We like that we can integrate our systems directly, for example, Google Workspace. We can view the status of our controls and the associated documentation at any time. The current status and open tasks are also transparent, which saves us a lot of time. Secfix also helps us make necessary information centrally available and monitor processes in IT security and HR. Employees can view all policies in one place. The setup was very easy.

UI/UX: intuitive and easy to use, thanks to CISOai. Integrations: automatically created directories facilitate capture and prevent incorrect entries. Performance: good technical and excellent personal support (Elżbieta Żurakowska - CSM) AI/Intelligence: very good search function and explanations.

We've been using Secfix as our ISMS platform for multiple ISO 27001 cycles now, and it has genuinely become a tool we rely on rather than just tolerate. A few things stand out: The platform itself is intuitive and well-structured. Controls, policies, risks, and assets are all linked in a way that actually reflects how an ISMS should work — not just a checklist tool bolted onto a SharePoint. Onboarding new team members into compliance topics is much easier because the UI guides them through what needs to happen. The automations and integrations save us a significant amount of time. For a SaaS company without a dedicated full-time compliance team, this is the difference between ISO 27001 being a burden and being manageable. Speed to certification was a real highlight. The first cycle moved much faster than we expected going in, and each subsequent surveillance audit has been smoother thanks to the audit-ready state the platform keeps us in year-round. Finally, the customer success deserve a specific mention. Our contact is responsive, knows our setup, and gives pragmatic answers rather than generic compliance theater. When auditor questions come up, we get real guidance, not just "check the documentation."