AND-E builds a flexible business continuity solution with Baserow

“We chose to build our own GRC solution with Baserow as it was cheaper, more flexible, compliant with our data governance policies and very user friendly. The teams immediately adopted the tool.”

John Paget, BCP Manager, AND-E UK

AND-E needed a flexible, GDPR-compliant way to manage business continuity, risk, and compliance processes across its UK operations. Instead of buying an expensive and rigid out-of-the-box GRC or business continuity software solution, the team built its own custom system in Baserow without requiring technical skills.

With Baserow, AND-E created a central hub for software inventory, impact assessments, risk identification, policies, and response procedures. The solution is currently used by the UK subsidiary, with plans to expand across the European business.

By choosing Baserow, AND-E saved more than 50% compared to buying a traditional GRC or BCP platform, while giving business users the flexibility to build and adapt the system themselves without IT involvement in the development of the solution.

Industry

Insurance / Motor & Mobility Insurance

Organization Size

Enterprise

Region

Europe / United Kingdom

Baserow Capabilities

• Database & Structured Data Management
• Forms
• GDPR-Compliant Cloud Workspace
• Operational Risk & Continuity Management Template

About AND-E

AND-E, short for Aioi Nissay Dowa Europe, is a motor and mobility insurance provider focused on making tomorrow’s journeys simpler, safer, and smarter. The company provides insurance products and services through its own brands and white-label partnerships, supporting customers across private motor, personal lines, commercial fleet, and mobility-related insurance use cases.

As a regulated insurance organization, AND-E needs to manage operational risk, compliance, business continuity, and data protection with care. For its UK operations, this meant understanding which systems are used across the business, who depends on them, what happens if they become unavailable, and which procedures should be followed in the event of a disruption.

Challenge: Expensive and rigid GRC tools were not flexible enough for the business

Business continuity and GRC processes are critical for insurance organizations. If a key software system becomes unavailable, teams need to know who uses it, what business functions it supports, what the operational impact would be, and which procedures should be triggered.

AND-E needed to build a clear inventory of the software used across the UK business, including ownership, dependencies, impact scenarios, risks, and response policies.

Traditional GRC and business continuity planning platforms were available, but they were expensive and often designed around fixed workflows. AND-E needed a system that reflected how the business actually worked, not a generic platform that would require heavy configuration, vendor support, or IT dependency.

Spreadsheets were also not enough. A software inventory is not just a list of tools. Each system can be connected to business functions, departments, owners, policies, risk ratings, impact assessments, procedures, and dependencies. Managing this information in spreadsheets can quickly lead to scattered files, duplicated data, manual updates, and limited visibility.

AND-E needed something more structured than spreadsheets, but more flexible and cost-effective than a traditional GRC platform.

The goal was to create a custom business continuity and GRC solution that could:

• List the inventory of software systems used across the UK business
• Identify who uses each tool or system
• Understand the consequence of software disruption
• Map which teams, processes, or operations would be impacted
• Document policies and procedures for responding to disruption
• Structure risk-related data across different departments
• Give business users control without relying heavily on IT
• Support GDPR requirements through a compliant cloud environment
• Provide a foundation for future expansion across Europe

Solution: A custom-built business continuity and GRC hub in Baserow

AND-E chose Baserow’s GDPR-compliant Cloud offering to build its own business continuity and GRC management solution.

The team created a custom system tailored to the way the business manages operational risk, software continuity, policies, and procedures. Baserow gave AND-E the structure of a database with the usability of a familiar spreadsheet-like interface, allowing business users to design and manage the solution themselves.

At the center of the setup is a structured database where AND-E can document which software tools are used, who uses them, what business functions they support, and what the impact would be if those tools were disrupted.

Software inventory and dependency mapping

AND-E uses Baserow to document the software used across the UK subsidiary and understand how each tool connects to the wider business.

Instead of treating each software system as an isolated entry, the team can connect software information to risks, departments, business impact, ownership, and response procedures. This gives AND-E a clearer view of where disruption could create operational risk.

Business continuity planning

Baserow also supports AND-E’s business continuity planning process. The team can document what should happen if a system fails, which policies apply, who is responsible for action, and which parts of the business are affected.

As new software, risks, or policies are identified, they can be added to the same workspace, keeping continuity information aligned with how the business evolves.

GRC and compliant management

For AND-E, the solution also supports broader GRC-related needs. Risk, compliance, continuity, procedures, and policies are structured together in Baserow so the business can maintain better visibility and control.

Because AND-E needed a GDPR-compliant tool, Baserow’s Cloud offering was selected as the deployment for this solution.

Forms for business input

AND-E also uses Baserow Forms to collect and structure information from business users.

Forms make it easier for teams to submit information about software usage, ownership, operational impact, risk details, procedures, or policy-related updates without needing direct database access or technical knowledge.

Built by the business, for the business

A key reason AND-E chose Baserow was customization. The team wanted a solution that business users could build and adapt themselves without needing every change to go through IT.

With Baserow, AND-E could create a custom application around its own continuity and GRC processes instead of waiting for vendor configuration or custom development.

Results: Lower cost, greater flexibility, and a stronger continuity foundation

1. More than 50% cost savings compared to traditional GRC or BCP software

By building its own solution in Baserow instead of purchasing an out-of-the-box GRC or business continuity platform, AND-E saved more than 50% in costs.

Baserow gave AND-E a more cost-effective alternative while still allowing the team to build around its specific requirements.

2. A custom solution tailored to AND-E’s business continuity process

Baserow allowed AND-E to design the solution around its own operational needs, including software inventory, disruption impact, ownership, policies, procedures, and departmental risk.

This created a more relevant and practical system than a generic out-of-the-box tool.

3. Business users can manage the system without heavy IT involvement

AND-E chose Baserow partly because of its ease of use. Business users could build, manage, and adapt the system themselves.

This reduced dependency on IT and made the solution more efficient to implement.

4. A central hub for risk, policies, procedures, and continuity data

Baserow now acts as a central hub for AND-E’s business continuity and GRC information.

The team can manage software inventory, understand business impact, document policies, define procedures, and identify risk in one structured workspace.

5. Better UX and more efficient workflows

Because the solution was built around the needs of the business, AND-E created a better user experience than it would have had with a rigid external platform.

Baserow’s familiar interface and Forms make it easier for users to work with structured data and keep continuity information up to date.

Future Outlook: Expanding from the UK to the wider European business

AND-E is currently using Baserow for its UK subsidiary, with plans to expand the solution across the European business.

As the solution expands, Baserow can help AND-E standardize how software inventory, risk, impact, policies, and procedures are documented across the organization while still allowing flexibility for local business requirements.

By building its own system in Baserow, AND-E has created a cost-effective and adaptable alternative to traditional GRC software: structured, flexible, GDPR-compliant, and designed around the way the business actually works.