From controls to certification, in one place.

Manage the Information Security Management System (ISMS) with ISO/IEC 27001, ISO/IEC 27701 and LGPD (Brazil's General Data Protection Law) on the same platform, with audit-ready evidence.

153
preloaded controls
93
Annex A controls from ISO/IEC 27001:2022
60
privacy controls from ISO/IEC 27701:2019

Everything the ISMS needs

  • Information assets

    Inventory of assets, owners and classification.

  • Risk management

    Analysis by likelihood and impact, with a treatment plan.

  • Controls

    ISO 27001 and ISO 27701 mapped, with implementation status and evidence.

  • Audits and nonconformities

    Internal audits, findings and corrective actions tracked through to closure.

  • Incidents

    Incident logging and handling, with an alert for notifying the ANPD (Brazil's data protection authority).

  • Data subject rights

    LGPD requests with deadline control and response templates.

  • Records of processing

    Legal bases, impact assessment reports and international transfers.

  • Suppliers

    Security questionnaire sent automatically and a score from 0 to 100.

The documents the auditor asks for, generated by the platform.

  • Statement of Applicability (SoA) in PDF
  • Management Review Report
  • Audit trail across all modules
  • Evidence stored by control

Built for companies and for those who advise them

  • Isolated environment per client

    Each company in its own environment, with dedicated storage.

  • Corporate login

    Single sign-on with Microsoft Entra ID, Google Workspace or Okta, configured with no code.

  • Tailored modules

    Enable only what each client needs: ISO 27001, ISO 27701, LGPD or suppliers.

Who it makes sense for

  • Companies going through ISO 27001 certification
  • Data Protection Officers (DPOs)
  • Information security teams
  • Security and privacy consulting firms
  • Firms specializing in LGPD

Developed by a certified company.

See our certifications

Do your clients need ISO 27001 or LGPD compliance?

Talk to our team and see how to offer the Compliance platform.

Contact us

Records your consent choice and provides anti-spam protection for the form.

Google Analytics 4 (_ga and _ga_<ID> cookies), for website usage analytics.

Advertising campaign measurement: LinkedIn Insight Tag and Meta Pixel (cookies in your browser) and, when you submit the contact form, sending your encrypted (hashed) email and phone number to Google Ads for ad attribution.