The day-to-day operation of the ISMS (reviews, evidence collection, control monitoring) is genuinely manageable, even for a small team where security isn't anyone's full-time job. Integrations with the tools we already use pull evidence automatically, which dramatically reduces the manual work around audits. The platform has evolved a lot over the years — new controls, better UX, more automation — and it has kept pace with how our company and our compliance needs have grown. Audit time is no longer a fire drill. Everything the auditor needs is already in the system, organised and up to date. Support and the customer success team are responsive, pragmatic and clearly know the standard inside out. They behave like a partner, not a vendor. Price could look high for small companies but the it pays off fast on effort reduction.

What I like best about Secfix is the clear, intuitive interface with specific to-dos and templates that we can follow step by step for ISO 27001. This saves us a lot of time compared to our own Excel lists and keeps all requirements centrally in view. Also particularly positive is the fast, competent support during onboarding and for questions in between.

Got us the ISO27001 certification! I appreciate that Secfix acts as both a consulting service with a dedicated person to help throughout the certification process and a SaaS platform that provides the necessary templates and lets me know what’s missing for each certification. It's a clear knowledge hub, offering built-in functionality like infosec training for my team. I also like having a clear framework-based approach which helps me see the requirements and progress. The platform integrates well with our identity management system and cloud provider to pull records. Plus, the setup was very easy for my team.