About
Fidureon is built by CShift.
CShift AB brings together Nordic compliance & security experts in Gothenburg. They built the tool they wanted.
-
Oscar Jacobson CEO -
Carl Retzner CTO -
Sophia Pagil Senior expert -
Jimmie Ekvall CISSP, InfoSec expert -
Christian Olivefors Project management & InfoSec -
Fredrik Hansson DevSecOps expert -
Hampus Holmström InfoSec expert -
Alexander Erikson-Gardell InfoSec expert
Fully EU-based.
-
Built in Göteborg Built and operated by CShift AB in Göteborg, Sweden.
-
Google Cloud in the EU Hosted in Finland; evidence-file backups in Stockholm. europe-north1europe-north2
-
AI on European infrastructure The AI runs on models hosted in EU data centres: Google’s models on Vertex AI in the EU, and selected flows on Mistral, a European AI company.
-
Your data, any time Your organisation’s data can be exported at any time, in a common machine-readable format (EU Data Act).
What we stand for
Secure what matters. Skip the overhead.
CShift helps Nordic companies build trust and enable growth: meet enterprise expectations, manage compliance and prepare for certification, without losing focus on what you are building. Fidureon puts that into a platform.
Why Fidureon exists
Built from hands-on expertise.
CShift’s experts run information security and compliance work for clients: ISO 27001 programmes, PCI DSS and NIS2. Fidureon is the tool they wanted for that work, the compliance operating system for European companies, and that hands-on work still informs what goes into it.
Three design decisions came out of it.
-
Work once.
A control is linked to the requirements it satisfies across frameworks, so the evidence you collect once counts everywhere it applies.
-
A number that follows the work.
Requirement status and the compliance number are derived from the actions your team completes, and each requirement shows why it is where it is.
-
Agents do the continuous work. People make the calls.
You choose how much the agents do on their own. By default, readiness and evidence proposals wait for someone on your team to approve them.
CShift and Fidureon
One company. A product and expert services.
Fidureon is CShift’s product. The two meet in gap engagements and partner work: an assessment runs as an engagement with its own scores, findings and reports, and a partner can run several client organisations from one console.
- An assessment in progress The readiness assessment runs as an engagement: its scope, a lead assessor, and a running count of findings and reports.
- Compared with a baseline It is compared with last year’s completed gap analysis, so you can see what has moved since then.
- An assessment in progress. The readiness assessment runs as an engagement: its scope, a lead assessor, and a running count of findings and reports.
- Compared with a baseline. It is compared with last year’s completed gap analysis, so you can see what has moved since then.
The product
Fidureon
The compliance operating system: frameworks, controls, risks, suppliers, the AI register and AI agents in one workspace, sold as a subscription.
- Interface
- English and Swedish
Expert services
CShift
CShift’s experts work with clients directly, on the services below. That work informs what goes into the product.
- Gap assessments Where you stand against a framework, and what it takes to close the gaps.
- Regulatory compliance Hands-on help with what a regulation asks of your organisation.
- Certification support Getting ready for an audit; the certification body makes the decision.
The team
The people at CShift.
The compliance, security and engineering experts behind Fidureon.
-
Oscar Jacobson CEO -
Carl Retzner CTO -
Sophia Pagil Senior expert -
Jimmie Ekvall, CISSP InfoSec expert -
Christian Olivefors Project management & InfoSec -
Fredrik Hansson DevSecOps expert -
Hampus Holmström InfoSec expert -
Alexander Erikson-Gardell InfoSec expert
EU hosting
Where your data lives.
Your compliance records are kept in the EU: hosted in Google Cloud europe-north1 (Finland), with a daily copy of evidence files in europe-north2 (Stockholm). Database backups stay in Google Cloud’s EU locations.
- Regional high availability The database runs as a regional high-availability Cloud SQL instance in Google Cloud’s Finland region.
- Point-in-time recovery The database has point-in-time recovery, so it can be restored to an earlier moment, not only to its most recent backup.
The AI, in the EU too
The AI runs on models hosted in EU data centres: Google’s models on Vertex AI in the EU, and selected flows on Mistral, a European AI company. More on the security page.
Contact
Ways to reach us.
- A Fidureon demo, or a question about your scope
- Use the contact form
- Security reports
- Vulnerability disclosure policy
- Expert services from CShift
- Contact CShift (opens in a new tab) LinkedIn (opens in a new tab)
- Company
- CShift AB Swedish limited company
- Org. nr
- 559375-6108
- Address
- Kungsgatan 57 411 15 Göteborg, Sweden
- Contact
- [email protected] General enquiries
See what we have built.
Book a demo and we will walk through your own scope and frameworks. Or start with the free readiness check for ISO 27001 or the EU AI Act.