Nordic Information Control
The new standard for automated compliance and information security. They integrate automation into your ecosystem and build the regulatory foundation for NIS2, DORA and the AI Act.
Overview
Nordic Information Control (NIC) and filerskeepers join forces to help organizations fully manage, secure, and govern their information. By combining filerskeepers’ excellence in retention schedules and NICs’ excellence in identifying, classifying, and auto labelling all information, including dark data, forms a powerful offer in a time when compliance and information security are essential.
Together, filerskeepers and NIC ensure that all data is known, classified, governed, and retained (or deleted) according to policy—closing the gap between information visibility and compliant action.
About Nordic Information Control (NIC)
Nordic Information Control is a privately held Ltd company offering solutions and consultancy within information security and compliance. NIC’s main purpose is to deliver technology as a service to streamline, simplify and automate information management. The services are delivered through NIC’s own concept and platform, where NIC has established partnerships with some of the world leading technologies within the field. NIC is registered in Sweden with Swedish owners.
“We at NIC are excited about the cooperation with filerskeepers. Our companies’ skills in combination offers a service that is highly automated, easy to use and that we have not seen anyone else offer in the market. The timing is perfect considering the increasing legal demands in combination with the amount of information stored and created in any give organization on a daily basis”
– Peter Boström, CEO, Nordic Information Control
How NIC works with filerskeepers
Nordic Information Control (NIC) and filerskeepers together provide an end-to-end information governance solution: from discovery and classification to legally defensible retention. NIC scans, identifies, classifies, and auto-labels information across the organization, including so-called “dark data” such as legacy files, user created copies, and data generated through everyday business processes in email, collaboration platforms, and AI tools like Copilot.
These structured insights are then fed directly into filerskeepers’ state-of-the-art retention schedules, enabling organizations to apply clear, consistent, and legally defensible retention rules to all information — not just what they already know they have. While NIC brings hidden and unstructured information into scope, filerskeepers ensures that every piece of information is governed by the correct retention schedule throughout its lifecycle, reducing regulatory risk, eliminating blind spots, and making information governance practical and actionable across the organization.
The “dark data” is information you may not know that you have:
- Old data: the information legacy
- Copies made and handled by individual users
- Copies created in processes: employment agreements are properly stored and protected in the HR system, but in the process copies may be created:
- as a result of creating/amending agreements
- in the mail system as a result of a dialogue with the employee
- in collaboration platforms as a result of internal discussions
- In CoPilot as a result of streamlining user’s individual work May be shared, internally or externally, through links
Benefits of using both NIC and filerskeepers
The main benefit is clear: make sure retention processes are effective by having control over ALL data. Just because the data is dark” does not mean it is not important or sensitive. On the contrary, dark data is likely to be missed in the retention processes and keeps on building the information legacy in an uncontrolled manner.
Benefits:
- Effective retention process: Measure and verify that all data is handled correctly and in a compliant manner Compliance to a wide range of legal frameworks
- Cost cuts: stop treating irrelevant data Increased information security: in the same process, make sure sensitive information is secured
- Increased compliance: in the same process, make sure information is treated according to legal frameworks
- Safe use of AI: in the same process, when all information is classified and auto-labeled, it is also possible to prevent AI models from accessing sensitive information it should not access. In an automated way.
The combination offers a powerful solution to run an effective retention process and measure and verify that dated or irrelevant data actually is deleted, at the same time as the cornerstone of all information security and compliance is achieved: control over all your information.
Why we love working with NIC
NIC offers a modern SaaS, easy to scale and adaptable to the small organization as well as the large multinationals alike. The solution caters for organizations that wants to start small and scale as well as for the large corporate. NIC’s mantra is to make something potentially complex as easy as possible for the users: you do not need to be a specialist in information security or compliance, the solution will do most of the work for you. The NIC platform is built on micro services and API’s meaning it is well suited to feed insights to other platforms, such as filerskeepers.
Additional information
Frequently Asked Questions (FAQ)
No, NIC scan the information where it resides. No information is copied or moved during the process. NIC solution only handles indexed metadata.
No, it is only meta data about the customers’ information that ends up in NIC platform. NIC can identify that a document is an employment agreement, but the agreement as such can not be read. This is possible through the scanner module where all components for information identification is located. If customer requires, the scanners can be placed on-prem in customer environment, behind customers’ fire walls.
NIC started with the goal to be technology agnostic, meaning we can classify both structured and unstructured data, regardless of technology stack.
- Default delivery is 100% SaaS, where the setup is based in physical data centers (right now in Sweden), ISO27001 certified. No public cloud service or provider is involved in the delivery
- The solution can be delivered as a hybrid: scanners installed on-prem at customer location. It is the scanners that contains all analytic functionality, including ML algorithms.
- Only meta data ends up in NIC solution
- All communication between customer environment and SaaS (or remote scanners and SaaS) are encrypted, and in addition over VPN (details provided upon request)
- All login in NIC platform are role based, meaning it is possible to limit what specific NIC-users may and may not see. In addition: the customer is in full control over the access to the NIC platform, is the customer do not want professional services from NIC the customer can block access for NIC to their own instance.
- The customer setup in the SaaS is based per customer, i.e. each customer has their own set up with scanners, databases etc. Rendering it impossible for a customer to by accident access any other organizations data through the NIC platform.
- The customer needs to grant access to the data sources to be scanned, i.e. service accounts with read access, and if on premise data sources network settings. In the case of remote scanners the customer needs to set up hardware for the scanners to run on (detailed spec available upon request).
- From access to start of scan is a matter of a handful of hours. Results of the scanning will be delivered continuously over time, and the initial (usable) insights will be delivered within 1-2 weeks, depending on amount and type of data scanned.
- The initial scan depends on volume and type of information to scan. An assessment scan, forming a baseline, is normally achieved within 2-3 weeks. A total scan of all information may take 1 to a few months.
- Information is continuously created, and after the initial scan NIC will continuously scan all new information created, meaning the scan time is significantly shorter and near real time.
- Retention and cost savings. Identify outdated and/or irrelevant data for deletion or archiving
- Increased information security and compliance: what type of information, where, and is it processed in a secure/compliant manner
- AI readiness: prevent AI from accessing sensitive information it should not access
- Migrations: exclude data that is no longer relevant from the migration process
- Automate repetitive time consuming processes, such as DSARf, ROPA, individual risk scores for users etc.
Yes, but a number of advantages of SaaS will be lost if so, i.e. economy of scale (more expensive solutions), som of the functionality relating to meta data catalogue handling, and the basic idea of SaaS: continuous improvements that all customers can use.