Framework-Pro is self-service
Create an account, answer guided framework questions, generate readiness documentation, and pay online when you decide to continue.
View Framework-ProFAQ
Clear answers about aneo, Framework-Pro, and IncidentAI.
Find direct answers about products, access, pricing, AI review, data handling, compliance documents, and how to contact Aneo B.V.
Start here
Most buyers need these three points first.
The products are intentionally offered differently because readiness documentation and incident management have different onboarding, data, and workflow needs.
IncidentAI is provisioned
Book a demo first so aneo can configure users, roles, categories, data handling, and response workflows around your environment.
View IncidentAIHuman review remains required
AI assists with drafting, triage, summaries, and mapping. Your team remains responsible for review, approval, implementation, and final decisions.
Responsible AICompany
About aneo
Short answers about Aneo B.V., the public website, and the problems aneo products solve.
What is aneo?
aneo is the public brand of Aneo B.V., a Dutch software company building AI-powered security workflows for lean security, IT, compliance, and operations teams.
What does aneo help teams do?
aneo helps teams organize framework readiness, security policies, control mapping, evidence placeholders, incident tickets, response actions, timelines, and decisions into workflows that are easier to explain and easier to act on.
Who is aneo built for?
aneo is built for lean security teams, IT teams, founders, GRC owners, operations teams, MSPs, and growing businesses that need practical security workflows without unnecessary overhead.
Is the public website separate from the logged-in application?
Yes. The public website at www.aneo.io is separate from the logged-in product application at app.aneo.io.
How should the brand name be written?
The brand is written as aneo. The company name is Aneo B.V.
Products
Framework-Pro and IncidentAI
The two aneo products solve different jobs: security framework readiness and incident management.
What products does aneo offer?
aneo offers Framework-Pro for security framework readiness and IncidentAI for AI-assisted security incident management and ticketing.
What is the difference between Framework-Pro and IncidentAI?
Framework-Pro helps teams choose ISO 27001:2022 or NIST CSF 2.0, map applicable controls, and generate security policies and supporting documents. IncidentAI helps teams triage, manage, document, and review security incidents.
Which product should I start with?
Start with Framework-Pro if your main need is framework readiness, security policy generation, customer questionnaire preparation, or control mapping. Start with IncidentAI if your main need is incident triage, ticketing, ownership, timelines, RCA, and response records.
Can an organization use both products?
Yes. Framework-Pro and IncidentAI can support different parts of the same security program. Framework-Pro helps define readiness and documentation. IncidentAI helps record how incident response work is handled in practice.
Are aneo products only for enterprise companies?
No. aneo is especially useful for lean teams that need structure, speed, and clarity. IncidentAI is an enterprise product because incident workflows need onboarding and access provisioning, but the target users can still be small or lean security teams.
Framework-Pro
Security framework readiness
Questions about ISO 27001, NIST CSF, control mapping, generated policies, and self-service access.
What is Framework-Pro?
Framework-Pro is a self-service aneo product that helps organizations choose between ISO 27001:2022 and NIST CSF 2.0, identify applicable controls, and generate security policies and supporting documents in minutes.
Which frameworks does Framework-Pro support?
Framework-Pro supports ISO 27001:2022 and NIST CSF 2.0.
Does Framework-Pro help choose the right framework?
Yes. Framework-Pro uses guided questions to help teams compare whether ISO 27001:2022 or NIST CSF 2.0 is the better starting point based on business goals, customer expectations, risk, and operating context.
What does Framework-Pro generate?
Framework-Pro can generate tailored security policy drafts, supporting documents, control guidance, evidence placeholders, implementation guidance, and a Statement of Applicability draft or control map depending on the selected framework.
Can generated policies be edited?
Yes. Framework-Pro outputs are intended to be reviewed, edited, approved, and maintained by the organization before they are used as final internal documents.
Does Framework-Pro make an organization ISO 27001 certified?
No. Framework-Pro accelerates readiness and documentation. It does not replace implementation, internal review, evidence collection, audit work, or certification by an accredited certification body.
Can users sign up for Framework-Pro directly?
Yes. Framework-Pro is self-service. Users can create an account in the aneo portal, complete the guided workflow, generate policies and supporting outputs, and pay online.
IncidentAI
AI security incident management
Questions about triage, ticketing, response records, MITRE ATT&CK, RCA, and access provisioning.
What is IncidentAI?
IncidentAI is an enterprise AI-powered security incident management and ticketing system for teams that need clearer triage, ownership, summaries, timelines, actions, audit logs, and RCA drafts.
Can users sign up for IncidentAI directly?
No. IncidentAI access is provisioned by aneo after a demo and onboarding because incident workflows involve users, roles, categories, data handling, escalation paths, and customer-specific process setup.
What does AI triage do in IncidentAI?
AI triage can help classify incidents, summarize tickets, identify likely cause, suggest severity and impact, recommend next steps, highlight missing information, and keep a clearer incident record for responders to review.
Does IncidentAI automatically fix incidents?
No. IncidentAI supports responders with context, summaries, and suggestions. Human review and approval remain important for material response decisions and operational actions.
Does IncidentAI support MITRE ATT&CK mapping?
Yes. IncidentAI can support MITRE ATT&CK mapping where relevant to the incident type and available information.
Does IncidentAI help with RCA?
Yes. IncidentAI helps preserve timelines, actions, notes, decisions, summaries, and closure details that can be used to prepare RCA drafts after resolution.
Who is IncidentAI best suited for?
IncidentAI is best suited for lean security, IT, SecOps, MSP, and operations teams that need more structure than a generic ticket queue but do not want unnecessary process overhead.
Pricing and access
Buying and onboarding
How pricing, payment, delivery, and onboarding work for each product.
How much does Framework-Pro cost?
Framework-Pro costs €490 per policy set generation. Users can create an account, complete the workflow, and pay online through the aneo portal.
Will I be charged before using Framework-Pro?
No. You will not be charged unless you choose to pay after using the Framework-Pro workflow.
Does IncidentAI have public pricing?
IncidentAI uses demo-first enterprise pricing. Pricing is confirmed after product fit, scope, users, workflows, and onboarding needs are understood.
Can I buy IncidentAI directly through the portal?
No. IncidentAI is provisioned by aneo after onboarding. Framework-Pro is the direct self-service product.
Are aneo products delivered digitally?
Yes. aneo products are delivered digitally through the aneo platform. No physical goods are shipped.
Where can I find refund terms?
Refund terms are available in the Refund Policy. Billing questions can be sent to support@aneo.io or hello@aneo.io.
AI and human review
Responsible AI use
How AI assistance should be reviewed before teams rely on generated outputs.
Does aneo use AI?
Yes. aneo products use AI-assisted workflows to help classify, summarize, draft, map, and organize security work.
Are AI outputs final decisions?
No. AI outputs are draft, guidance, or support outputs. Human review remains necessary before relying on them for operational, legal, compliance, security, customer, or incident response decisions.
What does human-in-the-loop mean for aneo products?
Human-in-the-loop means a responsible person reviews, edits, approves, rejects, or escalates AI-generated output before it becomes part of a final decision, policy, RCA, customer response, or operational action.
Can aneo tools replace qualified professionals or auditors?
No. aneo tools help structure work and generate useful drafts. They do not replace qualified legal, compliance, security, privacy, audit, or certification professionals where those are required.
Can AI output be wrong or incomplete?
Yes. AI-generated content can be incomplete, inaccurate, or missing important context. Teams should review facts, assumptions, evidence, applicability, and next steps before use.
Privacy and security
Data handling and website controls
Common questions about customer content, analytics, cookies, reCAPTCHA, and security posture.
Does aneo use customer content to train foundation models?
No. aneo does not use Customer Content to train foundation models unless the customer expressly opts in or agrees in writing.
Can aneo support EU data residency or zero-retention options?
Supported plans and configurations may include EU data residency and zero-retention options for certain AI workflows. Exact availability should be confirmed during onboarding or contracting.
What cookies does the public website use?
The public website uses necessary storage for basic operation and privacy choices. Google Analytics runs only after analytics consent through the cookie banner.
Does the website use Google Analytics?
Yes, Google Analytics can be used after consent. Google Signals and ad personalization signals are disabled in the website configuration.
Does the contact form use reCAPTCHA?
Yes. The contact form uses reCAPTCHA v3 to reduce spam and abuse. The public site key is not a secret. The secret key is configured on the server side.
Where can I read the Privacy Policy and Cookie Policy?
The Privacy Policy and Cookie Policy are available from the footer and the Legal page.
Legal and compliance
Terms, policies, and assurance
Where to find legal documents, security information, and vulnerability reporting instructions.
Where are the legal documents?
The Legal page links to the Terms of Service, Privacy Policy, DPA, Sub-processors, Responsible AI, Acceptable Use Policy, Security Overview, Responsible Disclosure, Cookie Policy, Disclaimer, and Refund Policy.
Does aneo provide a DPA?
Yes. The Data Processing Agreement is available on the website and explains controller and processor responsibilities where applicable.
Where can I find sub-processor information?
Current sub-processor information is available on the Sub-processors page.
Where can I find security information?
The Security Overview explains aneo security practices, including encryption, access controls, logging, incident handling, and related safeguards.
How do I report a vulnerability?
Use the Responsible Disclosure page for vulnerability reporting instructions, scope, rules of engagement, and contact details.
Are aneo outputs legal advice or certification guarantees?
No. aneo outputs are for internal business use and guidance. They are not legal advice, a security guarantee, or a compliance certification.
Contact and support
Getting help
How to reach aneo for demos, sales, product questions, billing, privacy, legal, or security topics.
How do I book a demo?
Use the contact form or email hello@aneo.io. For IncidentAI, a demo is the correct starting point because access is provisioned after onboarding.
Can I call aneo?
Yes. You can call +31 6 10 40 80 06.
Which email should I use for general questions?
Use hello@aneo.io for general enquiries, product questions, demo requests, partnerships, and company contact.
Which email should I use for support or billing?
Use support@aneo.io for support and billing questions.
Which email should I use for privacy questions?
Use privacy@aneo.io for privacy questions and data rights requests.
Which email should I use for legal questions?
Use legal@aneo.io for legal questions.
Next step
Still looking for a specific answer?
Send us the question and we will point you to the right product, policy, guide, or contact path.