Nomiris is a compliance control tracking and risk management platform. It gives the CISO real-time visibility, automates follow-ups, and centralizes evidence.

How do escalations work?

When a control approaches its deadline, the owner receives a reminder. If nothing is done, automatic follow-ups are sent to the owner then escalated to the manager and director.

Can risk owners upload their evidence?

Yes. Each control owner accesses a simplified view of their assigned controls and can upload evidence directly in the platform.

Which frameworks are supported?

ISO 27001:2022 is the primary framework. Nomiris also covers SOC 2, DORA, and GDPR. More frameworks are added regularly.

Nomiris is a Swiss company. Your data is hosted in Switzerland, encrypted in transit and at rest, compliant with GDPR and nDSG.

Nomiris — ISO 27001 Compliance Tracking

1. Purpose

These Terms of Service govern access to and use of the Nomiris platform, operated by Nomiris SA. By creating an account or using the service, you agree to all of these terms without reservation.

2. Access to the service

Nomiris is accessible via a compatible web browser. Access requires creating an account with a valid business email address. Nomiris reserves the right to refuse access to any user who does not comply with these terms.

3. User account

You are responsible for maintaining the confidentiality of your login credentials. Any action performed from your account is deemed to have been carried out by you. In case of suspected fraudulent use, you must immediately notify Nomiris.

4. Use of the service

You agree to use Nomiris in accordance with its purpose: compliance control tracking and risk management. It is prohibited to use the platform to:

Store or share illegal data
Disrupt the operation of the service
Access other users’ data without authorization
Use unauthorized automated tools

5. Intellectual property

All elements of the platform (software, design, brand, content) are the exclusive property of Nomiris SA. You retain ownership of the data you import or create in the platform. You grant us a limited license to host and process this data for the purpose of providing the service.

6. Liability

Nomiris is committed to implementing the necessary means to ensure the availability and security of the service. However, our liability cannot be engaged in cases of force majeure, maintenance interruptions, or non-compliant use of the service by the user.

Nomiris cannot guarantee that the platform will exempt you from all regulatory audits. Using Nomiris does not replace legal advice or a professional compliance audit.

7. Term and termination

These Terms are concluded for the duration of your subscription. In case of non-compliance with the Terms, Nomiris reserves the right to suspend or terminate your account with 30 days’ notice. You may delete your account at any time from your profile settings.

8. Governing law

These Terms are governed by Swiss law. Any dispute relating to their interpretation or execution falls under the exclusive jurisdiction of the courts of the Canton of Vaud, Switzerland.

9. Contact

For any questions regarding these Terms, contact us at [email protected].