# Information security

> How Hasty works to protect client data and information across delivery. We work systematically on governance, technical safeguards and staff competence, following principles inspired by established information security frameworks.

Human view: https://hasty.se/en/juridik/informationssakerhet
Agent view: https://hasty.se/en/juridik/informationssakerhet.md

Languages: sv=https://hasty.se/juridik/informationssakerhet | en=https://hasty.se/en/juridik/informationssakerhet | no=https://hasty.se/no/juridik/informationssakerhet | da=https://hasty.se/da/juridik/informationssakerhet | fi=https://hasty.se/fi/juridik/informationssakerhet

Uppdaterad: 2026-09-21

## Governance and responsibility

Security work is led by our management team and a designated security lead. Policies and routines are reviewed at least annually and whenever the business changes materially.

Questions about our security work go to privacy@norrhavet.com.

## Access control and encryption

- Access to systems and client data follows the principle of least privilege and is reviewed regularly.
- Multi-factor authentication (MFA) is required for all staff and for access to critical systems.
- Data is encrypted at rest and in transit using industry standards, to the extent technically and commercially reasonable.
- Logging is used to detect anomalies and misuse, without storing personal data or other sensitive client content (PII) in plain text.

## Suppliers and sub-processors

We vet suppliers and sub-processors before use and on an ongoing basis, requiring agreements, an appropriate security level and storage within the EU/EEA. We are not responsible for failures or outages at independent third-party suppliers outside our control.

## Incident management

We have a documented process to detect, investigate and remediate security incidents. If an incident affects client data, we inform the affected client without undue delay, in accordance with applicable law and any agreement. Exact timeframes may vary depending on the nature and scope of the incident.

## Continuity and backup

We take regular backups and test restoration with the aim of allowing operations to continue in the event of disruptions or data loss. We do not guarantee a specific level of availability or that data can always be fully restored.

## Principles inspired by established frameworks

Our security work is inspired by the principles of security, availability, confidentiality and processing integrity found in frameworks such as SOC 2. This does not mean that Hasty or Norrhavet Group AB is certified or audited under SOC 2, only that our internal routines are designed with such frameworks as inspiration.

## Staff

All employees and consultants complete security training at onboarding and on an ongoing basis, and sign confidentiality agreements before gaining access to client data.

## Relationship to agreements and limitation of liability

Hasty is a trademark owned and operated by Norrhavet Group AB, Bangatan 5A, 722 28 Västerås, Sweden. Norrhavet Group AB is the contracting party with clients.

This document is informational and describes our routines and working methods. The applicable client agreement and mandatory law always take precedence over this document, which creates no independent rights, warranties or obligations beyond those set out in an agreement or by law.

To the extent permitted by law, Norrhavet Group AB is not liable for failures, outages or errors in third-party services or suppliers, nor for deficiencies in material provided by the client.

The client is responsible for its own instructions and material and for having the necessary rights to what is provided to us.

We may update this document from time to time. Changes take effect going forward and are published on this page. This document is governed by Swedish law.

---

## Kontakt

- Allmänna frågor: hej@hasty.se
- Offert och nya uppdrag: christian@hasty.se
- Telefon: 08-480 04 706 (+46 8 480 04 706)
- Besöksadress: Bjurholmsplan 24, 116 63 Stockholm, Sverige
- Kontaktsida: https://hasty.se/en/kontakta-oss
- Personlig service (formulär): https://hasty.se/en/boka-demo
- Juridisk avtalspart: Norrhavet Group AB, org.nr 559258-3792, Stockholm, Sverige.
- Priser och kalkylator: https://hasty.se/en/priser

## Site maps for agents
- https://hasty.se/llms.txt
- https://hasty.se/llms-full.txt
- https://hasty.se/agents.md
- https://hasty.se/sitemap.xml

Hasty is a brand owned by Norrhavet Group AB (org.nr 559258-3792), Sweden.