FEHA Logo
FEHA

FEHA International Consulting B.V

Welcome to FEHA

AI-Powered Security & Compliance Platform for Startups and SMBs

At FEHA, we believe that security and compliance should be proactive, continuous, and scalable — not a one-time checkbox.

That's why we've built a modern, AI-powered platform to help growing businesses around the world stay secure, audit-ready, and compliant with local and global standards. 


Security as a Culture, Not Just a Tool

At FEHA, we don't just build tools, we help shape your organization's security culture. 
 

Contact us
contact@feha.io
IT Services & Consulting
ISO27001:2022 Certified

Completed Compliance

Frameworks verified by consultant

ISO 27001:2022

ISO 27001:2022

106 measures implemented

ISO 42001:2023

ISO 42001:2023

68 measures implemented

Resources

Responsible Disclosure Policy

This policy encourages security researchers and users to report vulnerabilities in FEHA’s systems responsibly and in good faith. Outlines safe channels for disclosure and ensures reporters will not face legal action if they follow the guidelines.

Public

AI Governance Policy

This AI Governance Policy establishes a structured framework for the ethical and responsible development, deployment, and use of Artificial Intelligence (AI) within FEHA.

Public

FEHA ISO 27001 Certificate

ISO 27001 Certificate demonstrates our commitment to maintaining a robust Information Security Management System (ISMS) and protecting information assets through a systematic, risk-based approach to information security.

Public

In Progress Compliance

This score is determined through an assessment performed by our FEHAGRC Consultant tes.

PDPASingaporeCOMPLIANCEMONITOREDBY FEHA

PDPA Singapore

2 of 18 measures implemented

SOC 2COMPLIANCEMONITOREDBY FEHA

SOC 2

31 of 139 measures implemented

2 Measures

Encryption / Cryptography

Cryptographic Configuration Standards and Implementation Records
Encryption Policy
1 Measures

Correction

Nonconformity and Corrective Action Register
3 Measures

Internal Audit

Internal Audit Report
Internal Audit Programme
Audit Procedures/Methodology
6 Measures

Business Continuity

Business Continuity Plan
Disaster Recovery Plan
Historical Uptime Reports
7 Measures

Incident Management

AI Concerns Reporting Procedure (Whistleblowing Policy)
Incident Report
Records of AI Concerns Reports
6 Measures

Vulnerability Management

Penetration Testing Report
AI Adversarial Testing Report
Public Bug Bounty Program
6 Measures

Source Code

Code Implementation of the Tenant Filter
Version Control System Logs
Documentation of Development Environment Security
16 Measures

Secure Development

Asset Patch Update Log
Sprint Security Reviews
Technical Development Guidelines for AI Fairness and Safety
4 Measures

Backups

Information Backup Policy
Clock Synchronization Documentation
Backup Schedule and Success Logs
7 Measures

Endpoint Security

Brute-Force Protection Logs
Antivirus/Anti-malware Software Deployment and Update Logs
Device Configuration Standards or Baselines
2 Measures

Data Masking

Data Masking Policy
Data Masking Documentation
3 Measures

Secure Authentication

Procedures for Managing Authentication Credentials
Password Policy
Multi-Factor Authentication (MFA) Implementation Records
15 Measures

Logging & Monitoring

Availability & SLA Dashboards
Performance Test Results
Access Control Configurations
5 Measures

Network Security

Network Diagram
WAF configuration
IDS/IPS logs
8 Measures

Access Control

Role-Based Access Control (RBAC) Matrix
Privileged Utility Program Usage Logs
Single Sign On (SSO) Implementation
21 Measures

Data Protection

Disposal Records
Data Minimization Policy
Data Catalog Entries/Metadata Records for AI Datasets
7 Measures

Inventory

Asset Register
Asset Management Policy
AI Tooling Version Control Records
2 Measures

Remote Working

Remote Working Policy
Examples of Security Reminders
7 Measures

Training

Training Records
Annual Security Training
AI Competence Assessment Matrix
9 Measures

Onboarding/Offboarding

On-boarding Records
AI System Procurement & Use Policy
Off-Boarding Records
2 Measures

Recruitment

Template Employment Contract
Personnel Background Verification
3 Measures

Objectives

Information Security Objectives
Annual Performance Review Records
AI Objective Action Plan
11 Measures

Management Documentation

Compliance Monitoring and Reporting Records
AIMS Performance Measurement Plan
Budget Allocation Records
3 Measures

Change Management

Change Request Forms / Change Log
Alert Configuration for Changes
Change Management Policy
9 Measures

Risk Management

AI Impact Assessment Report
Fraud Risk Assessment
Risk Assessment Report
6 Measures

Interested Parties

Customer Usage Disclosures
Register of Interested Parties and Their Requirements
Customer Contracts/SLAs
10 Measures

Legal & Regulatory

Data Protection Impact Assessment (DPIA)
Expert Consultation Records
List of relevant authorities
3 Measures

Roles & Responsibilities

Role Changes
RACI Matrix
Organizational Charts
9 Measures

Management System Documentations

Internal Communications
AIMS (AI Management System)
Annual Penetration Testing Report