The buyer asked how you secure their data. ISO 27001 is the base your answer stands on.
If you sell AI or data products to the public sector or to larger companies, procurement asks how you protect their data, who can see it and what happens when something goes wrong. ClearIMS helps you build and run an ISO 27001 information security management system (ISMS), so the policies, risks and evidence behind those answers exist, are approved by your people and stay current.
20 minutes with the founder · video or phone · free. Look round a fully set-up demo company first, then £300 a month, billed monthly, cancel with 30 days’ notice. No VAT charged. Optional setup consulting from SW Digital Services is £500 to £700 a day.
What AI and data buyers ask you for
Security questions before the pilot
Procurement and information security teams send questionnaires before any pilot or contract. They ask about access, hosting, suppliers, incidents and how customer data is handled.
Questions about how you use data and AI
Buyers increasingly ask how customer data is used, whether it trains models, and who is accountable. Clear, consistent answers need written policies and named owners behind them.
ISO 27001 named in the tender
Some tenders and enterprise contracts ask for ISO 27001 outright, or ask how you would meet it. A running ISMS gives you a straight answer.
Proof that it’s run, not just written
Buyers ask when you last reviewed access, tested a restore or handled an incident. That evidence only exists if someone is running the system.
ISO 27001 is an information security standard. It is not an AI-specific standard, but it is the security management base that buyers’ AI and data questions rest on, and it gives you one set of approved records to answer them from.
How ClearIMS helps a small team keep up
Drafting and admin are what ClearIMS is built to take on. A named person in your organisation approves every record; the AI never approves anything.
Questionnaire answers drafted from your records
Once AI is activated, it drafts answers to customer security questionnaires from your approved records, with sources, so you can check each answer against the policy it came from before it goes back.
A virtual ISMS manager in your inbox
ClearIMS emails owners about outstanding and overdue actions, and they reply in plain English to update them. Reviews and checks don’t quietly slip, and the record shows who did what.
An AI policy pack as drafts for your people
ClearIMS can generate an AI policy template pack as drafts, with a named reviewer and approver. Nothing is approved for you; your people review and own every document.
Got 5 minutes or 5 hours? Start at the top
The Recommended tasks list puts the ISO 27001 work in order, most important first. Whenever someone has time, they work down it, and every task they finish moves your ISMS forward.
Questions we get asked
Does ClearIMS cover ISO 42001 or AI governance standards?
No. ClearIMS helps you build and run an ISO 27001-aligned ISMS. It doesn’t offer AI-management-standard support, and we won’t suggest otherwise.
Can the AI approve our policies or answers?
No. Once AI is activated it drafts; a named person in your organisation reviews and approves every record. The AI never approves anything.
Can I look round before I pay?
Yes. Try the demo company, an invented business with its ISMS fully set up, read-only. After that it is £300 a month, billed monthly, cancel with 30 days’ notice, unlimited users.
Bring your last buyer questionnaire to a 20-minute call.
We’ll show you how ClearIMS would handle it and give you a straight answer on whether it fits your team.
- Try the demo company first: an invented business with its ISMS fully set up, for you to look round.
- Then £300 a month, billed monthly. Monthly plans cancel with 30 days’ notice.
- One price for your organisation, unlimited users. No VAT charged.
- Optional setup consulting from SW Digital Services: £500 to £700 a day, quoted per job.
FURTHER READING
What is a customer security questionnaire, and how do you answer one?
7 min read · UpdatedWhy customers send security questionnaires, what they ask, how to answer them quickly and honestly, and how ISO 27001 makes the next one easier.
Using AI assistants like ChatGPT and Claude with ISO 27001: what's safe and what isn't
8 min read · UpdatedWhere AI assistants genuinely help with an ISO 27001 ISMS, where they create risk, what MCP is, and a checklist for connecting one safely.