Security
Information security and data protection at Bemlo.
Bemlo is a Swedish company with all development in Sweden. The service is delivered from Sweden and hosted in the EU, personal data is processed under GDPR and the information security management system is certified to ISO 27001.
ISO 27001
Certified information security management
GDPR
Personal data processed under GDPR
Data in the EU
Hosted and stored in the EU
SSO and access control
Single sign-on and role-based access
Information security
Bemlo’s information security management system is certified to ISO 27001. The certificate is issued by RISE.
GDPR and personal data
When an employer uses Bemlo, the employer is the data controller and Bemlo the data processor. We process staff data to deliver the service and on the customer’s instructions. We never sell personal data.
Hosted in the EU
Bemlo’s production environment runs on Google Cloud in the EU, and data is encrypted both at rest and in transit.
AI you can trust
The AI models in Bemlo run entirely in the EU. Your data is not used to train the models, and the agent has the same permissions as the person using it.
Secure cloud hosting
Bemlo is delivered only as a cloud service and is not installed on your own servers. That is why every customer always has the latest security updates and new features, without installing anything. It is hosted in the EU, under the same ISO 27001-certified management system as the rest of Bemlo.
Roles and permissions
The right permissions, in the right units.
All access in Bemlo is controlled by roles. A role bundles the permissions that belong to a responsibility, and it applies only in the units the person is assigned to. The same model applies to integrations and to the AI agent, which has the same permissions as the person using it.
- View the schedule
- Edit shifts
- Approve time
- Order temps
- Manage roles
- Svea kommun
- Health and social care
- Home care North
- Team 1
- Team 2
- Solgården care home
- Social services
Anna’s units
- 1
Permissions
The smallest building block, such as viewing the schedule, editing shifts or approving time.
- 2
Roles
The administrator bundles permissions into roles such as unit manager, staffing administrator or system owner, entirely to suit how you use Bemlo. Ready-made templates are there to start from.
- 3
The unit tree
The organisation’s departments and units are taken from the payroll system. Each person is assigned their units, so information stays with the people who should have it.
Sign-in and checks
People sign in with the organisation’s own accounts, and administrators can see for themselves how sign-ins go.
Single sign-on
Sign-in with the organisation’s own identity provider, such as Microsoft Entra ID, through SAML 2.0 or OpenID Connect. The organisation chooses which groups use SSO.
Roles through SSO
As an option, roles and units can follow groups in the organisation’s identity provider, so permissions are managed in the same place as the rest of your IT.
Log of SSO sign-ins
Administrators can review SSO sign-in attempts themselves, filter for failures and see why a sign-in was rejected.
Sub-processors
An up-to-date list of Bemlo’s sub-processors is available on request.
Frequently asked questions
Is Bemlo ISO 27001 certified?
Yes. Bemlo’s information security management system is certified to ISO 27001, with a certificate issued by RISE.
Where is Bemlo developed and hosted?
All development and support happens in Sweden, by Bemlo’s own employees. Nothing is outsourced abroad. The production environment, including the database and the AI models, runs in the EU.
Is our data used to train AI?
No. The AI models run in the EU in Bemlo’s own cloud environment, and your data is not used to train them.
Can Bemlo be installed on our own servers?
No. Bemlo is delivered only as a cloud service, hosted in the EU. That is why every customer always has the latest security updates.
Who is the data controller?
The employer using Bemlo is the data controller for its staff’s data. Bemlo is the data processor.
Does Bemlo support single sign-on?
Yes, through SAML 2.0 or OpenID Connect, for example with Microsoft Entra ID. The organisation chooses which groups sign in with SSO.
Talk to our team
Tell us how your staffing works today, and we will show you how Bemlo works in an organisation like yours.
- Emailinfo@bemlo.com
- Phone
- Phone+46 10 8800 625