Skip to main content

Product Data Sheet – azuma nori

Working Translation

This translation is NOT legally binding and a working translation only. Legally binding and relevant, particularly in case of any discrepancies, is solely the German text.

1. Name of the product/software​

azuma nori

2. Name/company of the provider​

azuma healthtech GmbH (hereinafter "azuma")

3. Field of application – What can the product be used for?​

azuma nori is a digital product of azuma healthtech GmbH (https://azuma.health/). It is used to analyse a software provider's codebase locally against regulatory compliance requirements – in particular BSI TR-03161, BSI TR-02102-1/-2 and the EU Cyber Resilience Act (further regulatory policies in progress). Instead of rigid regex or signature rules, context-aware, locally bounded LLM sub-agents evaluate the codebase against pre-defined compliance matrices. azuma nori is specifically adapted to the requirements of software in the healthcare sector and can be used for a wide range of applications digitising healthcare. The source code never leaves the user's device at any point.

4. Functions of the product/software​

azuma nori: Functions for software makers and development teams

  • Agentic compliance analysis via locally bounded LLM sub-agents instead of a static rule engine

  • Zero-code-upload security model: source code is read locally only and never transmitted to azuma servers

  • Pre-defined compliance matrices for BSI and EU standards, each policy bookable individually

  • Self-contained desktop client and CLI for running the analysis locally

  • LLM-agnostic – bring your own model: Direct Cloud API (Anthropic Claude, OpenAI GPT, Google Gemini), local CLI wrappers, or on-premise/air-gapped endpoint with your own API key

  • SSO integration via azuma doa

  • Extensive documentation

  • Continuous further development

  • Operation of the central backend infrastructure (policy, licence and user management as well as telemetry)

Report formats for different audiences

  • Executive Briefing for engineering leadership (Markdown or PDF)

  • Auditor Deep-Dive with control matrix and line-level evidence

  • Regulatory Compliance Dossier for regulators, generated deterministically from local logs and automatically anonymised

5. Available languages​

English

6. Constraints (e.g. compatibility, operating system, memory usage, etc.)​

azuma nori runs as a self-contained desktop application (standalone client incl. CLI) on the user's own machine. Unlike cloud-based azuma modules, the analysis takes place entirely locally; the source code is read directly from the local disk and is never sent to azuma servers. Configuration, artefacts and analysis results are stored in a local Data Directory (.nori workspace) that the user chooses and controls. The analysis requires a connection to a Large Language Model; the user selects the LLM provider (Direct Cloud API, local CLI wrapper, or on-premise endpoint) and supplies the corresponding API key themselves. An internet connection to the azuma backend is required for licence, policy and user management as well as for transmitting aggregated telemetry. Only strictly filtered metadata is transmitted to the azuma backend (including run ID, runtime, token consumption, pass/fail status per control ID, aggregated compliance score) – never source code, secrets, .env files, evidence files, or the concrete wording of identified vulnerabilities. The terms of use of azuma apply.

7. Customer benefit​

Local, context-aware and pre-configured for regulation: azuma nori enables compliance audits without code upload. Healthcare software providers can continuously check their codebase against complex frameworks such as BSI TR-03161 without proprietary source code ever leaving their own organisational boundary. Instead of being defeated by static analysis and manual audits, teams receive context-aware assessments from local sub-agents – with full data sovereignty and free choice of LLM provider. Reports can be exported precisely for engineering leadership, auditors and regulators.

8. Order designation​

Designation: Product

  • azuma_nori_FREE: azuma nori Free License (self-service test access, 3 curated controls)

  • azuma_nori_STND: azuma nori Standard License (all policies individually bookable, price depending on policy complexity)

See also: License & Use Agreement (On-Premise)