Security and cloud
In the cloud or on your own server. Your data stays in the EU.
Dawaco Phrea™, the new version of Dawaco, runs as SaaS on Microsoft Azure in Europe or on a server in your own environment. This page is written for the IT architect and the information security officer who have to sign off: where it runs, who has access, how the AI assistant is bounded, and how the platform protects your measurement series from damage.
For your assessment
At a glance
Answers to questions that come up in many information security questionnaires, in one place and in public. You do not need to request a quote to read them.
| Topic | How Phrea handles it |
|---|---|
| Hosting | As SaaS on Microsoft Azure (West Europe region), or on a server in your own environment. |
| Data location | In the European Union, in both options. |
| AI processing | Inside the EU, fixed on the server side. Not a setting a user can change. |
| Switching AI on or off | Per module and per user, with a usage limit for each user. |
| Access | Roles for read, write and administration, plus roles per module. |
| Simultaneous editing | Guarded. Nobody silently overwrites a colleague’s work. |
| Original measurement | Always kept. Your measurement stays your measurement: every correction with a reason, always reversible. |
| Missing data | Never filled in. Phrea never fills in a value that is not there, and would rather refuse the operation. |
We go through contractual and legal arrangements, and your own questionnaire, with your information security officer in the intake meeting.
Two ways to run Phrea. The same software.
You decide where Phrea runs, not your supplier. As a service in our cloud environment, or inside your own infrastructure if your policy requires it. Either way, you work with the same software.
SaaS on Microsoft Azure in Europe
We host Phrea for you on Microsoft Azure, West Europe region. Your staff work in the browser; nothing is installed on their workstations. A good fit for organisations that do not want to set up server management for their monitoring network.
On your own server
Does your data have to stay inside your own infrastructure, for example because your network policy or your tender requires it? Then Phrea runs on a server in your own environment, inside your own network.
In both options, storage and processing stay in the EU. That includes the AI assistant.
AI under your control, not the other way round
The AI assistant answers from your own measurements, with charts, maps and cited sources. How far that assistant reaches into your organisation is your decision.
- Processing inside the EU
- Questions to the assistant and its answers are processed inside the EU. This is fixed on the server side, not in a user setting, so no member of staff can have your data processed outside the EU by accident.
- On or off per module and per user
- You decide in which modules AI is available and which users work with it. When the assistant is switched off, the user sees so clearly on screen.
- Usage limits per user
- Every user has a limit on how much they use the assistant. That keeps use within the bounds your organisation sets.
- Answers with a traceable origin
- Answers about your network come from your own measurements and cite their sources. The assistant does not replace the hydrologist’s judgement.
- Never used to train AI
- Your data is never used to train AI. Not by us and not by our AI provider. Your measurements and your questions to the assistant are used only to answer you.
Some functions are available as an add-on module.
Who may do what, managed in one place
In Phrea, data management, modelling, the AI assistant and the BRO chain are one product. So you manage access in one place too, instead of across a set of separate packages, each with its own accounts.
Users sign in through the Dawaco authorisation service, which holds who someone is and which roles they have. Someone who works for more than one organisation, at a consultancy for example, chooses at sign-in which organisation they are working for.
| Role | What this role may do |
|---|---|
| Read | Consult data, maps, charts and reports. Someone who only needs to look cannot change anything. |
| Write | Enter and edit measurements, well data and corrections. |
| Administration | The set-up and settings of the platform. |
| Module roles | Additional rights within a module. For example, you decide separately who may send deliveries to the BRO, the Dutch Key Register of the Subsurface. |
Roles are granted deliberately. Write and administration are separate rights, not a by-product of read access.
Refuse rather than corrupt
Groundwater data underpins permits, BRO deliveries and decisions about drinking-water abstraction. That is why integrity in Phrea is not a setting but a design rule: the platform would rather refuse an operation than damage a measurement.
- Traceable for your auditor
- For every correction you see what changed and why. You can account for a series without digging.
- Importing with a safety net
- Import any supplier file safely, and roll it back if you need to. A wrongly mapped file never slips into your series unnoticed.
- Checked before it leaves
- A delivery to the BRO is checked before it leaves your organisation. You see errors at your end, not only at the registry.
- Only those who may, deliver
- You decide separately who may send deliveries to the BRO. Viewing, editing and delivering are separate rights.
Separation
Your data in a database of its own
Your data sits in a database of its own, separate from that of other organisations. Keys and passwords are never stored as plain text. Scientific calculations also run isolated within the platform. We go through the details with your information security officer alongside your questionnaire.
Security questions
Send us your questionnaire
Does your organisation have its own information security questionnaire or a cloud-use checklist? Send it to us.
- Security questions
- info@dawaco.nl
- General
- +31 (0)345 342170
- Helpdesk
- +31 (0)345 614319
- Address
- Dawaco B.V., Venusstraat 17, 4105 JH Culemborg, the Netherlands
FAQ
Frequently asked questions about security and cloud
Where is our data stored?
As SaaS on Microsoft Azure in Europe, or on a server in your own environment. In both cases your data stays in the EU.
Is Phrea on our own server the same product as the SaaS option?
Yes, it is the same software; you choose where it runs.
Is the AI assistant processed outside the EU?
No. AI processing takes place inside the EU, and that is fixed on the server side.
Can we switch the AI assistant off?
Yes. AI can be switched on or off per module and per user, and each user has a usage limit.
Is our data used to train AI?
Your data is never used to train AI. Not by us and not by our AI provider. Your measurements and your questions to the assistant are used only to answer you.
How do users sign in?
Through the Dawaco authorisation service, which holds identities and roles. Anyone who works for more than one organisation chooses the organisation at sign-in.
What happens when two colleagues edit the same record at once?
Phrea never overwrites anything unnoticed. We show how that works in the demo.
When is Phrea available?
Dawaco Phrea™ is available from October 2026.
Bring your security officer to the demo
In a demo we show the measures on this page in the product: roles, the AI settings, a conflict during simultaneous editing and an import you revert. Available from October 2026.