Vendor Directory
Explore SOC 2, ISO 27001, and HITRUST compliance resources and audit firm connections.
Athereon GRC GmbH
Navigate Compliance with Seamless ISMS Solutions
Athereon GRC offers a digital compliance platform described as an ISMS tool to guide organisations to an ISMS according to ISO 27001. The vendor positions a workflow-driven, integrated ISMS software that is developed and hosted in Germany and enables the seamless implementation and organisation-wide operationalisation of an effective information security management system. The site frames the product as Governance, Risk & Compliance management for companies and authorities, and notes DSGVO-compliant operation. Marketing copy emphasises automation and collaboration to reach ISO 27001 readiness and ongoing ISMS operations. The description focuses on ISMS functionality, deployment in Germany, and GRC scope.
ISOPlanner
Compliance made seamless within Microsoft 365
ISOPlanner positions itself as ISO 27001 compliance software built for organisations using Microsoft 365. The site describes full compliance management inside Outlook, SharePoint and Teams and promotes features for the PDCA cycle, audit support and automation. ISOPlanner includes an AI Assistant (disabled by default) with features listed such as project plan creation, control suggestions for risk mitigation and integrated conversations in the text editor. The product claims tight Microsoft 365 integration to schedule tasks, share knowledge and manage required documentation, and states it is trusted by over 500 companies. ISOPlanner also states it will not use customer data for AI training and uses Microsoft AI Services with GDPR compliance.
Iseo Blue
Achieve ISO 27001 with Confidence and Clarity
Iseo Blue offers guidance, tools and templates to help SMEs pursue ISO 27001 information security certification. The site promotes "ISO 27001 Toolkits, Training and 90-Day Certification Support," including free mandatory templates, DIY training, and a 90-day coaching programme for small teams in the UK, EU and USA. Content focuses on ISO 27001 audit requirements and practical guidance for cloud-first organisations, explaining Annex A, shared responsibility with cloud providers (AWS, Microsoft 365, Google), and what evidence auditors expect. The site positions its materials as targeted at small organisations seeking a maintainable, clearly documented approach to scope, controls and supplier responsibilities during ISO 27001 certification.
DSS IT Security GmbH
Secure Your Data, Protect Your Future
DSS IT Security offers information security and data protection services for mittelständische Unternehmen, including implementation of Informationssicherheits-Managementsysteme (ISMS) and support for DSGVO-compliant data protection. The organisation publishes an Open Source ISMS product named FOURS (described as "100 % Open Source"). In addition to the ISMS software, DSS performs Penetrationstests and implements Schutzmaßnahmen gegen Cyberangriffe. The company also provides Business Continuity Management (BCM) to secure long-term operational capability and delivers personal consulting by senior consultants for organisations without in-house security or data-protection officers. All statements reflect content presented on the site about services and the open-source ISMS offering.
Responsible AI Institute
Navigating the Future of Responsible AI
The Responsible AI Institute is dedicated to fostering responsible AI practices among organizations through comprehensive assessments and certifications. With an emphasis on aligning with frameworks like ISO and NIST, the institute provides tools and expert guidance to build, assess, and demonstrate responsible AI practices. Their RAISE Pathways program features over 1,100 controls linked to global standards, aiding organizations in strengthening governance and ensuring compliance. The institute facilitates risk management and brand integrity through independent assessments and offers training and resources to support AI governance, helping businesses navigate the evolving landscape of responsible AI adoption.
ISOMETRI
Navigating ISO Compliance for Blockchain Success
ISOMETRI Compliance offers ISO 27001-focused compliance services and ISMS support tailored for companies using Distributed Ledger Technologies. The firm provides ISO 27001 gap analysis services, implementation services, toolkits, and outsourced internal audit and audit advisory services. ISOMETRI's consultants work with clients to automate and systemise business processes, deliver risk management services (including contingency and mitigation strategies), provide training for adoption of new processes, and perform proactive ongoing monitoring and assessment of compliance. The offering is positioned around ISO compliance, gap assessment, and implementation for distributed ledger projects, with consulting and managed-audit capabilities described on the site.
CIS Automation
Secure your future with tailored ISMS solutions
CIS Automation describes an ISMS as an ISO 27001 Information Security Management System designed for risk assessment, Statement of Applicability (SoA) and compliance tracking. The company states it delivers software development and cybersecurity services and lists FSMS, ISMS, web applications, industrial automation and functional safety solutions from offices in Adyar, Chennai and Singapore. The record notes CIS Automation is ISO 27001:2022 certified. The site also promotes CTR HUB, a web-based solution for payroll, timesheets and employee management that automates cost, time and resource management. The provided content lists product features but does not include pricing or detailed deployment information.
DXC Technology
Transforming IT for a secure tomorrow
DXC Technology is a leading enterprise technology partner delivering software and services that modernize, secure, and operate complex IT environments. With over 45 years of experience, DXC specializes in financial services technology, helping organizations achieve regulatory compliance, reduce risk, and leverage AI for operational efficiency. Their services include modernization of core banking platforms, intelligent automation, and comprehensive application management solutions. Trusted by 17 of the world's largest financial institutions, DXC addresses challenges in legacy infrastructure and delivers scalable, compliant solutions that drive business growth and streamline complex processes.
ORIENT IT SERVICES
Navigating Your ISO 27001 Journey Together
Orient IT Services offers consulting and professional services focused on the implementation of Information Security Management Systems (ISMS) in accordance with ISO 27001 standards. They assist organizations in understanding ISMS concepts, planning, and implementing ISO 27001 with an emphasis on delivering quality services tailored to customer business needs. Their expertise allows clients to identify key requirements and explore various options for effective sustainability of their IT systems in compliance with industry standards.
Biz Excellence Systems Sdn Bhd
Simplifying Compliance for Complex Organizations
Biz Exellence Systems offers a web-based ISMS software application and related compliance modules. The cloud-based SaaS solution provides a step-by-step approach to managing information security in compliance with ISO/IEC 27001:2013, automating corrective action plans, risk management, statement of applicability (SOA), audits, documentation and related ISMS processes. The modular, all-in-one platform also includes modules for ISO 22301:2019 business continuity (BIA, BCP, testing & exercising), Anti-Bribery management, and GHG emissions inventories. The product is designed for multi-subsidiary organizations, accessible from any device or web browser, and aims to reduce workload and errors from spreadsheets while accelerating implementation and maintenance. The organization also provides consultancy and software solutions.
Sage Shield Safety Consultants Pte Ltd
Secure your future with ISO compliance solutions
Sage Shield Safety Consultants specializes in ISO 27001 ISMS implementation and certification services. With a focus on improving workplace safety, they provide comprehensive assessments to evaluate current information security practices against ISO standards. Their expert team caters to various safety management needs including bizSAFE Level 1-4 certifications and OHSAS 18001 implementation. Committed to delivering effective safety solutions, Sage Shield ensures companies meet regulatory requirements and enhance their overall safety management practices. Their services include facilitating BizSAFE audits and providing tailored safety risk management strategies.
ISMS Copilot
Navigate compliance with expert AI guidance
ISMS Copilot is an AI assistant built by experts to help consultants and teams with ISO 27001 compliance and related frameworks. The platform provides tailored guidance, templates, and tools to simplify information security management, and can help users draft policies, assess risks, and answer complex framework questions. ISMS Copilot lists support for multiple frameworks including ISO 27001, SOC2, and DORA. The company offers a freemium model and paid annual plans (examples cited: $240 billed annually, $1,200 billed annually), with messaging about simple, transparent pricing and an expert knowledge base. The product is positioned for individual consultants, small teams, and growing enterprises and emphasizes rapid setup and framework-specific assistance.
Quality Institute of America - QIA
Navigate Compliance with Confidence and Precision
Bot Verification specializes in innovative management systems that streamline compliance and enhance decision-making for both small and large enterprises. Their software focuses on ISO compliance, ensuring accuracy and efficiency in audits and documentation. They offer solutions tailored for various company sizes, from those with limited budgets to large manufacturing entities, addressing Quality Management Systems effectively. By optimizing regulatory adherence and improving management systems, Bot Verification aims to provide a competitive edge. Connect with their team for insights on enhancing your management practices.
Decerto
Transforming Insurance with Tailored Tech Solutions
Decerto provides comprehensive services tailored for the insurance sector, delivering IT consulting, custom software development, and system integration. Their offerings include technology solutions for managing compliance with ISO standards, focusing on security and operational efficiency. With expertise in data migration, technical support, and automation, Decerto helps insurers modernize their IT environments. Their approach ensures seamless system connectivity and secure data transfers, enhancing stability and scalability. Clients benefit from dedicated support and innovative solutions like their all-in-one Product, Pricing & Underwriting System, designed for rapid deployment and integration with existing systems.
QMS CERTIFICATION
Certifying Quality, Building Global Credibility
QMS Certification International provides ISO Certification for businesses looking to enhance their quality and credibility. As an accredited third-party certification body, they operate in 33 countries, focusing on the certification of management systems. Their US office, QMS America, is known for its strong market recognition backed by technical expertise, customer satisfaction, and competitive pricing. They offer personalized quotes for ISO Certification, making it easier for companies to elevate their management systems to meet international standards.
Kelmac Group
Navigating ISO Compliance with Precision and Insight
The Kelmac Group offers comprehensive ISO compliance and regulatory standards auditing services, leveraging decades of expertise in consulting, auditing, and training. Their focus is on delivering tailored solutions aimed at enhancing management systems and ensuring confidence in adherence to ISO standards, particularly ISO 27001 for Information Security Management Systems (ISMS). They work closely with organizations to identify gaps through in-depth assessments and provide actionable insights for compliance and risk management. Their services extend beyond auditing, incorporating consulting to support overall regulatory compliance.
Acadia Software
Transforming procedures into actionable training tools
Acadia Software provides the Acadia Performance Platform, designed to enhance workforce development in manufacturing operations. Their solutions turn procedures into active work instructions, training tools, and job aids, ensuring compliance with policies and protocols. The platform supports training effectiveness through direct access to SOPs, checks comprehension via quizzing, and enables managers to track employee compliance and identify training needs. By digitally tracking compliance, Acadia helps organizations comply with ISO standards, OSHA regulations, and FDA guidelines, promoting overall operational efficiency and safety.
Meanquest
Simplifying ISO 27001 for Your Business
Meanquest is presented as an IT company that offers an ISMS software to simplify ISO 27001 management. The record states the ISMS software "centralizes all necessary information and controls" and aims to "Promote information security." In addition to the ISMS product, Meanquest describes traditional IT offerings: a Centre de service providing support (remote or on-site), managed services with proactive supervision, and monthly all‑inclusive forfaits. The site positions Meanquest as a service provider for IT infrastructure management, incident resolution, and tailored support, and invites contacts for commercial enquiries, support, or hiring. This description is based solely on the provided record text.
DHC Business Solutions GmbH & Co. KG
Navigate Compliance with Precision and Confidence
DHC Business Solutions specializes in Regulatory Technology, delivering software solutions and services focused on compliance and quality management. With DHC VISION, their offerings assist organizations in highly regulated sectors such as Life Sciences, Pharma, Chemie, MedTech, and Utilities. They provide end-to-end services that include project understanding, requirement definition, software implementation, and ongoing support. Their experience in digitalizing quality processes helps clients achieve compliance with regulatory standards, ensuring they receive both the software and essential documentation for validation purposes. DHC's commitment to quality and customer-oriented support positions them as a reliable partner in regulatory compliance.
Zenya
Transforming healthcare with integrated risk management
Zenya offers an ISMS and quality- and risk-management software suite aimed at healthcare organisations. The platform is described as a single source of truth with up-to-date information and real-time dashboards for insight into risks and status. Zenya unites everyday quality & risk management, information security, and regional collaboration in one system. Users can record processes and procedures centrally, identify risks and involve the right people, turn reports into improvement actions, and manage suppliers and contracts by documenting and reviewing them. The product states it can embed ISMS content to help align with NEN 7510, ISO 27001 and other standards, and supports recording transmural incident reports.