Normain
Normain is a Swedish AI platform built for document extraction rather than chat: it turns audit, GRC and M&A files into structured answers, each linked to its exact source, from a review method you define once and rerun.
What is Normain?
Normain is a document analysis platform built by Normain AB, a Stockholm company founded in 2024 by Sara Landfors, Kalle Hansson and Dennis Landfors. The vendor calls its approach Extractional AI and defines it against conversational assistants: the engine is built to extract structured data, not to hold a conversation, and it targets work that has to be reliable, predictable, verifiable and repeatable.
The method is consistent. You point Normain at a body of documents, describe what must be checked and how the answer should look, and it returns structured findings in which every line carries a citation to the exact document, page or paragraph it came from, a confidence score, and reasoning you can open and challenge. Three shapes of analysis are offered: one set of questions across a whole pile of files, the same questions repeated once per file, folder, vendor or company, or a full grid of questions against sources for questionnaires and scoring exercises.
Three verticals are addressed by name, with seventeen published use cases between them: audit and assurance, from IFRS disclosure checklists to vendor SOC report reviews and ESG assurance; governance, risk and compliance, covering framework gap analysis, third-party risk and DORA ICT assessments; and mergers and acquisitions, from change-of-control clauses in a data room to Quality of Earnings validation and SPA term review. The FAQ adds sustainability reporting and consulting practices of every size.
Sources arrive from SharePoint, Google Drive, OneDrive, Box, Dropbox, web links or direct upload, in PDF, Office, image and scanned formats, handled by layout-aware OCR. The work does not stop at the answer: steps chain into a workflow that ends in a finished memo, report or scorecard, assembled in your own Word or Excel template with every line still traceable.
Normain claims more than 200 files handled in a single pass, up to 99% accuracy and 50 to 80% of time saved. These are vendor figures, published without methodology. On the security side the company holds ISO 27001 and SOC 2 Type II certifications, runs on Microsoft Azure with shared, dedicated or customer-cloud deployment, and commits never to train models on customer data.
What it does
- Read hundreds of documents in one pass and answer the same questions across all of them
- Link every answer to the exact document, page or paragraph it came from, with a confidence score
- Capture a review method once and rerun it identically on every new batch
- Fill grids and scorecards, or return one row per file, folder, vendor or company
- Open any finding to inspect the reasoning and compare it against the source side by side
- Chain extraction, cross-checking and human sign-off into a repeatable workflow
- Assemble the finished memo, report or scorecard in your own Word or Excel template
When to use Normain / When not to
A quick filter to help you decide if Normain is the right fit.
When to use Normain
- Audit and assurance teams running statutory audits, IFRS disclosure checklists, revenue recognition testing and vendor SOC report reviews
- Governance, risk and compliance functions handling framework gap analyses, third-party risk, policy reviews, DPIAs and DORA ICT assessments
- M&A and transaction services professionals sweeping data rooms for change-of-control clauses, SPA terms and Quality of Earnings evidence
- Consulting firms of any size, from the solo consultant to the global practice, that need one documented review method applied consistently across clients
- Sustainability and ESG teams assuring reports and pulling emissions data out of supporting evidence at scale
When not to use Normain
- Anyone after open-ended creative or conversational AI: the vendor positions Normain explicitly against that use and says so on its own homepage
- Teams that need a mobile client, since no iOS or Android application exists and the product runs in the browser only
- Developers wanting self-service API access, as the API is opened to customers on request with no public technical reference
- Individuals on a modest budget, given that the cheapest paid tier is EUR 116 per month on annual billing and the free tier grants 50 one-off insights
- Organisations that must confirm SSO, usage reporting or a named hosting region before signing, all of which sit behind an unpriced Enterprise tier
How to use Normain
A typical end-to-end flow, from setup to results.
- Create an account at app.normain.com; no subscription is required to start and the free tier includes 50 insights
- Connect the systems your files already live in, whether SharePoint, Google Drive, OneDrive, Box or Dropbox, or drag documents in directly
- Add web links as sources, or let Normain search the web for content if you are on the Pro tier
- Define the work once: what to check, how the answer should look, and the logic, frameworks and scoring your method demands
- Pick the shape of the analysis, from one combined answer to one row per item or a full question-by-source grid
- Run the extraction and read the structured answers as they come back
- Open any finding to inspect the reasoning, the confidence score and the source documents side by side
- Bring the team into the project to assign work, comment and review in real time
- Chain the steps into a saved workflow so the next batch runs exactly the same way
- Export the finished deliverable into your own Word or Excel template, citations intact
Pros & Cons
Pros
- Traceability is systematic rather than optional, since every answer carries its source, a confidence score and reasoning you can open
- A review method is defined once and rerun identically, which suits recurring quarterly or annual work
- Volume is genuinely handled, with more than 200 files in a single pass where many tools stop around twenty
- The output is the deliverable itself, assembled in your own template, not an answer to copy out by hand
- Security posture is documented and independently audited: ISO 27001, SOC 2 Type II, a Vanta Trust Center and a written no-training commitment
- Customer ownership of inputs, outputs and business logic is stated explicitly, with export available at any time
- A European vendor under Swedish law with IMY oversight, which is a legible frame for EU buyers
Cons
- Entry pricing is steep for an individual at EUR 116 per month on annual billing for 200 insights
- The insight, which is the billing unit, is never defined on the site, so the quotas cannot be compared with a competing grid
- Listed prices default to annual billing; the monthly rate, announced as roughly 10% higher, only appears after toggling
- There is no mobile app and no browser extension, the product being web-only
- The API exists but has no public technical reference and is opened to customers on request
- The published privacy policy covers the marketing website only, while the handling of customer documents sits in technical documentation rather than an equivalent public commitment
- The sub-processor list promised by the privacy policy returns a 404, and no hosting country or region is disclosed beyond Microsoft Azure
Pricing & Plans
Normain offers a permanent free tier at EUR 0, limited to 50 one-off insights, and its cheapest paid plan is Starter at EUR 116 per month on annual billing. Pro follows at EUR 449 per month on annual billing, and Enterprise pricing is quoted on request. Annual billing carries a stated 10% discount; the corresponding monthly rates are computed in the browser and do not appear in the published page source.
- Free — EUR 0 — 50 one-off insights
- unlimited users
- help centre
- file upload
- web links
- table mode
- repeat insights
- validation
- Starter — EUR 116 per month billed annually — 200 insights per month
- adding files larger than 10 MB
- collaboration
- templates and workflows
- Pro — EUR 449 per month billed annually — 1
- 500 insights per month
- adding file storage integrations
- Excel and Word template import
- web search and email support
- Enterprise — pricing on request — negotiated insight volume
- adding published extractions
- SSO
- dedicated support
- usage and reporting
- API integration and custom hosting
Data, GDPR & hosting
A consolidated view of how Normain handles your data.
GDPR overview
Normain claims GDPR compliance explicitly rather than by implication: the phrase "full GDPR compliance" appears in the FAQ, and a GDPR badge sits beside the ISO 27001 and SOC 2 Type II claims on the homepage and security page. Normain AB (Reg. No. 559464-9526) is named as data controller, and the privacy notice (published 5 August 2024, last updated 23 April 2026) sets out access, copy, rectification, erasure, consent withdrawal, objection, restriction and portability rights, with privacy@normain.com as the contact point and the Swedish authority IMY as supervisory body. Transfers outside the EU/EEA, including to the United States, rely on European Commission standard contractual clauses. No Article 27 representative is designated, and none is required: the company is established in Sweden. Note that this notice covers the website, not the processing of customer documents inside the product.
Who owns the data?
Normain's documentation is unambiguous: customers own everything they bring and everything the platform produces. That covers documents, files and URLs on the way in, extracted data and insights on the way out, and the templates, frameworks and extraction logic built along the way. The vendor states it neither reuses customer business logic nor shares it with other customers, and that data and outputs can be exported at any time with no lock-in. For the marketing website only, Normain AB (Reg. No. 559464-9526) is named as data controller of the personal data it collects. One asymmetry deserves flagging: feedback and suggestions sent to the company become its exclusive property under the terms of use.
Reuse rights
Inside the product, Normain says processing only happens when someone in your organisation triggers it, whether that is uploading files, running an extraction, exporting results or connecting an integration. Only users holding the right organisation or team rights can see the data in a workspace, and staff cannot open, browse or review customer documents without explicit approval. The vendor also commits in writing never to use customer data to train AI models. Customers can therefore reuse their inputs and outputs freely, and take them out at any time, without asking permission. On the website side, personal data serves to run and improve the site, answer enquiries and support direct marketing within legal limits; it is not sold, and access is confined to designated suppliers handling IT, marketing, recruitment, press, sales, analysis or statistics.
Data retention & training
Hosting summary
Normain runs on Microsoft Azure. The default is a multi-tenant environment with strong logical separation between customers, encryption in transit over TLS and at rest, role-based access control on least-privilege principles, controlled access paths with restricted administrative access, centralised monitoring and audit logging. Two alternatives are offered: dedicated hosting, with isolated infrastructure and database inside Normain's own cloud, and Customer Cloud, a full deployment inside your own virtual private cloud on Azure, AWS or GCP, where the vendor states that no data ever leaves your environment. What the site never says is where. No hosting country and no region are disclosed anywhere, and the fact that the Vanta Trust Center sits on Vanta's European instance says nothing about where customer documents are stored. On the website side, the privacy notice does contemplate transfers outside the EU and EEA, including to the United States, covered by European Commission standard contractual clauses. Buyers with data residency requirements should treat the location as an open question to raise before signing.
Things to keep in mind
Risks and trade-offs to weigh before adopting Normain.
- The legal documents live on published Google Docs rather than on normain.com, which makes their versioning and integrity harder to check than a page on the vendor's own domain
- The privacy policy covers the marketing website only; how customer documents are processed is described in technical documentation, not in an equivalent public contractual commitment
- The sub-processor list the privacy policy promises points to a page that returns a 404, so you cannot see who else touches the data without asking for it
- Two postal addresses coexist, the legal documents giving an SSE Business Labs incubator address and the site footer another, while the company page dates the founding to 2024 and the Swedish register records 21 December 2023
- Confidence scores and one-click citations make findings feel verified; the real risk is a tired reviewer signing off on the score instead of opening the source, which is exactly the professional judgement the tool is meant to support
- Performance claims of up to 99% accuracy, 5 to 100x speed and 70% better precision come from the vendor with no published methodology, and prices default to the annual-billing figure with the monthly rate around 10% higher
- Encoding a firm's review method into a reusable template concentrates its expertise inside a tool: valuable while the subscription runs, a dependency if it stops, all the more so as the billing unit is never defined
Setup & Integrations
Technical difficulty
Low. The vendor states that no technical training and no technical team are needed at any point, that setup takes minutes, and that there is no engineering configuration and no token costs to manage. Sources connect through existing integrations or by dropping files in, and the public documentation covers Quick Start, workspace setup, best practices and troubleshooting. The only genuinely technical steps sit at the other end of the range: API access, granted to customers on request, and dedicated or customer-cloud hosting, both negotiated at the Enterprise tier.
Deployment
Integrations
Behind Normain
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement Normain.
Frequently asked questions
What exactly does Normain do?
How is it different from ChatGPT or Copilot?
What file types and sources are supported?
What does Normain cost?
Are my documents used to train AI models?
What security certifications does Normain hold?
Where is customer data hosted?
Is there an API?
Is there a mobile app?
Who is behind Normain?
Should you pick Normain?
Normain is a real product with a narrow and deliberate scope. Normain AB is a registered Swedish company with dated legal documents, a published four-tier price list, standalone documentation, eight named customers quoting it on the record and a Vanta Trust Center behind its ISO 27001 and SOC 2 Type II claims. Nothing about it reads as vapour.
The proposition is unusually specific: not a better chat assistant, but a way to write a review method down once and have it executed identically across hundreds of documents, every line pointing back to its source. If your team already does that work by hand, whether disclosure checklists, vendor SOC reviews, data room contract sweeps or ESG assurance, the fit is direct, and the finished deliverable in your own template is the part competitors usually leave out.
The reservations are practical rather than fundamental. The entry price is steep for an individual, and the insight, which is what you actually buy, is never defined anywhere, so the 50, 200 and 1,500 quotas cannot be compared with anything. Accuracy claims of up to 99% are the vendor's own, published without methodology. The privacy policy covers only the marketing website, the handling of customer documents lives in technical documentation rather than a public contract, the promised sub-processor list returns a 404, and no hosting country is ever named beyond Microsoft Azure.
Worth a demo if document-heavy review is your day job, and particularly legible for European buyers who value a Swedish vendor under IMY oversight. Ask for the definition of an insight, the sub-processor list and a contractual data processing agreement before you sign.
- Choosing a selection results in a full page refresh.
- Opens in a new window.