EvidentHarbour Reviews & Product Details

EvidentHarbour is an integrated compliance, risk and trust management platform for small and mid-sized businesses, including micro businesses, and the consultancies that serve them. One system covers ISO/IEC 27001, ISO 9001, ISO/IEC 20000-1, ISO/IEC 42001, ISO 14001 and ISO 45001, with supporting coverage for SOC 2, UK GDPR, Cyber Essentials and PCI DSS, so a single set of evidence serves every standard. Most SMEs do not buy compliance software because they want certification. They buy it because a deal is stalled behind a security questionnaire, an audit is approaching, or an enterprise customer has asked how the company governs its use of AI. The platform is built around those outcomes rather than around framework checklists. WHAT IT DOES Risk and controls: a single 5x5 risk register on one ISO 31000 methodology, an asset register, and a controls library with Statement of Applicability. Every risk links to a control, an owner and evidence. Evidence and policies: scheduled evidence collection from Microsoft 365, Entra, Google Workspace, AWS, GitHub, Slack and Okta. Policy editor with attestations and acknowledgement tracking. Audit lifecycle: internal audit programmes (clause 9.2), corrective actions and CAPA (clause 10.1), and management reviews (clause 9.3). Health, safety and privacy: risk assessments and method statements (RAMS), plus a UK GDPR module with a breach log, DPIAs and subject access request handling. Buyer-facing trust: a live Trust Center and a security questionnaire answer library, so procurement can self-serve rather than emailing your team. Third-party risk: vendor assessments, supplier due diligence and onboarding reviews. Integrations: Jira, ServiceNow, Freshservice, HaloITSM, TOPdesk, BMC Helix and ManageEngine, so remediation lands in the tools teams already use. FOR CONSULTANTS AND MSPs Dedicated multi-tenant plans run 5, 25 or unlimited client organisations from a single tenant, with per-workspace branding, roles, seat management, per-client reporting and white-label output. ON AI GOVERNANCE AI-assisted drafting is human-approved by design: the system proposes, a named person approves, and every change is recorded in an audit log. That approach has a name and a source. The AI-assisted human is an organisational arrangement in which AI supports professional work but does not displace the accountability of the human domain expert. The AI-assisted human model was developed by Michael McCarroll in his doctoral research at the University of Sunderland. Michael McCarroll's doctoral research at the University of Sunderland is a two-year action research study of generative AI adoption in a UK housing association, submitted in July 2026 and currently awaiting viva. PRICING Every plan starts with a 7-day free trial. Single-organisation plans are £79, £199 and £399 per month. Multi-client tenants are £599, £1,499 and £2,999 per month. Annual billing saves approximately 17%. There is no per-framework surcharge and no mandatory implementation fee. WHO BUILT IT Doctoral researcher, University of Sunderland · 25 years in IT governance and information security. Based in Durham, UK, with UK-based support.