The ISO compliance workspace consultants run their whole client book from
Stop rebuilding the same spreadsheet stack for every engagement. One workspace per client, the same shared control catalogue and evidence model across all of them, white-label exports in your branding, and a clean handover when the client takes the ISMS in-house — across ISO 27001, ISO 42001, ISO 9001, ISO 20000-1 and SOC 2.
Your methodology is good. Delivering it through bespoke spreadsheets is what kills utilisation.
- Every client gets a slightly different register, SoA and policy pack — so nothing is reusable and quality depends on who staffed it.
- Client evidence lives in their Drive, their email and your laptop; handover is a week of tidying you can't bill.
- You can't see, across the book, which clients are drifting toward a failed surveillance audit until it's late.
- Per-client licences of enterprise GRC destroy the economics of a fixed-fee engagement.
One methodology, every client
Spin up a client workspace from your template, run the engagement, and hand it over — the same screens, exports and cadence every time.
- 1Workspace switcher
Every client is an isolated workspace with its own data, roles and audit trail. Switch without logging out.
- 2Shared control catalogue
ISO 27001 Annex A, ISO 42001, ISO 9001, ISO 20000-1 and SOC 2 pre-loaded, so your methodology maps once and applies everywhere.
- 3Risk register & treatment
The same 5×5 model and four-Ts treatment across the book, so a reviewer can read any client's register instantly.
- 4Evidence & crosswalk
One evidence base per client, mapped across frameworks — collect an access review once, evidence it in three standards.
- 5White-label policy & report exports
Branded PDFs with your logo, version, approver and effective date — deliverables clients recognise as yours.
- 6Roles, invites and handover
Give the client member access during delivery, then transfer ownership. Nothing to migrate, nothing lost.
Spreadsheets vs ISO-STANDARD.app
| The job | Spreadsheets & shared drive | ISO-STANDARD.app |
|---|---|---|
| Starting an engagement | Copy last client's workbook, strip their data, hope nothing leaks. | New workspace from your standard catalogue in minutes, clean by construction. |
| Consistency across consultants | Every associate has their own template and scoring habits. | One model, one catalogue, one export format across the whole book. |
| Portfolio visibility | Ask each consultant for a status update. | Control health, overdue actions and audit dates visible per client. |
| Client confidentiality | Client data mixed across drives and mailboxes. | Hard tenant isolation, per-client roles, MFA and append-only audit log. |
| Handover / renewal | A zip file and a call. | Transfer the live workspace; the client keeps running your methodology — and keeps paying for it. |
Free assessment — score one live client, then decide
Take a real engagement, load its controls and evidence into a workspace, and see the gap score and deliverables you'd hand the client. If it doesn't beat your spreadsheet pack, you've lost an afternoon.
- Framework coverage per client and per standard
- Reusable evidence you're currently collecting twice
- Deliverable pack: SoA, risk register, policies, management review
- Effort saved per engagement, in hours
What it costs
Multi-tenant plans are priced per practice, not per client licence, so a fixed-fee engagement stays profitable.
Up to 5 client workspaces and 25 users, with AI ‘Fix this’, Microsoft and Jira integrations.
Up to 25 client workspaces and 100 users, with higher automation limits.
Unlimited workspaces, SSO and the full integration set for larger practices.
Full feature-by-feature breakdown on the pricing page. No sales call required to start.
Working a single client? Single-organisation plans start at £79/mo.
I've been the consultant with twelve client spreadsheets and the practice lead trying to review them. This is the tool I wanted: one methodology, isolated client data, deliverables that look like yours, and a handover that takes an hour instead of a week.
Read the founder storyWhere to go next
See the consultancy and advisory services, the full GRC workspace, or the online ISO consultant offer.
Answers buyers, procurement and auditors want
Is client data actually isolated?+
Yes. Each client is a separate workspace with row-level security, its own membership and roles, MFA enforcement and an append-only audit log. Consultants only see the workspaces they're a member of.
Can deliverables carry our branding?+
Yes — policy and report PDFs export with your logo and document control metadata (version, approver, effective date).
What happens when the client takes it in-house?+
Transfer ownership of the workspace to the client. They continue on their own subscription with all history intact; you keep the methodology.
Do you support more than ISO 27001?+
ISO 27001, ISO 42001, ISO 9001, ISO 20000-1, SOC 2, Cyber Essentials and GDPR share one register, one control catalogue and one evidence base — with crosswalk mapping between them.
Run your next engagement here
Set up a client workspace, import their register, and produce the deliverable pack in your branding — before you commit the practice.
Prefer a conversation? Email hello@iso-standard.app — a practitioner responds within one business day.