The compliance platform at the center of your program
Assess, implement, evidence and maintain ISO 27001 in one workspace — with expert help when you need it and a clear path to independent certification.
Larger program or multiple scopes? Book a demo
Product preview with sample data.
Know exactly what’s missing
Start with the free readiness check, then run a full gap assessment in AuditLens: each control is scored against your scope and turned into a prioritized remediation plan.
- Per-control gap scoring
- Risk-weighted prioritization
- Remediation roadmap
- A.5.15 Access controlHigh gap
- A.8.8 Technical vulnerabilitiesMedium gap
- A.5.23 Cloud servicesMedium gap
- A.6.3 Security awarenessLow gap
Every Annex A control, owned and tracked
The full ISO 27001:2022 catalog comes pre-seeded. Set applicability, assign owners, track implementation status and link evidence to every control.
- All 93 Annex A controls pre-seeded
- Owners, status and applicability
- Evidence linked to each control
| Control | Owner | Status |
|---|---|---|
| A.5.1 Information security policies | Security lead | Implemented |
| A.5.15 Access control | IT manager | In progress |
| A.8.13 Information backup | DevOps | Implemented |
| A.7.4 Physical security monitoring | — | Not applicable |
Evidence that’s ready when the auditor asks
Upload artifacts or pull configuration from AWS, GitHub and Google Workspace, with AI-suggested control mappings and freshness you can see at a glance.
- Direct upload
- AWS, GitHub and Google Workspace connectors
- AI-suggested control mappings
- IAM password policyAWS · A.5.17Fresh
- Branch protection rulesGitHub · A.8.32Fresh
- Access review Q3.xlsxUpload · A.5.18Due in 12 days
Policies you can actually adopt
Generate ISO-aligned policies from 30+ templates, tailor them to how your organization works, and link each one to the controls it supports.
- 30+ ISO-aligned templates
- AI-assisted drafting
- Linked to the controls they support
- Information Security Policy4 controls
- Access Control Policy7 controls
- Supplier Security Policy5 controls
- Incident Management Policy6 controls
A risk register auditors recognize
ISO 27005-aligned risk management with 200 starter risks, treatment plans and residual risk — linked back to controls and your Statement of Applicability.
- 200 starter risks
- Treatment workflow
- Linked to controls and the SoA
See how ready you are — any day
A live Audit Readiness Score, versioned Statement of Applicability snapshots and internal audit programs help you find issues before your auditor does.
- Live Audit Readiness Score
- Versioned SoA with PDF export
- Internal audit programs
- Scoped auditor access to evidence
- Statement of Applicabilityv3
- Internal audit · Q34 findings open
- Auditor accessScoped
An AI Copilot that knows your ISMS
Ask questions about your controls and evidence, get help drafting policies, and see gaps highlighted with prioritized remediation — grounded in your organization’s context.
- Answers from your ISMS context
- Policy and evidence drafting
- Gap highlights with priorities
A tamper-evident record of every change
Every change is logged in HMAC-chained activity records, so you can show auditors exactly what changed, when and by whom.
- Per-organization activity log
- HMAC-chained records
- Auditor-ready export
- 09:42Updated control A.5.1Security lead
#a91f… - 09:15Uploaded evidence “Backup report”DevOps
#7c02… - YesterdayViewed evidence packAuditor (read-only)
#e4b3…
Built for the work, not the theater
- ISMS dashboard
Audit Readiness Score, control health by theme, evidence freshness and a risk heatmap on one screen.
- Team access & SSO
Invite teammates, assign role-based permissions, and sign in with Google or Microsoft.
- Trust center
A public trust center to share your security posture with prospects and customers.
- Continuous monitoring
Baseline snapshots and drift events keep your readiness score current as things change.
The AuditLens marketplace extends the platform with vetted implementation professionals who support your program in AuditLens — only when you need them.
Ready for independent assessment?
When your program is ready, discover independent auditors and certification bodies that fit your framework, geography and requirements.
- Framework
- Audit or certification type
- Region served
- Industry
- Organization size
- Language
Your team in AuditLens, supported by an implementation expert when needed.
An independent auditor or certification body assesses your program.
Implementation and independent certification or audit are separate activities, delivered by separate providers.
AuditLens provides compliance software and access to independent professional service providers. Certification and independent audit outcomes are determined by the relevant independent provider; AuditLens does not guarantee audit or certification outcomes.
Start with
your gaps.
Take the free readiness assessment and see what to fix first — then fix it yourself in AuditLens, bring in an expert, or both.