A bank or law firm asked about your security. Show it’s run, not just written.
Fintech and legal-tech start-ups handle sensitive client data, and larger customers, including banks, law firms and their procurement teams, check suppliers carefully. ClearIMS helps you build and run an ISO 27001 information security management system (ISMS), so your answers rest on approved policies, risks and evidence.
20 minutes with the founder · video or phone · free. Look round a fully set-up demo company first, then £300 a month, billed monthly, cancel with 30 days’ notice. No VAT charged. Optional setup consulting from SW Digital Services is £500 to £700 a day.
What financial and legal customers ask you for
Due diligence questionnaires
Larger customers run supplier due diligence before onboarding and again at review. They ask about access, data handling, suppliers, incidents and continuity.
ISO 27001 as a customer requirement
Contracts and procurement policies sometimes name ISO 27001, or ask how you would meet it.
Confidential client data
Law firms and financial customers care about confidentiality, access control and what happens in a breach, and want to see named owners.
Evidence at review time
Customers ask for proof of what you said last year: reviews done, access checked, incidents handled.
Your customers may also have their own regulatory duties. ClearIMS doesn’t give regulatory or legal advice. It helps you run an ISMS and keep the records that answer their questions.
How ClearIMS helps a small team keep up
Drafting and admin are what ClearIMS is built to take on. A named person in your organisation approves every record; the AI never approves anything.
Questionnaire answers drafted from your records
Once AI is activated, it drafts answers to customer security questionnaires from your approved records, with sources, so you can check each answer against the policy it came from before it goes back.
A virtual ISMS manager in your inbox
ClearIMS emails owners about outstanding and overdue actions, and they reply in plain English to update them. Reviews and checks don’t quietly slip, and the record shows who did what.
Evidence kept in one library
Keep your evidence files in one place and attach them to records across ClearIMS, so ‘show me’ has an answer when a customer reviews you.
Got 5 minutes or 5 hours? Start at the top
The Recommended tasks list puts the ISO 27001 work in order, most important first. Whenever someone has time, they work down it, and every task they finish moves your ISMS forward.
Questions we get asked
Does ISO 27001 satisfy financial or legal regulators?
No. It is an information security standard, not a regulator’s approval, and ClearIMS offers no regulatory opinion. It gives you records that customers’ due diligence questions can be answered from.
Do customers have to see inside our ISMS?
No. You can share a security profile through the trust centre: you publish approved summaries and decide who can access gated proof.
How much is it?
£300 a month, billed monthly, cancel with 30 days’ notice, unlimited users. Try the demo company first: an invented business with its ISMS fully set up, read-only.
Bring your latest due diligence questionnaire to a 20-minute call.
We’ll show you how ClearIMS would handle it and give you a straight answer on whether it fits your team.
- Try the demo company first: an invented business with its ISMS fully set up, for you to look round.
- Then £300 a month, billed monthly. Monthly plans cancel with 30 days’ notice.
- One price for your organisation, unlimited users. No VAT charged.
- Optional setup consulting from SW Digital Services: £500 to £700 a day, quoted per job.
FURTHER READING
What is a customer security questionnaire, and how do you answer one?
7 min read · UpdatedWhy customers send security questionnaires, what they ask, how to answer them quickly and honestly, and how ISO 27001 makes the next one easier.
A tender asks for ISO 27001 and you don't have it yet: what to do
8 min read · UpdatedHow to read the requirement, what to ask the buyer, what to write in your response, and the evidence that makes "working towards ISO 27001" credible.