Enterprise security questionnaire, 200 questions, due Friday. Answer from one set of approved records.
The first enterprise deal brings a long security questionnaire, and often a line asking whether you hold ISO 27001. ClearIMS helps you build and run an ISO 27001 information security management system (ISMS), so answers come from approved policies and evidence rather than from whoever has a free afternoon.
20 minutes with the founder · video or phone · free. Look round a fully set-up demo company first, then £300 a month, billed monthly, cancel with 30 days’ notice. No VAT charged. Optional setup consulting from SW Digital Services is £500 to £700 a day.
What enterprise buyers ask a software supplier
The long security questionnaire
Each customer sends their own format, covering access, development practice, hosting, suppliers, incidents and continuity. The answers have to agree with each other and with what you do.
Is the customer’s data protected in how you build?
Buyers ask about change control, code review, secrets, backups and who can reach production. Written, owned and evidenced answers go down better than ‘we think so’.
ISO 27001 as a procurement box
Many procurement teams tick or reject on ISO 27001. Even where it isn’t mandatory, running an ISMS answers the underlying question.
The same questions, again at renewal
The questionnaire comes back every year or with each new customer, and stale answers cause delays.
Running an ISMS doesn’t remove questionnaires. It means each one is answered from records that already exist, instead of being a fresh scramble.
How ClearIMS helps a small engineering team
Drafting and admin are what ClearIMS is built to take on. A named person in your organisation approves every record; the AI never approves anything.
Questionnaire import and drafted answers
Import a customer’s questionnaire and assign sections to the people who know the answers. Once AI is activated, it drafts answers from your approved records, with sources, and a person approves each one.
A virtual ISMS manager in your inbox
ClearIMS emails owners about outstanding and overdue actions, and they reply in plain English to update them. Reviews and checks don’t quietly slip, and the record shows who did what.
Change records from your repository
Connect a GitHub or Forgejo repository with a read-only token. Each merged pull request becomes a draft change record, and a person completes and signs it off. Only pull request details are read, never code.
Got 5 minutes or 5 hours? Start at the top
The Recommended tasks list puts the ISO 27001 work in order, most important first. Whenever someone has time, they work down it, and every task they finish moves your ISMS forward.
Questions we get asked
Do we need ISO 27001 before answering a questionnaire?
Not always. Our guide covers answering without it. A running ISMS means the answers are backed by approved records either way.
Can the AI send answers to the customer on its own?
No. Once AI is activated it drafts with sources; your people review and approve before anything goes back. The AI never approves anything.
What does it cost?
£300 a month, billed monthly, cancel with 30 days’ notice, unlimited users. Try the demo company first: an invented business with its ISMS fully set up, read-only.
Bring your latest questionnaire to a 20-minute call.
We’ll show you how ClearIMS would handle it and give you a straight answer on whether it fits your team.
- Try the demo company first: an invented business with its ISMS fully set up, for you to look round.
- Then £300 a month, billed monthly. Monthly plans cancel with 30 days’ notice.
- One price for your organisation, unlimited users. No VAT charged.
- Optional setup consulting from SW Digital Services: £500 to £700 a day, quoted per job.
FURTHER READING
ISO 27001 for SaaS and software companies selling to enterprise and the public sector
9 min read · UpdatedWhy enterprise and public-sector buyers ask SaaS companies for ISO 27001, how to scope it, the Annex A controls that matter, and ISO 27001 vs SOC 2 in the UK.
How to answer a supplier security questionnaire when you don't have ISO 27001 yet
5 min read · UpdatedHow to answer a customer's security questionnaire honestly and quickly without ISO 27001: what to say, what to attach and how to stop starting from scratch.