Question 1

What is Anzen?

Accepted Answer

Anzen is a single-pane-of-glass platform that unifies CMDB, ITSM (incidents, problems, changes), control testing, and a real-time risk register. It is built so operational data and governance data live in the same graph: when a configuration item fails, the affected business processes, financial impact, controls, and on-call team are visible in one view.

Question 2

Who is Anzen built for?

Accepted Answer

IT managers, security officers, and compliance teams at start-ups and mid-market organisations, particularly those pursuing or maintaining ISO 27001, NIS2, or SOC 2, and those who need EU data residency.

Question 3

Is Anzen a CMDB, an ITSM tool, or a GRC tool?

Accepted Answer

All three, in one schema. Most teams adopt Anzen because they were running a separate CMDB, ticketing tool, and GRC spreadsheet, and the seams between them cost more time than the tools save.

Question 4

Where is Anzen hosted?

Accepted Answer

Exclusively in the European Union. There are no US cloud providers in the data path. This is a deliberate choice driven by GDPR and Schrems II. Customer data does not leave the EU and is not exposed to the US CLOUD Act.

Question 5

Is Anzen GDPR compliant?

Accepted Answer

Yes. Anzen is built and operated by SCRTY B.V., a Netherlands-based company. A Data Processing Agreement is available on request and the privacy policy is published at /privacy.

Question 6

Can I deploy Anzen on-premise?

Accepted Answer

No. Anzen is SaaS-only. The trade-off is that we operate the infrastructure (patching, backups, monitoring) so customers don't have to.

Question 7

How much does Anzen cost?

Accepted Answer

Anzen is free for up to 10 users. Paid plans scale per user. AI add-ons (e.g. Anzen Extract) are billed separately at €99/month after a free quota. There is no setup fee and no annual minimum.

Question 8

Is there a free trial?

Accepted Answer

Yes. The free tier (up to 10 users) is the trial. Sign up, build out your CMDB and a few controls, and decide. No credit card required to start.

Question 9

How is billing handled?

Accepted Answer

Per-user invoicing is monthly. Each active add-on generates its own monthly invoice on the day of the month it was activated. Payments run through Mollie. VAT is applied at 21% for Dutch customers and 0% reverse-charge for EU businesses with a non-NL VAT ID.

Question 10

Which frameworks does Anzen support?

Accepted Answer

Out of the box: ISO 27001, NIS2, and SOC 2. Custom frameworks are supported. Controls can be tagged against any framework structure your auditor uses.

Question 11

How does control testing work?

Accepted Answer

Each control has a test script, a frequency, and an owner. Testers attach evidence and submit; a second reviewer signs off (4-eyes review). Failed tests automatically create issues that link back to the affected configuration items, applications, and business processes. The audit trail is generated as you go.

Question 12

Can I export evidence for an external auditor?

Accepted Answer

Yes. Control test results, evidence attachments, the full audit trail, and the risk register can all be exported. Auditors typically get scoped read-only access to the workspace instead, which removes the export step entirely.

Question 13

Does Anzen integrate with my existing tools?

Accepted Answer

Anzen Discover supports network scans, agent-based discovery, and cloud integrations to keep the CMDB current. SSO via SAML and OIDC is supported. A documented API is available for custom integrations.

Question 14

Can I import existing CMDB data?

Accepted Answer

Yes. CSV import is supported for entities, configuration items, vendors, applications, and business processes. The Anzen Extract add-on can also draft controls directly from existing policy PDFs/DOCX/ODT.

Question 15

Can I export my data if I leave?

Accepted Answer

Yes. Full export is available at any time. There is no data lock-in, and Anzen does not charge an exit fee.

Question 16

How does Anzen compare to ServiceNow?

Accepted Answer

ServiceNow is broader and far more expensive, with risk and compliance sold as separate suites. Anzen is purpose-built smaller: CMDB + ITSM + risk in one product, EU-hosted, with time-to-value measured in days rather than months. ServiceNow wins on ecosystem; Anzen wins on price, speed, and EU data residency.

Question 17

How does Anzen compare to Vanta or Drata?

Accepted Answer

Vanta and Drata are compliance-first and bolt onto your existing IT systems to collect evidence. Anzen is the IT system, with compliance built into the same data model, so evidence is generated as a side effect of operations rather than scraped from third-party tools after the fact.

Question 18

How does Anzen compare to Device42, iTop, or GLPI?

Accepted Answer

Those are CMDB-centric. Anzen is CMDB and ITSM and risk/controls in one schema, so a control or incident can reach back into the asset graph without any integration work. See /compare for a full breakdown.

Frequently asked questions

Product

Hosting and data residency

Pricing and trials

Frameworks and compliance

Integrations and data

Comparison

Stop managing risk in spreadsheets.