Different Extension models
Some Extensions operate client-side in the user’s browser. Others process data to support capabilities such as write-back and scheduling.
Security & compliance
Trulyp is developed and delivered by Infotopics AfT B.V., whose information security management system is certified to ISO/IEC 27001:2022. Trulyp is developed against the OWASP Top 10 and the product is penetration tested by CyberNext Hardenberg.

What it means
ISO 27001 certification applies to Infotopics AfT B.V. and confirms that the company’s information security management system follows a robust, independently assessed framework. It covers the systems and processes that support our products, from development through delivery.
Trulyp is developed against the OWASP Top 10 and is penetration tested by CyberNext Hardenberg. Security, governance, and reliability remain an ongoing responsibility throughout the product lifecycle.
Secure by design
Trulyp Extensions operate within the Tableau dashboard and its existing security context. Tableau access controls, permissions, and row-level security determine what dashboard data a user can access. An Extension can only use the data made available to that user within the dashboard. Some Extensions, such as SuperTables and ShowMeMore, operate client-side, while WriteBackExtreme, MailScheduler, and Trulyp with WriteBackExtreme capabilities also process data.
Some Extensions operate client-side in the user’s browser. Others process data to support capabilities such as write-back and scheduling.
Tableau access controls, permissions, and row-level security determine what dashboard data an Extension can use. Trulyp products work with both Tableau Cloud and Tableau Server.
Infotopics maintains an ISO/IEC 27001:2022-certified information security management system. Trulyp is developed against the OWASP Top 10 and penetration tested by CyberNext Hardenberg.
Single sign-on
Trulyp supports SSO through OAuth and SAML, so your team signs in with their company credentials and access follows the policies your IT team already manages.
Works with

Microsoft Entra

Okta

Google Workspace

Auth0

PingOne

Azure AD

While there has always been a commitment to building secure applications, achieving ISO 27001 certification confirms that information security is well in place. I am proud to see the entire company contributing to a secure environment where high-quality products are delivered.Harm Jan Beekhuis
Frequently asked
Yes. Trulyp supports SaaS, private-cloud and on-premises deployments. Where required, Trulyp can connect to a customer-hosted local LLM, allowing the relevant solution components and AI processing to remain within the customer’s environment.
The ISO/IEC 27001:2022 certification applies to Infotopics AfT B.V., the company that develops and delivers Trulyp, not to the Trulyp product itself. Trulyp is developed against the OWASP Top 10 and the product is penetration tested by CyberNext Hardenberg. Trulyp also provides traceability and audit logging for supported user and AI actions, helping organizations maintain visibility and governance over activity within the platform.