ClearIMS
Book a 20-minute callTry the demo company

A customer or tender is asking for ISO 27001.

Build and run the ISMS without building a compliance team.Drafts do the groundwork. Your people approve.

Describe your business in plain English. ClearIMS is built to draft your first scope, risks, risk treatments, Statement of Applicability, policies and tasks. Your named people review and approve them, then owners, reminders and evidence keep the work moving. AI drafting is available once activated for your organisation.

Bring us the requirementLook round the demo company

A 20-minute call. We’ll give you a straight answer on whether ClearIMS fits.

Not sure where you stand? Take the 2-minute readiness check →

Look round a fully set-up demo company first · £300 a month, cancel with 30 days’ notice · No VAT charged

EXAMPLE LTD (FICTIONAL) · ISMS-POL-01DRAFT 0.1 · generated by ClearIMS

Information Security Policy

1. Purpose. Example Ltd designs and hosts booking software for independent dental practices in the UK. This policy sets out how we protect the confidentiality, integrity and availability of the information we hold on behalf of our customers and their patients.

2. Scope. The ISMS covers the booking platform, the supporting cloud infrastructure, and the London office Manchester office and all remote workers. Suppliers processing patient data are in scope under A.5.19 to A.5.23.

3. Commitments. Top management commits to meeting applicable legal, regulatory and contractual requirements

DRAFTED BYClearIMS (draft, not an approval)
APPROVED BY (TOP MANAGEMENT)R. Okafor, Managing Director

Want a straight answer first?

Leave your work email. We’ll reply to your question or find a time to talk.

We use your address only to reply to you. See our privacy notice.

Got a deadline?

Bring the customer requirement or tender wording.

In a 20-minute call, we’ll read it with you, talk through what you can honestly say today and give you a straight answer on whether ClearIMS fits your timescale.

Book a requirement reviewOr read what to do first

From customer request to a running ISMS.

01 · DRAFT

Start with a draft, not a blank page.

Describe the business in plain English. ClearIMS drafts the first scope, risks, treatments, Statement of Applicability, policies and tasks.

02 · APPROVE

Your people make the decisions.

Everything starts as a draft. Named people approve, with top-management approval where required.

03 · RUN

Keep it running after setup.

Owners, due dates, reminders, evidence, internal audits, management reviews and nonconformities stay in one system.

04 · SHOW

Show approved records to the auditor.

Create a scoped, read-only link to approved records. It expires and can be revoked.

Pricing

ISO 27001 is £300 a month for your organisation, billed monthly, and you can cancel with 30 days’ notice. Or start with Cyber Essentials at £39 a month. No VAT is charged. See it first in the demo company: an invented business with its ISMS fully set up, for you to look round.

Optional setup consulting from SW Digital Services is £500 to £700 a day, quoted per job, for example importing an existing ISMS or spreadsheets, setup sessions with your team, or a gap review before stage 1. It is a separate service and is never bundled into the software price.

ISO 27001

One price for your organisation, with unlimited users and every feature.

£300per month, billed monthly

Monthly plans cancel with 30 days’ notice. No VAT charged.

Look round the demo company
  • Starting ISMS drafts for your review: scope, risk register, treatments, SoA, policies, tasks
  • Named-person approvals on every record; top-management sign-off where required
  • Evidence, tasks, internal audits, management reviews, nonconformities
  • Auditor portal, Cyber Essentials preparation and business continuity included
  • Certification cycle support: Stage 1, Stage 2, surveillance and recertification

Cyber Essentials

For when a customer or tender needs Cyber Essentials (or Plus) now.

£39per month, billed monthly

No VAT charged.

Book a 20-minute call
  • The Cyber Essentials and Cyber Essentials Plus question bank
  • Each answer with an owner, a due date and linked evidence
  • Gap tracking: what’s missing or out of date, and any Plus remediation
  • Unlimited users
  • Upgrade to ISO 27001 any time — your evidence and owners carry across.
More about the Cyber Essentials plan

Full pricing, what’s not included and the usual questions →

BUILT FOR
ISO 27001:2022Available now
Cyber EssentialsAvailable now
Business continuityIncluded
ISO 22301 · 14001 · 45001Planned, no dates promised
Why it’s worth it

Not a tick-box. A better-run business.

The certificate opens doors, but the system behind it is what pays you back: fewer surprises, faster answers and less riding on one person.

Win the bigger customers

Get through supplier checks and tenders that ask for ISO 27001, instead of being filtered out before anyone reads your proposal.

Answer security questionnaires in minutes, not days

When the policies, risks and evidence already exist and are approved, most answers are a matter of looking them up.

Know your real risks

A clear, current view of what could go wrong with your information and what you have decided to do about it, so money goes where it matters.

Recover faster when something goes wrong

Tested backups, an incident plan people have actually rehearsed, and supplier contacts to hand, before the bad day rather than during it.

Less depends on one person

Who does what is written down and assigned, so leavers, holidays and growth don't leave gaps in how you protect data.

Trust you can show

Customers, insurers and your own team can see that security is managed, not assumed, with records to back it up.

Your virtual ISMS manager

It runs from your inbox, so nobody has to babysit the ISMS.

It chases outstanding actions

Owners get an email when an action is due or overdue, so reviews, restore tests and supplier checks don't quietly slip.

Reply in plain English

Reply to the email (“done, restore test passed, report attached”) and ClearIMS updates the action. No logging in to tick a box.

An email address for every incident, risk and questionnaire

Each record can have its own randomly generated address. Copy it into the email chain, suppliers included, and the conversation is filed against the record.

Summarised and filed

Once AI is activated, ClearIMS summarises what comes in, suggests and creates tasks and updates the timeline. Your people still approve; the AI never approves anything.

ClearIMSto Alex (IT) · 08:00

2 actions due this week

  • Backup restore test · due Fri
  • Supplier review: cloud backup · due Fri
Alexreply · 10:14

Done, restore test passed. Report attached.

UpdatedBackup restore test: completed, evidence attached
Incident inboxinc-7f3k2@…Supplier email filed · summary added · 2 tasks suggested

Illustrative · Example Ltd (fictional)

Meet Dave

Dave looks after IT. Then his biggest customer asked about ISO 27001.

Forty-eight seconds, no slides. ClearIMS is your virtual ISMS manager: it tells you what to do next, and your people approve everything.

Try the demo companyFrom spreadsheets to ClearIMS
Recommended tasksMost important first
  1. 1Approve the information security policyTop management · 10 min
  2. 2Confirm your ISMS scopeISMS owner · 15 min
  3. 3Review the top five risksISMS owner · 30 min
  4. 4Turn on MFA for email adminsIT · 20 min
  5. 5Run a backup restore testIT · 45 min

Illustrative · Example Ltd (fictional)

Always know what to do next

Got 5 minutes or 5 hours? Start at the top.

The hardest part of ISO 27001 is knowing what to do next. ClearIMS keeps a Recommended tasks list with the most important work first, so whenever you have time you just work down it, and every task you finish moves your ISMS forward.

See it on a 20-minute call
Use your own AI with ClearIMS

Ask your own AI about your ISMS.

Connect your own assistant through MCP. Ask where you stand, log an incident or create a task from the chat you already have open. It sees and does only what you can, every call is in the audit trail, and approvals stay with your people. Available on all paid plans.

How it works

One system, four jobs.
Draft, approve, run, show your auditor.

All screens show Example Ltd, a fictional organisation

From a description to a complete starting ISMS

You tell ClearIMS what your organisation does, where it works and who works in it. It is built to draft the core records of a starting system, each one clearly marked as a draft waiting for a named approver.

  • iScope
  • iiRisk register and risk treatments
  • iiiStatement of Applicability, all 93 Annex A controls
  • ivPolicies and tasks
Send us a message
EXAMPLE LTD (FICTIONAL) · STATEMENT OF APPLICABILITY · DRAFT93 controls · 0 approved by AI
CONTROLDRAFTED JUSTIFICATIONAPPLICABLEAPPROVAL
A.5.1Policies for information security are required; Example Ltd holds patient data on behalf of practices.YesApproved · J. Patel
A.7.4Physical security monitoring. Applicable to the London office. No fixed office; staff work remotely.Yes NoDraft · awaiting J. Patel
A.8.13Information backup. Booking data is backed up nightly by the cloud provider; restore tests are quarterly.YesApproved · J. Patel
A.8.24Use of cryptography. Data is encrypted in transit and at rest; key management is delegated to the cloud provider.YesDraft · awaiting J. Patel
Every approval records who approved, which version, and when.

Who it’s for

Solutions by role
01 · THE BUSINESS

Needs ISO 27001, not a compliance team

A customer, a tender or the board is asking for it. ClearIMS is built to take on the drafting and the admin, so you don’t have to hire people to deliver it.

02 · THE PERSON WHO RUNS IT

ISO 27001 on top of the day job

Usually an IT manager, operations lead or director. They get a full first draft to react to, not a blank template, and a system that runs on tasks, owners and due dates.

03 · THE ADVISER

Helping a client’s small team

If you support a small organisation through ISO 27001, you can work in their system alongside them, while every approval is still made by a named person in their business.

02 · APPROVE

The AI never approves anything. A named person does.

Every approval records who approved, which version, and when. The information security policy and each management review sign-off need a top-management approver.

RECORD · EXAMPLE LTD (FICTIONAL)STATUS
Risk R-014 · Laptop theftDrafted
SoA · A.8.1 User endpoint devicesApproved · J. Patel · v1.2
Information Security Policy v1.0Approved · R. Okafor (MD)
Management review · Q3Awaiting top management
EXAMPLE LTD (FICTIONAL) · THIS MONTHOwners set by people
Evidence · quarterly restore test (A.8.13)S. AhmedDue
Internal audit · Annex A.5L. BrennanScheduled
Nonconformity NC-04 · leaver accessS. AhmedOpen
Management review · Q3M. Doyle (MD)To sign
03 · RUN

Then the redlines keep coming

An ISMS is a running system, not a folder. Evidence, tasks, internal audits, management reviews and nonconformities are owned, dated and recorded, so a small team can keep the system honest between audits.

04 · SHOW YOUR AUDITOR

Your auditor sees the approved records

The auditor portal gives your external auditor read-only access to your approved records: policies, the Statement of Applicability, risks, audits and reviews. Documents appear at their latest approved version, and the link expires or can be revoked.

We make the software. Your certification is yours, awarded by your certification body.

AUDITOR PORTAL · EXAMPLE LTD (FICTIONAL)Read-only · approved records
CLAUSERECORDAPPROVED BY
5.2Information Security Policy v1.0R. Okafor (MD)
6.1.3Statement of Applicability v1.2J. Patel
9.2Internal audit report · Annex A.5L. Brennan
9.3Management review minutes · Q2M. Doyle (MD)
The whole certification cycle

Ready for your first audit.
And every one after.

ISO 27001 runs on a three-year cycle: Stage 1, Stage 2, a surveillance audit in each of the next two years, then recertification. ClearIMS supports every step. That means less scramble before each audit, less riding on one person, and a certificate that keeps winning bigger customers year after year.

Every audit on one calendar

Stage 1, Stage 2, two surveillance audits and recertification. The owner gets a prep task 60 days before each visit, and you can change the lead time.

Live checks before each visit

Six pre-visit checks show Ready or Open, with the reason. Each open check has its own owner task, and a nightly job reopens it if the check goes stale.

Findings tracked to their deadlines

Record findings exactly as your certification body graded them, each with a response deadline and an owner. One click raises a nonconformity or an improvement.

Auditor questions and requests in one place

Auditors ask questions through their portal link and the owner gets a task. The document request log shows what was asked for, when it’s due and what was sent.

Plus scope re-confirmation, which puts your certificate wording beside your approved scope and warns you if they drift, and a certification mark register that lists every place you use the mark, with an owner and a yearly check.

How the certification cycle works in ClearIMS

We make the software. Your certificate always comes from your certification body.

Honest answers to the usual questions

Do you certify us?

No. We make the software; your certification is awarded by your certification body. ClearIMS helps you build, run and evidence the system they’ll assess.

Does the AI approve anything?

Never. AI only drafts. A named person in your organisation approves every record, and the information security policy and management review sign-off need a top-management approver.

Will my auditor accept drafted documents?

Your auditor assesses your system: whether it fits your organisation, whether your people approved it, and whether you run it. Drafting is where you start, not what they assess. ClearIMS records who approved each record and when.

Can I see it before I pay?

Yes. Enter your work email to look round our demo company: an invented business with its ISMS fully set up, so you can see the risks, policies, tasks and audits as they look once you’re running. The demo is read-only. AI drafting of your own scope, risks, Statement of Applicability and policies is available once activated for your organisation.

What happens after the demo?

When you’re ready, you start for real on the Standard plan: £300 a month, billed monthly, with no VAT charged. The demo company replaced our old self-serve trial.

Can I cancel?

Monthly plans cancel with 30 days’ notice.

Which standards are covered?

ISO 27001 and Cyber Essentials today, with business continuity included. Cyber Essentials is also available on its own at £39 a month (no VAT charged), and upgrades to ISO 27001 without starting again. ISO 22301, 14001 and 45001 are planned. We don’t publish dates we can’t keep.

TRUST AND SECURITY

Only what’s true

No badges we haven’t earned. Just how the software works.

Read more on the security page

Designed with tenant isolation and UK data handling in mind

Ask us how it works and we’ll give you a straight answer.

A named person approves every record

AI only drafts and never approves. Every approval records who approved, which version, and when.

Your auditor gets scoped, read-only access

The auditor portal shows your external auditor your approved records through a link that expires and can be revoked.

SEE IT FIRST

Look round a running ISMS. Then £300 a month.

Enter your work email to explore our demo company, an invented business with its ISMS fully set up. When you’re ready to start for real, it’s £300 a month, billed monthly, and you can cancel with 30 days’ notice. No VAT charged. Need a hand getting set up? Optional setup consulting from SW Digital Services is £500 to £700 a day, quoted per job.

Try the demo companyBook a 20-minute callWe make the software. Your certification is yours, awarded by your certification body.
GET IN TOUCH

Send us a message, or book a 20-minute call

Tell us a little about your organisation and we’ll reply by email. Prefer to look first? Try the demo company, a fully set-up ISMS you can explore. Then it’s £300 a month. Optional setup consulting from SW Digital Services is £500 to £700 a day.

Prefer email? Write to [email protected].

Optional

We use these details only to reply to you. See our privacy notice.