Evidence with a source
Each AI draft cites the requirement code and the passage it used. The model and timestamp stay on the record.
Run every client's ISO programme under your own brand.
Manage ISO 27001, 9001, 14001 and 45001 from one Raq.com workspace. Your logo appears on client portals, emails and reports. Clients use secure links instead of creating accounts.
Full access for 30 days. No card required.
White-label included in the price
Secure client links with no client accounts
ISO 27001, 9001, 14001 and 45001
£139 per consultant, per month
The ISO Workspace
One view across every client programme.
Readiness, overdue evidence, findings, surveillance dates and document expiry dates sit in one portfolio.
Raq.com ISO Workspace
ISO consultancy portfolio showing readiness, outstanding requirements and due dates across every client programme
You approve the work
A consultant approves, edits or rejects a draft before it changes a finding, an SoA decision or anything a client can see.
Clients use secure links
Each link belongs to a named contact, expires on your schedule and can be revoked when somebody leaves.
Your consultancy stays visible
Your branding carries through the client work.
Your branding runs through the client-facing parts of the programme. White-label is included in the subscription.
Your brand on the client work
Add your logo, colours and sender domain to client portals, evidence requests, gap assessments, reports and audit packs.
A portfolio built for consultants
Move between clients without rebuilding the status picture before each review call. Programme records and due dates stay separate and current.
An audit trail you can explain
Keep requirement decisions, approved SoA versions, evidence reviews and findings with the person and date behind each change.
The rest of the engagement is there too
Use the same account for CRM, engagement letters, forms, help desk, automations and documents. You only key the client in once.
Pricing
£139 per consultant, per month.
10 active client programmes are included across the account. Each extra active programme costs £10 a month. Annual billing saves 5%. Extra AI usage is available from £10 without adding a consultant seat.
ISO Consultants plan
£139
/ consultant / month
- 10 active client programmes included
- Extra active programmes £10 each
- Unlimited client participants
- White-label included
- Four ISO standards at launch
- Higher AI allowance for this plan
- CRM, e-sign, forms and portals
- Help desk, automations and documents
Full access for 30 days. The trial starts when your workspace is created.
Calculate your monthly price
10 active programmes are included across the account.
Monthly total
£139
Price examples
- Solo consultant, 10 clients
- £139 a month
- Solo consultant, 20 clients
- £239 a month
- 2 consultants, 25 clients
- £428 a month
Capability register
See what is available, bounded or planned.
This page and the application use the same reviewed register. A provider name or roadmap item does not count as a working connection.
- Live
- 4
- Beta
- 2
- Manual
- 0
- Import only
- 0
- Export only
- 0
- Health only
- 0
- Adapter only
- 0
- Planned
- 1
Workflow
Multi-client ISO programmes
Run account-scoped client programmes for ISO 27001, 9001, 14001 and 45001.
- Current process
- Create a client and programme, select controlled framework packs and manage the assurance record.
- Owner
- ISO vertical team
- Release gate
- Core workflow, account isolation and programme allowance tests pass.
- Evidence
- Programme, framework and isolation suites pass. Reviewed 1 Aug 2026.
Workflow
Evidence, audit and CAPA assurance
Evidence, mappings, reviews, findings, actions and verification retain their history.
- Current process
- Review source evidence, approve mapped use and carry confirmed mappings through a replacement.
- Owner
- ISO vertical team
- Release gate
- Replacement, provenance, audit and report regression tests pass.
- Evidence
- Evidence continuity and assurance tests pass. Reviewed 1 Aug 2026.
Delivery
Reports and controlled portals
Generated report snapshots retain client and programme context and use permission-safe links.
- Current process
- Generate a snapshot from approved records and share only through the scoped portal path.
- Owner
- ISO vertical team
- Release gate
- Snapshot context, download and access tests pass.
- Evidence
- Report generation and portal scope have focused coverage. Reviewed 1 Aug 2026.
Platform
REST API and MCP workspace access
The main ISO jobs have account-scoped REST and MCP operations.
- Current process
- Use scoped credentials and the documented workspace tools. Human approval remains required for assurance decisions.
- Owner
- Agent platform
- Release gate
- Permissions, account isolation and schemas pass.
- Evidence
- ISO MCP and API contract suites pass. Reviewed 1 Aug 2026.
Integration
Microsoft 365, Google Drive, Dropbox, SFTP and S3 evidence collection
Client-scoped sources support encrypted provider credentials, scheduled collection, idempotent versioned ingestion, per-file failure records and mapped-control health.
- Current process
- Connect only a configured provider, choose a collection interval and review stale or failed source health before relying on mapped evidence.
- Owner
- Integrations team
- Release gate
- Provider credentials and external availability remain environment-specific; the interface identifies unconfigured OAuth providers.
- Evidence
- OAuth, encryption, idempotency, versioning, failure, scheduling, stale-source and control-mapping paths have focused tests. Reviewed 1 Aug 2026.
Workflow
Cross-standard reuse graph
A client-scoped graph shows exact controls in different standards that share evidence, risks, policies and findings, including their related treatment and corrective actions and curated framework mappings.
- Current process
- Create explicit requirement or evidence mappings, review provenance and use the graph as reuse guidance rather than automatic compliance.
- Owner
- ISO vertical team
- Release gate
- Relationships are visible and exact; no shared record automatically marks a control complete.
- Evidence
- Client isolation, explicit links, policy mapping, evidence reuse and graph composition have focused tests. Reviewed 1 Aug 2026.
Analytics
Consultancy capacity and programme economics
Capacity, programme margin and renewal-risk views are not released.
- Current process
- Use existing account reports and external practice records until the governed metrics are implemented.
- Owner
- ISO vertical team
- Release gate
- Define metric sources and validate them with design partners.
- Evidence
- The capability is excluded from live claims. Reviewed 1 Aug 2026.
Questions
Before you start
Is it ISO 27001 only?
No. ISO 27001, 9001, 14001 and 45001 are available at launch. You can run different standards for different clients from the same workspace.
Can AI make an audit decision?
No. AI drafts reviews and cites its sources. A consultant decides what becomes a finding, an SoA decision or a client-visible comment.
Does it fit when a client already uses Vanta or Drata?
Yes. Add their reports and exports as evidence while keeping your programme record, findings and audit pack under your brand.
What counts as an active programme?
A programme you are running for a client. Archived programmes don’t count. 10 active programmes are included, then each extra programme costs £10 a month.
Do clients pay or create accounts?
No. Client participants are free and use branded secure links for evidence, questionnaires and actions.
30-day free trial
Use it with a real client.
Set up your branding and run the full ISO workflow for 30 days. You can subscribe from the workspace if it fits your practice.
Start Your 30-Day Free TrialTry it with one client programme.
Everything is included for 30 days, with your branding and the first ten active programmes.
Start Your 30-Day Free TrialPrefer a gap assessment first?
Send your details and we will run a free gap assessment against the standard you are working to, under your brand. We reply within one working day.