Halden Foods
By Ana Ruiz · created 26 Oct 2026, 13:30 UTC · last updated 28 Oct 2026, 09:20 UTC · version 4
customerhalden-foodseu-regionentra-id
Owner: Ana Ruiz · Onboarding: Clara Rossi · Technical and security: Tom Weber, Mira Holm · Deal: David Kim
In short
Food producer and distributor, Norway and the Netherlands. 14 sites, about 2,000 people; a site counts as a depot. Contract signed on Monday 26 October. Region: EU (Frankfurt), as the contract requires. Onboarding has started: Halden Foods onboarding.
Contacts
| Who | Role | Notes |
|---|---|---|
| Ingrid Solberg | CISO | Signed off our security answers on 22 October. Wants to check the region and the logs in the portal, not take our word for it. |
| Joost Vermeer | Procurement | Contract and DPA. |
| Halden IT lead | To be named at kickoff | Will own Entra ID and the people import. |
What we committed to in the sale
Read this before answering anything Halden asks. Each line is in the contract or in our questionnaire answers (ACM-268).
| Commitment | Status |
|---|---|
| Halden's data, including backups, is stored in the EU region, set when Halden is onboarded. | Done. Organisation created in the EU on 27 October; onboarding can't finish without a region since ACM-296. |
| Notices to Halden's people are sent from the EU. | Done. EU clients' mail goes through our EU mail account since 16 October (ACM-305). |
| Site managers approve their own people's access. | Exists since 1 October. |
| Single sign-on with Entra ID, site by site. | Exists. May switch every site at once if ACM-293 ships first. |
| Automatic provisioning from Entra ID. | Not available. Administrators import people from a spreadsheet. We did not promise a date. |
| Auditors read twelve months of the sign-in log. | Not built. ACM-324, being shaped. No date promised. |
| Shared site PCs sign people out after 30 idle minutes. | Not built. Split out of ACM-324 on 14 October, being shaped. No date promised. |
| Support works from inside the EU. | True today. |
History
- September: procurement starts (David, Tom).
- 7 Oct: Halden's auditors ask who reads the sign-in log and how long it is kept (SUP-1211).
- 9 Oct: 40-question security questionnaire (ACM-268). Data in the EU answered "yes, if placed in the EU region at onboarding" (ACM-269).
- 12 Oct: our mail provider keeps message logs in the US for 30 days; Mira chose a second account in its EU region on 13 October (ACM-305).
- 13 Oct: security call with Ingrid.
- 22 Oct: CISO sign-off.
- 26 Oct: contract signed.
- 27 Oct: organisation created with the region step (EU).