What ISMS.online offers, and what it publishes
The ISO 42001 module comes with a ready-made bank of AI risks, controls already mapped to Annex A of the standard, and policy templates. It runs alongside 100+ other frameworks, such as ISO 27001 and SOC 2. The firm says its 'Headstart' content gets customers up to 85% of the way to ISO 42001 readiness from day one.
ISMS.online does not publish a price. Its pricing page calls cost 'bespoke to you' and offers only a quote form or a call. It names no leaders on the pages we checked. We found no published liability cap, indemnity or uptime figure.
ISMS.online's Trust Centre page lists its own certificates: ISO 27001 and ISO 27701, both renewed in 2024, and Cyber Essentials, gained in 2024. Its G-Cloud page says the platform helps UK public bodies show they meet the NCSC Cloud Security Principles. We found no listing in the UK government's AI assurance techniques directory.
Strengths
- ISO 27001 and ISO 27701 re-certification (2024) and Cyber Essentials certification for the vendor's own operations, published on a dedicated Trust Centre page
- Pre-built 'Headstart' content is claimed to get customers up to 85% of the way to ISO 42001 readiness from day one
- Single platform manages 100+ frameworks together, useful for buyers wanting ISO 42001 alongside ISO 27001 or SOC 2 rather than a standalone point tool
Things to check
- No pricing figures, tiers or ranges are published anywhere on the public site; cost is only available after a sales call.
- No named leadership team or executive individuals are published on the reviewed pages, limiting independent verification of who runs the compliance or technical function.
Common questions
Is the ISO 42001 module part of a wider platform?
Yes. It is one module in a platform covering 100+ frameworks, and it is software the buyer runs, not advice.
Does ISMS.online publish its prices?
No. Its pricing page calls cost 'bespoke to you' and offers only a quote request or a call.
What certificates does ISMS.online hold for its own operations?
Its Trust Centre page lists ISO 27001 and ISO 27701, both renewed in 2024, and Cyber Essentials, gained in 2024.
Evidence for each ISMS.online score
Show our working
Notes behind each thing to check
- No pricing figures, tiers or ranges are published anywhere on the public site; cost is only available after a sales call. (isms.online/pricing/ shows only bespoke-pricing language and a quote-request form, with no numbers.)
- No named leadership team or executive individuals are published on the reviewed pages, limiting independent verification of who runs the compliance or technical function. (isms.online/about/trust-centre/ and the isms.online homepage describe 'exceptional people' generically without naming individuals.)
| Criterion | Score | Evidence |
|---|---|---|
| Help when things go wrong | The platform documents policy/control mapping and 'live evidence' audit trails for G-Cloud and ISO audits generically, but no explicit description of an ICO-investigation-specific evidence export was found. | |
| Qualifications of the people who do the work | Own ISO 27001 and ISO 27701 certifications are disclosed with a 2024 re-certification date, but no named technical or compliance leadership individual was found on the reviewed pages. | |
| What it publishes about fees | No figures are published anywhere; the pricing page explicitly gates cost behind a quote request. | |
| Knowledge of your sector | Offers 100+ framework templates spanning many sectors and standards, but no named vertical-specific module (e.g. healthcare, financial services) beyond the generic framework library was found. | |
| Independence from what it sells | ISO 27001 and ISO 27701 certifications are third-party audited by accredited certification bodies and re-certified in 2024, giving independently verified evidence rather than pure self-declaration. | |
| Who carries the risk if the advice is wrong | No liability cap, indemnity clause or SLA/uptime percentage was found published on the trust centre or pricing pages reviewed. |
Sources for ISMS.online
- ISMS.online is operated by Alliantist Limited, registered with Companies House and shown as an active company. (Company no. 04922343; incorporated 6 October 2003; status: Active) (Companies House, checked 17 July 2026)
- The ISO 42001 / AI Management System (AIMS) module provides a pre-populated AI risk bank, pre-mapped Annex A controls and policy templates, and can be combined with 100+ other framework modules (e.g. ISO 27001, SOC 2) on the same platform. (Product scope confirmed on vendor site) (isms.online, checked 17 July 2026)
- Pricing is fully gated: the pricing page describes cost as 'bespoke to you' with no tiers or figures published, only a tailored-quote request form and a book-a-call option. (Pricing disclosure: gated / quote-based) (isms.online, checked 17 July 2026)
- ISMS.online publishes a dedicated G-Cloud page positioning its platform to help UK public-sector buyers evidence NCSC Cloud Security Principles and Statement of Applicability requirements for G-Cloud procurement. (UK public-sector (G-Cloud) positioning confirmed) (isms.online, checked 17 July 2026)
ISO 27001 ISO 27701 Cyber Essentials
Seeking ISO 42001 certificationExposed to the EU AI ActRegulated sectors
Where this firm appears
- Can the firm that prepares you also certify you?
- Does the EU AI Act apply to a UK firm?
- Your sector adds its own rules to UK data protection law
- Compare providers
If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.
This is an independent editorial guide, not legal advice.