ISO 27001 software for lean teams

Keep ISO 27001 evidence ready when buyers ask.

AI-27001 keeps policies, risks, controls, approvals and evidence together, so your team can answer security reviews and audit questions without digging through scattered files.

See pricing

UK-built - flat founding price - every framework included - your data stays yours

Operated by a UK companyAI-27001 is a product of SW Digital Services Ltd, registered in England and Wales.Security questions before sensitive evidenceReview how evidence ownership, AI support, and data-handling questions are approached.Methodology over magicAI supports drafting and checking; people keep approval, risk acceptance, and the formal record.

Talk to AI

Start with a guided setup conversation.

The assistant captures your scope, systems, suppliers, owners, and customer data before it drafts anything.

You

We are a SaaS platform using AWS, Stripe, HubSpot, and Google Workspace. We need ISO 27001 without hiring a full compliance team.

AI assistant

Your ISMS context comes first, then policies, risks, meetings, and tasks can be drafted to match how your business actually works.

SetupWorkspace context

Capturing

Task to doConfirm ISMS scope and system owners

Owner: Operations lead

Scope and boundaries

SaaS platform, production systems, customer data

Mapped

Systems and suppliers

AWS, Stripe, HubSpot, Google Workspace

Linked

Owners and cadence

CTO, Operations, quarterly review cycle

Assigned

ScopeAssetsSuppliersOwners

Document lab

Turn the setup into useful policy drafts.

AI writes the first version, then checks wording, gaps, practicality, and review questions before a human sees it.

You

Draft our access control policy using our systems, owners, approval route, and review cycle.

AI assistant

Draft created with owner responsibilities, access review evidence prompts, supplier references, and approval actions.

PoliciesAccess Control Policy

Drafting

Task to doReview access control policy draft

Owner: CTO

Purpose, scope, and roles

Matched to production systems and support access

Writer pass

Review questions flagged

Weak wording, missing evidence, unclear ownership

Auditor pass

Ready for review

Human approval required before it becomes formal

Review

WriteChallengeRefinePresent

Risk builder

Create risks and treatment actions from real workflows.

The assistant asks for context, suggests likely risks, and turns them into owned actions with treatment plans.

You

Assess customer data exports and support admin access. What risks and actions should we track?

AI assistant

Three likely risk records are ready with proposed treatment actions, owners, review dates, and evidence requests.

RisksRisk register

Generating

Task to doApprove treatment for support access risk

Owner: CTO

Over-privileged support access

Owner: CTO. Treatment: access review and approval trail

High

Untracked data export requests

Owner: Operations. Treatment: request log and review

Medium

Supplier evidence not refreshed

Owner: Compliance. Treatment: recurring evidence task

Medium

LikelihoodImpactOwnerTreatment

ISMS operations

Generate meetings, communications, and follow-up tasks.

AI helps turn the programme into recurring operational work, not a folder of documents nobody opens.

You

Prepare this month’s ISMS meeting pack and create follow-up tasks from open risks, policies, and evidence gaps.

AI assistant

Meeting agenda prepared with open risks, policy reviews, evidence gaps, and follow-up actions linked.

RunISMS meeting pack

Preparing

Task to doComplete evidence requests before next ISMS meeting

Owner: Control owners

Agenda and discussion points

Risks, supplier reviews, policy approvals, incidents

Ready

Communication plan update

Security reminders and owner updates drafted

Drafted

Follow-up tasks

Evidence requests, overdue reviews, treatment actions

12 tasks

MeetingsCommsTasksEvidence

Human control

Nothing becomes official until your team approves it.

AI reduces the effort, but the business keeps responsibility for decisions, sign-off, and the formal record.

You

Show what needs human review before these updates become part of the ISMS.

AI assistant

Approval pack assembled. Two policy changes, three risk actions, and one meeting outcome need human sign-off.

ApproveApproval queue

Review ready

Task to doSign off approval pack and issue changes

Owner: Leadership team

Policy changes

Access control and supplier review updates

2 approvals

Risk treatment decisions

Owners confirm acceptance and target dates

3 actions

Formal audit trail

Comments, evidence, approvals, and history retained

Logged

ReviewApproveAssignRecord

What changes

The work behind ISO 27001 stops living in side trackers.

AI-27001 gives your team one place for evidence, approvals, and follow-up. It is not a certification shortcut, and it does not replace human accountability.

One operating record

Policies, risks, controls, approvals, tasks, and evidence stay connected instead of drifting across folders.

AI helps, humans approve

AI drafts and checks the work; your team owns decisions, wording, sign-off, and the formal record.

Audit questions answered faster

When someone asks for proof, the owner, latest evidence, approval trail, and next action are already linked.

Built for the live ISMS

Use the same workspace for setup, supplier pressure, recurring reviews, and audit readiness.

Flat pricing

One price. Every framework included.

Founding customers get one monthly price for the platform, onboarding help, and the current framework set. External audit, certification body fees, and implementation consultancy are separate.

Every current and future framework module
Unlimited users and evidence storage
AI assistance on fair use
No per-user fees or paid module unlocks

Founding customer rate

Early bird pricingDown from £600/month

£300/month + VAT

Standard price: £600/month + VAT

Keep the agreed founding rate while you stay on the plan.

Book a walkthrough when the buying conversation is live. Use the guided trial route if you want to test one workflow first.

Use guided trial route

Routes by need

Start with the workflow causing the most audit or evidence pressure.

If one of these routes is closer to your current problem, use it as a shortcut.

SaaS teams

Questionnaires and security reviews keep interrupting sales.

Keep the control answer, owner, evidence, and follow-up together.

MSPs

Client assurance asks turn into bespoke spreadsheet work.

Reuse the same operating layer across client evidence requests.

Telecoms operators

TSA, ISO, supplier, and approval evidence split across owners.

Tie evidence requests back to accountable tasks and records.

General ISO evidence

You know evidence/admin overhead is building, but not which workflow to fix first.

Bring one live evidence workflow into a guided trial that maps owners, gaps, and next actions.

Guided trial

Use the guided trial packet when you need to test fit first.

Share one evidence, questionnaire, supplier-review, audit-pack, or client-assurance workflow when you want a focused trial request before booking time.

Use guided trial route Review trial boundary

Next step

Bring one workflow and see whether the overhead drops.

Walk through a live evidence, risk, approval, or questionnaire workflow and decide whether AI-27001 fits before committing.

See pricing

AI-27001 is a product of SW DIGITAL SERVICES LIMITED, registered in England and Wales. Company number 17178287.