E-Governance & Public Sector IT Solutions Norway

FAQs

• Q: How does Dev House Norway protect sensitive citizen data and comply with local cybersecurity guidelines?

  Answer: We implement strict cybersecurity controls aligned with NSM grunnprinsipper for IKT-sikkerhet, Digdir guidance, and GDPR / Datatilsynet. We encrypt citizen data in transit via TLS 1.3 and at rest using AES-256 keys managed through Azure Key Vault. We configure multi-factor authentication (MFA) via Microsoft Entra ID, establish granular role-based access control (RBAC), and enforce continuous threat monitoring, protecting government portals from unauthorised entry.

• Q: Are your government IT solutions designed to meet WCAG accessibility standards?

  Answer: Yes, inclusive public access is a primary mandate for all public sector portals. We design and build citizen portals and public websites to comply strictly with the Web Content Accessibility Guidelines (WCAG 2.2 AA). This includes screen-reader optimisations, clear typography contrast ratios, responsive layouts for all form factors, and complete keyboard-only navigation pathways, ensuring equal access for all members of the public.

• Q: Can you integrate custom citizen portals with national identity services like ID-porten?

  Answer: Yes. We design and build secure API bridges and identity federation layers that connect custom front-ends with ID-porten, the national login solution operated by Digdir (supporting BankID, MinID, Buypass and Commfides), as well as Altinn authorisations and Maskinporten for machine-to-machine API access. These integrations enable secure, verified identity checks and role-based access, simplifying user registration and transactional authentication across public agencies.

• Q: How do you guarantee data sovereignty and local residency for public sector software?

  Answer: We deploy all public sector systems, transactional databases, and document vaults exclusively within Norwegian or EEA data centres (Azure Norway East and AWS eu-north-1 in Stockholm) of certified hyper-scalers like Microsoft Azure or AWS. This setup ensures that sensitive citizen records and agency assets remain resident in Norway or the EEA, meeting GDPR, the Norwegian Personal Data Act (personopplysningsloven), and national archiving requirements.

• Q: What post-launch SLA support models do you provide for government agencies?

  Answer: We deliver structured Service Level Agreements (SLAs) tailored to the uptime requirements of government agencies. Our ongoing support covers real-time system monitoring, automated database backups, database index tuning, and regular security patching. We operate from local Norwegian offices to provide immediate response capabilities, ensuring your public systems remain secure, performant, and perfectly aligned with evolving regulatory updates.