All your municipality's accountability reports in one file.
ENSIA, lawfulness and SiSa, privacy, section 213a and the algorithm register on one set of measures, with the evidence attached. Assess and substantiate once, cover multiple accountability reports, from the self-assessment to the council declaration, year after year. With smart support built in and fully hosted in the EU.
The control framework
Six tracks, one shared measures layer
Each track has its own frameworks, its own deadline and its own final output. Underneath lies one set of control measures, with cross-references between requirements that amount to the same thing. Proving one measure therefore covers every accountability report where it applies.
BIO2
The Baseline Information Security for Government, based on ISO 27001:2023 and 27002:2022. Risk-driven, with a working security policy and mandatory internal audit.
GDPR & Wpg
Data protection (GDPR) and the processing of police data (Wpg) form their own accountability track, not part of ENSIA. Where they rely on the same measures, the evidence is reused.
DigiD
The standards for secure digital access, on which a NOREA RE issues annual assurance. Linked to the same controls in GRIP.
Suwinet / GeVS
The accountability for data exchange in the Suwi domain, to be submitted to BKWI before 1 May. Part of the same file.
Compliance & SiSa
The specific internal control (VIC) on the budget, conditions and M&O criteria, and the SiSa accountability for specific grants. Belongs with the annual accounts, not ENSIA, but relies on the same control measures.
Base registries
The self-assessments for the population register, travel documents and the geo base registries BAG, BGT and BRO. Part of the same ENSIA accountability, with the source named per framework.
Cybersecurity Act
The duty of care and notification duty under the Dutch Cybersecurity Act, the national implementation of NIS2, apply year-round and stand apart from the board statement. They draw on the same BIO measures: one assessment, two accountability reports.
Section 213a review
The periodic review of efficiency and effectiveness under section 213a of the Municipalities Act, reported to the council with a copy to the court of audit. A different question from lawfulness: whether the policy works.
Algorithm register & IAMA
The register of algorithms in use and the human rights impact assessment that goes with it, including the questions article 27 of the AI Act puts to a public body. Its own accountability route, via the algorithm register and the AI Act.
What GRIP offers
Prove it once, cover multiple accountability reports
The accountability reports stand apart, the measures beneath them don't. GRIP links the requirements from all frameworks to one set of measures: record your evidence once and cover every accountability report where it applies.
Smart support built in
GRIP thinks along with you. The built-in assistant knows your frameworks and makes suggestions: which measure fits which requirement, a draft council declaration, suggestions for findings. Always as a suggestion, you decide.
Your data stays in the EU
Built and hosted in the European Union. Data is stored encrypted per municipality and strictly separated. No US cloud.
Affordable, no implementation project
No costly implementation project and no sky-high annual licence fees. Colleagues who only submit evidence need no account or licence.
From file to executive and council
The governance line is part of it: memo, progress report, council declaration and letter to the council, each with its status and the case number under which it sits in the records system. At the end of the cycle GRIP produces the handover file, so knowledge does not stay with one person.
The explanation
How GRIP works, in ten parts
What lands on the municipal controller's desk, how one measure carries multiple accountability reports, the model from Unified Control to council declaration, and how it works in practice. With screenshots from a configured demo municipality. The explanation is available in Dutch.
Curious how GRIP works for your municipality?
Request a demo or get in touch. We'd be glad to show you how GRIP brings your municipality's accountability reports together in one file.