ISO-standard.app

0 reviews

ISO-STANDARD.app is an integrated compliance, risk and trust management platform for UK small and mid-sized businesses and the consultancies that serve them. It covers ISO/IEC 27001, ISO 9001, ISO/IEC 20000-1 and ISO/IEC 42001 in one system, with supporting coverage for SOC 2, GDPR, Cyber Essentials and PCI DSS. Most SMEs don't buy compliance software because they want certification. They buy it because a deal is stalled behind a security questionnaire, an audit is coming, or an enterprise customer has asked how the company governs AI. ISO-STANDARD.app is built around those outcomes rather than around framework checklists. WHAT IT DOES Risk and controls: a single 5x5 risk register on one ISO 31000 methodology, an asset register, and a controls library with Statement of Applicability. Every risk links to a control, an owner and evidence. Evidence and policies: scheduled evidence collection from Microsoft 365, Entra, Google Workspace, AWS, GitHub, Slack and Okta. Policy editor with attestations and acknowledgement tracking. Audit lifecycle: internal audit programmes (clause 9.2), corrective actions and CAPA (clause 10.1), and management reviews (clause 9.3) — the clauses most tools leave to spreadsheets. Buyer-facing trust: a live Trust Center and a security questionnaire answer library, so procurement can self-serve instead of emailing you. Third-party risk: vendor assessments, supplier due diligence and onboarding reviews. Integrations: Jira, ServiceNow, Freshservice, HaloITSM, TOPdesk, BMC Helix and ManageEngine, so remediation lands in the tools teams already use rather than in a separate compliance queue. FOR CONSULTANTS AND MSPs Multiple client workspaces run from a single tenant, with per-workspace branding, roles and seat management — designed for practitioners managing several SME compliance programmes at once. ON AI Drafting is AI-assisted and privacy-respecting: the system proposes, a named human approves, and every change is recorded in an audit log. Nothing is published to an auditor without sign-off. PRICING Transparent pricing from the off. Starter £79/month (risk register, up to 5 users). Growth £199/month (internal audits, corrective actions, up to 25 users). Business £399/month (unlimited users, management reviews, integrations). No per-framework surcharge and no mandatory implementation fee. WHO BUILT IT Founded by Michael McCarroll, who spent 25 years in senior IT governance and technology leadership before building the tool he wanted as a practitioner. Based in Durham, UK, with UK support.