The specific deployment model and data residency are confirmed per customer.

Does Bliksund hold ISO 27001 certification?

Yes. Bliksund is certified to ISO/IEC 27001 with a yearly re-audit. The certificate is available on request.

How does Bliksund handle a data breach?

Bliksund maintains a documented incident response process. In the event of a personal data breach, we notify the relevant supervisory authority within 72 hours where required and inform affected customers. Incidents can be reported to support@bliksund.com.

Who is Bliksund's Data Protection Officer?

Ida Gudmundsen. She can be contacted at ida.gudmundsen@bliksund.com.