This article was created in collaboration with Dutch Digital Agencies.

The bar for digital agencies is higher than ever. Building a good website is no longer enough. Clients are increasingly focused on security, compliance, and how agencies handle data, access, and risk. Especially in domains where large amounts of personal data are processed such as financial data, HR records, and medical information this is no longer a secondary consideration, but a strict requirement. In this landscape, DDA member Adwise and Shock Media have been working together for years not only to ensure websites and platforms run smoothly, but also to structurally safeguard the security, compliance, and continuity surrounding them.

Security as part of the conversation

This shift is now reflected in almost every client request. Where conversations used to start with strategy or technology, they now quickly turn to security and compliance. This is especially true for platforms handling sensitive data, such as financial, HR, and medical information. For Adwise, this is not a separate topic, but an integral part of how projects are structured. According to Koen Kranenberg, CISO at Adwise, this is also where the real difference is increasingly made. Many parties can build a solid website, but the real question is how controlled and secure that process is and whether you can demonstrate that to your client.

From hosting to shared responsibility

Where agencies once relied partly on their hosting partner, responsibility is now much broader. Clients want to know how agencies manage access, tooling, and risk not just where data is stored, but who can access it and what happens if something goes wrong. Security is no longer limited to infrastructure; it spans the entire chain. Within this chain, Adwise and Shock Media complement each other perfectly. One operates from the application and client process, the other from hosting and infrastructure. It is precisely at this intersection where effective collaboration is formed. According to Junior Melgert, Senior Consultant Technology & Development at Adwise, this is where the real value lies not when everything runs smoothly, but when systems are under pressure and quick action is required.

Solving challenges together where it matters most

The intersection between application and infrastructure is where challenges arise. Is the issue in the code, the database, or the environment? In practice, that matters less than how parties respond. In this collaboration, the focus is not on where the problem lies, but on how it is resolved. This requires short communication lines, shared responsibility, and a willingness not to point fingers when things get challenging. Certifications provide a certain level of assurance, but they do not solve this. The real value lies in how teams collaborate when speed and alignment are critical. That is where trust is built.

ISO drives organization-wide discipline

A certification process does more than tick a box. It forces organizations to critically assess processes, responsibilities, and risks. Who has access? What do they have access to? How do you prevent unnecessary admin rights? How do you manage tooling, external parties, and sensitive client data? And how do you ensure security is not just an IT concern, but embedded across the entire organization?

According to Koen Kranenberg, the real value lies not in the certificate itself, but in the level of discipline it enforces across the organization. This is clearly reflected in the collaboration with Shock Media, where processes, infrastructure, and responsibilities align seamlessly.

The greatest vulnerability is often internal

When discussing security, people often think of external threats. In reality, risks often originate internally through unnecessary access rights, misconfigured tools, or even well-intentioned employees copying data locally to solve an issue. That’s why security is not just about technology, but about awareness and behavior. What happens when you input data into a tool? When does something become a data breach? What does system access really mean in practice?

At Adwise, which is ISO 27001 certified, this is increasingly embedded in daily operations not as a separate project, but as a standard. Employees hold each other accountable and make conscious decisions. Combined with Shock Media’s infrastructure and controls, this creates an approach where technology and behavior reinforce each other.

Why clients are asking more questions

This shift is not limited to large corporates. Smaller organizations are also asking more questions than they did a few years ago. Where a single security question used to suffice, detailed questionnaires are now the norm. Clients want to understand how agencies handle access, tooling, and data. Incidents involving major brands play a role here they highlight the impact of data breaches, not just technically but also reputationally. This increases pressure on agencies and their partners to demonstrate that everything is properly managed.

AI increases the urgency to get it right

AI introduces an additional layer of complexity. Tools process more data and become directly embedded in workflows. This raises questions around usage, governance, and responsibility. Adwise is currently working toward ISO 42001, focused on AI and data usage not as a standalone initiative, but as a continuation of existing security and compliance efforts. AI accelerates processes, but also demands control. The real challenge lies in balancing innovation with governance.

For agencies, this creates a tension: adopting new technologies while meeting increasingly strict requirements. This is only possible with partners who evolve at the same pace. In the collaboration between Adwise and Shock Media, this means looking ahead not waiting for regulations, but ensuring readiness in advance. Taking new standards seriously and guiding clients along the way requires trust and equality. Each party has its own role, but shares responsibility for the final result.

A new definition of quality

Security and compliance are no longer supporting themes—they are core to digital services. Especially in a market where AI, data, and stricter regulations converge, this redefines what quality means. It is no longer just about delivering a solution that works, but one that remains secure, controlled, and scalable. In this landscape, Adwise and Shock Media complement each other effectively from application and client processes to infrastructure and certification. Different disciplines, one shared goal: ensuring digital solutions not only perform today, but are resilient enough for tomorrow.