How it works

Certified in weeks, not quarters.

You don't need to know what an ISMS is. Certixa turns the standard into a checklist scoped to your actual company, and does most of it for you.

Four steps. That's the whole method.

The AI does the drafting, mapping, and evidence collection. Your time goes into reviewing and the handful of decisions only you can make.

1

Connect and scope

Link your tools, import your team, answer plain-language questions about your company. Certixa scopes your ISMS from that.

2

Review what the AI built

Policies, risk register, Statement of Applicability, drafted for you. You review, adjust, and approve.

3

Close the gaps

A prioritized task list of what remains. Most startups clear it in two to four weeks alongside normal work.

4

Pass the audit

We introduce you to accredited certification bodies, prep you for Stage 1 and 2, and sit with you through both.

The week-by-week reality

WEEK 1

Connect and scope

Authorise your integrations, cloud, directory, code hosting, workspace, and answer plain-language questions about the business. The AI turns this into your ISMS scope, and evidence starts collecting immediately.

WEEKS 2–3

Review the drafts

Policies, risk register, and Statement of Applicability arrive written for your company, not from a template. Policy owners review and approve; the auditor will interview humans, so this review is the step that matters.

WEEKS 3–6

Close real gaps

A prioritised task list of what your company genuinely lacks, 2FA enforcement, supplier DPAs, backup restore tests. Owners, reminders, and escalation keep it moving alongside normal work.

WEEKS 4–8

Audit and certify

Internal audit and management review run from generated templates; we introduce you to three accredited certification bodies and prep you for Stage 1 and Stage 2. Pass, and you're certified for three years.

Most startups reach Stage 1 readiness in 4–8 weeks. The usual bottleneck is the auditor's calendar, book early.

What you can get done in just a few weeks

1

Get started

Add your information
Add and connect your vendors
Import all employees
Set up monitoring
2

Implement your compliance

Implement provided policies
Implement controls
Assess risks
Go through evidence
3

Run your ISMS

Let Certixa collect what is needed
Follow the steps and tasks provided
Be ready for the audit

Go deeper

New to the standard? Start with the ISO 27001 guide and Annex A explained.

See the platform

Tour the dashboard, registry, exposure and trust center that run each step.

Count the cost

€149/month, plus audit fees paid directly to your certification body, the full arithmetic is here.

What are we certifying?

Connect your stack, answer a few questions, and see your gap assessment today.

Start today