Independent AI index
for professionals

Home / Safety / Zig365 for housing associations & owners' association management

Zig Websoftware B.V. (NL)

How safe is Zig365 for housing associations & owners' association management?

GDPR profileOur summary of what the provider itself publishes about your data: whether the data is stored in the EU (2 points), whether there is a certification or GDPR guarantee (1), and whether the provider is based in the NL or the EU (1). 3 or 4 points is Strong, 2 Good, 1 Limited, 0 Unknown. How we measure for housing associations & residents' association managementGood

Zig365 has a good GDPR profile. Usable in housing associations and owners' association management, provided you use the business variant and follow the points of attention below.

Where does Zig365 stand in housing associations and owners' association management?

Shared spot 7 of 27 options for housing associations & owners' associations management (professional tools and general assistants) on GDPR profile. 10 options, like Zig365 profile, are Good. Each tile is an option we track for this field; click for the check.

Strong6
Good10
Limited3
e.g.
Unknown1
Caution7

Published safeguards

✓Provider based in NL/EUYes
–Data in the EU (according to provider)Not known
✓Publishes certification (ISO/NEN/GDPR)Yes

Zig365 Copilot builds on Microsoft Copilot with its own layer for housing associations; data stays in the association's own Microsoft environment; no training on personal data; no processing outside the EU; Zig Websoftware is ISO 27001-certified (according to the provider)

How to use Zig365 safely

  • Use the business variant and sign a data processing agreement (DPA).
  • Do not enter unnecessary personal data into prompts; anonymise where possible.
  • Enable EU data residency where the provider offers it.
  • Keep a professional in the loop: tenant and owner files contain personal data (GDPR).

Stronger or equally strong in housing associations & owners' association management

Embrace CloudEmbrace The Human Cloud B.V. (Groningen, NL)APPartementAPPartement B.V. (Uden, Netherlands)Voicelabs RobinVoicelabs (Netherlands)Aareon AAVAAareon Nederland B.V. (Emmen, NL)BryderBryder (Delft, NL)

Latest developments

19 October 2026Claude models in Copilot Cowork process data outside the EU Data Boundary

Copilot Cowork relies on Anthropic's Claude models for demanding tasks. Because that processing takes place outside the EU Data Boundary, Anthropic is switched off by default in European Microsoft 365 tenants. Anyone who turns it on has data processed outside the EU Data Boundary; at the same time, pay-per-use (Copilot Credits) is coming, in the Netherlands postponed until 1 December 2026. source

18 September 2026Plugin4Shell: GitHub Copilot still unpatched (zero-click RCE via plugin updates)

Research lab Air Security publicly disclosed Plugin4Shell on 18 September 2026: a zero-click RCE in the plugin mechanism of AI coding agents. The agent pins a plugin to a commit hash but does not verify that the retrieved code belongs to that hash; whoever controls or takes over the upstream repository can thus have code executed during the automatic background update, without any action by the user. GitHub Copilot had no patch at the time of publication, although the report was made to all vendors in June 2026. GDPR relevance: plugins run with the developer's rights (source code, cloud credentials, SSH keys, internal repositories, production systems). If you process personal data on or via development machines, this directly affects your security measures under Art. 32 GDPR. Measures: inventory installed plugins and the owners of those repositories, disable automatic plugin updates where possible, and restrict credentials on development machines. Note: this concerns the GitHub Copilot coding agent, not Microsoft 365 Copilot. source

15 April 2026Caveats regarding the EU Data Boundary

The Claude models within Microsoft 365 Copilot fall outside the EU Data Boundary; 'flex routing' can route outside the EU during peak load and can be switched off by administrators. source

Questions

How safe is Zig365 for housing associations and owners' association management?
Zig365 has a good GDPR profile. Usable in housing associations & owners' association management, provided you use the business variant and follow the points of attention below. Good safeguards, but not on every point.
Does Zig365 train on my data?
Zig365 Copilot builds on Microsoft Copilot with its own layer for housing associations; data stays in the association's own Microsoft environment; no training on personal data; no processing outside the EU; Zig Websoftware is ISO 27001-certified (according to the provider)
What should I watch out for with AI in housing associations & owners' associations management?
Tenant and owner files contain personal data (GDPR). Only use systems with a data processing agreement and EU hosting; do not store audio recordings of meetings unencrypted on external servers. AI-supported decisions on rent arrears or allocation priorities fall under the EU AI Act (high-risk category where access to housing is affected) and require human oversight. Always have a staff member confirm critical decisions.

Source documents

www.zig.euwww.werkenbijzig.nlwww.zig.euwww.woningcorporaties.nl

Everything about Zig365 Best AI for housing associations and owners' association management

Summarised by the editorial team from provider documentation · not legal advice

Last checked: 26 October 2026 · How we check

Next stepAll 27 options for housing associations & owners' associationsProfessional tools and general assistants side by side, on GDPR profile, price and quality.

Every Friday: what changed in AI for housing associations & owners' associations

New models, prices, oversight and tools, with sources and what it means for you. One email a week, unsubscribe with one click.

View a sample

We only use your address for this newsletter. You confirm first by email.