Customer story

How ViNotion automated Confluence access controls to support ISO 27001

ViNotion needed to protect sensitive customer information without increasing manual administration. With Compliance for Confluence, the company connected content classification to automated page restrictions, making security controls easier to manage and follow.

Key outcomes

  • 4 weeksEstimated audit-preparation time saved annually*
  • 3–4×Estimated return from reduced admin and compliance work*
  • Automated access controlsPage restrictions linked to content classification

*Time savings and financial returns are AppFox estimates, not independently measured customer results.

About ViNotion

ViNotion is a Netherlands-based computer vision and AI company serving customers in government and regulated industries.

Its Confluence environment supports documentation and collaboration across teams, including sensitive customer and project information that requires careful handling.

The challenge: Protecting sensitive information without adding manual work

As ViNotion’s business grew, managing confidential information in Confluence became increasingly complex. The team needed to:

  • Control access to sensitive data

    Keep confidential customer information and analytical results accessible only to authorized users.

  • Reduce manual permissions management

    Remove the burden of deciding and applying access restrictions to individual pages.

  • Support ISO 27001 requirements

    Apply consistent information security controls across Confluence while moving from Server to Cloud.

“We needed to know who could access what, when, and why. But we didn’t want to burden users with more decisions or manual processes.”

Christopher Geelen, Operations Manager, ViNotionComputer vision and AI company serving government and regulated industries

The solution: Connecting information classification to access controls

ViNotion selected Compliance for Confluence to simplify how sensitive content was classified and protected.

This helped ViNotion maintain more consistent information controls without relying on administrators to manage every page individually.

The team was able to:

Link classification levels to page restrictions, limiting access to the appropriate users and groups.

Challenge addressed

Control access to sensitive data

Keep confidential customer information and analytical results accessible only to authorized users.

Use defined sensitivity levels to make information-handling requirements clearer.

Challenge addressed

Support ISO 27001 requirements

Apply consistent information security controls across Confluence while moving from Server to Cloud.

Reduce the decisions employees needed to make when protecting sensitive content.

Challenge addressed

Reduce manual permissions management

Remove the burden of deciding and applying access restrictions to individual pages.

The results: Stronger information security, less manual effort

With classification and access restrictions connected, ViNotion reduced the manual work involved in managing sensitive information while supporting its ISO 27001 processes.

  • Customer outcomeCompliance for Confluence

    More consistent access controls

    Sensitive content could be protected according to its classification, reducing reliance on employees to configure page permissions manually.

  • AppFox estimate

    4 weeksof estimated audit-preparation time saved annually

    AppFox’s model suggests that more consistent controls and less manual evidence collection could save approximately four weeks of audit-preparation work each year.

  • AppFox estimate

    3–4×estimated return from time savings

    The internal model also indicates a potential 3–4× return from reduced administrative and compliance work, representing thousands of euros in estimated savings per audit.

The time and financial estimates are based on AppFox modeling. They are related estimates, not separate or independently measured customer savings.

Take the manual work out of protecting Confluence content

Classify sensitive information, apply access restrictions automatically and make your organization’s security policies easier to follow.