# Security and data protection > How Bemlo protects customer data: ISO 27001-certified information security, GDPR, hosting in the EU, single sign-on and role-based access per unit. Source: https://www.bemlo.com/en/security Bemlo is a Swedish company with all development in Sweden. The service is delivered from Sweden and hosted in the EU, personal data is processed under GDPR and the information security management system is certified to ISO 27001. ## Information security Bemlo’s information security management system is certified to ISO 27001. The certificate is issued by RISE. ## GDPR and personal data When an employer uses Bemlo, the employer is the data controller and Bemlo the data processor. We process staff data to deliver the service and on the customer’s instructions. We never sell personal data. Data protection questions: dpo@bemlo.com ## Hosted in the EU Bemlo’s production environment runs on Google Cloud in the EU, and data is encrypted both at rest and in transit. ## AI you can trust The AI models in Bemlo run entirely in the EU. Your data is not used to train the models, and the agent has the same permissions as the person using it. ## Secure cloud hosting Bemlo is delivered only as a cloud service and is not installed on your own servers. That is why every customer always has the latest security updates and new features, without installing anything. It is hosted in the EU, under the same ISO 27001-certified management system as the rest of Bemlo. ## The right permissions, in the right units. All access in Bemlo is controlled by roles. A role bundles the permissions that belong to a responsibility, and it applies only in the units the person is assigned to. The same model applies to integrations and to the AI agent, which has the same permissions as the person using it. ### Permissions The smallest building block, such as viewing the schedule, editing shifts or approving time. ### Roles The administrator bundles permissions into roles such as unit manager, staffing administrator or system owner, entirely to suit how you use Bemlo. Ready-made templates are there to start from. ### The unit tree The organisation’s departments and units are taken from the payroll system. Each person is assigned their units, so information stays with the people who should have it. ## Sign-in and checks People sign in with the organisation’s own accounts, and administrators can see for themselves how sign-ins go. ### Single sign-on Sign-in with the organisation’s own identity provider, such as Microsoft Entra ID, through SAML 2.0 or OpenID Connect. The organisation chooses which groups use SSO. ### Roles through SSO As an option, roles and units can follow groups in the organisation’s identity provider, so permissions are managed in the same place as the rest of your IT. ### Log of SSO sign-ins Administrators can review SSO sign-in attempts themselves, filter for failures and see why a sign-in was rejected. ## Sub-processors An up-to-date list of Bemlo’s sub-processors is available on request. dpo@bemlo.com ## Frequently asked questions ### Is Bemlo ISO 27001 certified? Yes. Bemlo’s information security management system is certified to ISO 27001, with a certificate issued by RISE. ### Where is Bemlo developed and hosted? All development and support happens in Sweden, by Bemlo’s own employees. Nothing is outsourced abroad. The production environment, including the database and the AI models, runs in the EU. ### Is our data used to train AI? No. The AI models run in the EU in Bemlo’s own cloud environment, and your data is not used to train them. ### Can Bemlo be installed on our own servers? No. Bemlo is delivered only as a cloud service, hosted in the EU. That is why every customer always has the latest security updates. ### Who is the data controller? The employer using Bemlo is the data controller for its staff’s data. Bemlo is the data processor. ### Does Bemlo support single sign-on? Yes, through SAML 2.0 or OpenID Connect, for example with Microsoft Entra ID. The organisation chooses which groups sign in with SSO.