One platform for your entire management system
From requirements and risks to documents, people and audits. Everything linked, everything traceable, everything in your own environment.
Standards and requirements
Every requirement of an enabled standard, with vendor guidance per requirement. Applicability decisions (SoA) are recorded per requirement, with justification.
Risks and controls
Risk register with workshops and assessments, treatment, and links to the mitigating controls. Controls carry implementation narratives and evidence.
Documents and records
Versioned document management with approval flow, templates for the mandatory documents, acknowledgement tracking and classification labels. Files live in your own database, not a vendor cloud.
People and competence
Personnel register, roles, training with assessments and magic-link invitations, competence tracking, and screening/clearance renewal tracking (VOG, VGB).
Audits and improvement
Internal audit planning and execution, findings, nonconformities and corrective actions, and management reviews with the mandatory agenda.
Reporting
Statement of Applicability, management review packet, registers and exports. Every change lands in an audit-grade log.
Optional: AI assistance and email
Both optional, both keyless: Azure OpenAI and Azure Communication Services run via managed identity in your own subscription. Every AI action requires explicit human approval and is audit-logged. Off by default.
Administration
Entra ID SSO and directory sync, roles and permissions, in-app backup and restore, health monitoring.