ISO 27001 · Essential Eight · ISO 9001 · 45001 · 14001 · one platform
Certified in weeks. Compliant for good.
ISO Assist is the system of record for your whole management system: requirements, evidence, documents, registers and audit-grade reports. Built in Australia for Australian businesses and the partners who serve them.
14 DAYS FREE · NO CARD · ONE FLAT ANNUAL RATE · AUSTRALIAN DATA RESIDENCY
ISO 27001:2022 · Essential Eight
Live view of a workspace, first eight weeks
0%
readiness
0 wks
to audit-ready, typical
Consultant-led programmes run 12+ months.
0
pricing tiers by revenue or headcount
One flat rate per plan, every standard included from Growth up.
0+
templates included on every plan
Policies, procedures, registers, JSAs. Adapt, approve, done.
0
standards on one spine
One evidence item can satisfy requirements in all of them.
Typical figures from ISO Assist programmes. Your timeline depends on scope and on how much evidence already exists. A certification body issues the certificate; we get you to the audit ready.
Why we rebuilt everything
It was never about templates.
For years ISO Assist sold document toolkits. They worked: thousands of organisations used them to get certified. But a folder of Word documents is where a management system starts, not where it lives.
Certification is a ledger: every requirement, who owns it, what proves it, when it was last checked. Keep that ledger in a spreadsheet and it rots between audits. Keep it in a US tool built for cloud-native start-ups and you pay for automation that never fires on your estate.
So we built the ledger. The templates are still here, more than 400 of them on every plan, and now they are one module in a system that runs the whole thing.
How it works
One requirement, start to finish.
Watch a single control move from adopted to audited. Every other requirement follows the same path.
- 01
Adopt the standard
Pick ISO 27001, the Essential Eight or all five. Every clause, control and requirement appears as a row with an owner and a status. Nothing to configure, nothing to type in.
- 02
Link the evidence
Upload it, link it from Google Workspace or Microsoft 365, or generate it from a template. Set a collection cadence. One item can satisfy requirements in several standards, mapped once.
- 03
Run the system
Actions, internal audits, management reviews, corrective actions, training and access reviews happen in the same workspace, so the records exist because the work happened.
- 04
Hand the auditor the pack
Statement of Applicability, gap report, dossier and evidence index, a frozen, hashed snapshot of your records. Time-boxed read-only access for the auditor.
The platform
Everything the standard asks for, as modules that talk to each other.
Grouped the way a management system is, not the way a feature list is.
Know where you stand
Frameworks & requirements
Every clause and control as a row with an owner and a status.
Assessments
Guided questionnaires per standard; maturity and readiness roll up from answers.
Dashboard
Per-standard posture, what is overdue, what is due next.
Reports
Statements of Applicability, gap reports, dossiers, frozen and hashed.
Prove it
Evidence
Upload, link or generate. Collection cadence, expiry, reuse across standards.
Documents
Policies and procedures with versions, approval, acknowledgement and review dates.
Registers
Assets, risks, legal obligations, interested parties, exceptions, as data, not tabs in a spreadsheet.
Trust centre
A public page that answers questionnaires once.
Run the system
Actions & CAPA
Nonconformities, corrective actions, root cause, verification.
Internal audits
Programme, checklists, findings, follow-up.
Management reviews
Agenda from the standard; minutes as records.
Incidents, hazards & inspections
Safety and security events captured from the field.
People & suppliers
People & training
Competency matrix, acknowledgements, onboarding.
Access reviews
Periodic review of who can reach what.
Vendors
Third-party register with risk and evidence.
Sectors
Built for the businesses that get asked.
Different tender, same ledger. Pick your sector for a worked first eight weeks.
E8 · 27001
Defence industry & supply chain
Meet the Essential Eight at the maturity level your contract names.
Worked example27001 · 45001
Healthcare & allied health
Protect patient data and your people with one management system.
Worked example45001 · 9001 · 14001
Building, construction & facilities
Quality, safety and environment on one spine, because they already share one.
Worked example27001 · 9001
Professional services
Show clients their information is handled properly, without hiring a compliance team.
Worked example27001 · SOC2 · E8
Software & SaaS
ISO 27001 first, SOC2 mapped from the same evidence.
Worked exampleAI
AI that drafts, reviews and explains. People decide.
Compliance state is arithmetic.
Met, partial, not met, needs review: computed from your records. No model ever sets a status.
AI drafts, you approve.
Policy drafting, plain-English gap summaries and document review, always labelled, always reviewed by a person before it becomes a record.
Uncertain means needs review.
If an AI output fails validation or is low-confidence, the item is flagged for a human. It never defaults to compliant.
Every call is logged and priced.
Model, tokens and cost per call, visible in your workspace. AI spend is a line you can see, not a surprise.
Built by practitioners
Designed by people who run certification programmes, audited by people who assess them.
ISO Assist has helped Australian organisations reach ISO 27001 and ISO 9001 since 2019. The platform carries that experience into software: every module exists because an auditor asked for the record it produces. If a report is not good enough for a real external auditor, it does not ship.
The storyPricing
One flat rate. Every standard included.
We do not price on your revenue, your headcount or the number of standards you adopt. Billed annually, in Australian dollars.
From the blog
Cyber, ISO, Essential Eight, defence.
PRODUCT · 27 AUGUST 2026
From toolkits to a system of record: introducing the ISO Assist platform
Why we stopped selling templates and built the platform that runs the whole management system, and what that means for the organisations we have helped since 2019.
2 MIN READ
ESSENTIAL EIGHT · 24 AUGUST 2026
The Essential Eight, explained for Australian businesses
Eight mitigation strategies, three maturity levels, 152 requirements: what the ACSC actually asks, who is asking you for it, and how to evidence it without a spreadsheet.
2 MIN READ
ISO STANDARDS · 20 AUGUST 2026
What ISO 27001 is, and who actually needs it
The standard, the certificate, the audit, and the four situations where an Australian business should stop deliberating and start.
3 MIN READ
Adopt your first standard today.
14 days free, no card. Or book a demo and we will walk it with you.