Governance & Ethics

We have established a comprehensive set of policies to inform decisions and guide our actions towards more sustainable and ethical business operations. Basware is continuously developing these policies and adds additional policies if needed based on statutory, business, and community requirements.

Basware’s key policies:

View all Basware’s external Statements & Policies here ->

Compliance training

To ensure our employees have a thorough understanding of legal regulations, company policies, and ethical standards, we conduct an annual mandatory compliance training program. This program not only mitigates risks associated with non-compliance, but also fosters a culture of integrity, accountability, and ethical decision-making within Basware. 

As a cloud-based service provider, we take any threats to our own and our customers’ information very seriously. We address information security risks proactively through policies, processes, and solutions that adhere to industry best practices for security measures, controls, and standards.  

We maintain ISO27001 certified Information Security Management System and are externally audited annually as part of our commitment to continuous security control improvement. 

See more about Trust & Security here ->

Ensuring data privacy  

We ensure data privacy compliance throughout our operations, ensuring we handle personal data about our employees, customers and partners with due care and in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws. 

Read more about GDPR at Basware here ->

We encourage our employees and our suppliers to immediately report any suspected misconduct involving Basware operations. They can do this in person to their manager or HR, or confidentially via our whistleblowing channel. All employees who file a whistleblower report are protected from retaliation, including dismissal. 

See our Supplier Code of Conduct ->