The CRA's 24-hour reporting duty has applied since 11 September 2026.

Pass your ISO audit. And every one after.

ISO 27001, ISO 9001 and the rest in one place, built for audit day.

No ties to any auditorExport everything, any timeMonth to month

Next EU deadlineAIACTAI ActSee every date

Before and after

From shared drives and spreadsheets to one system that keeps itself true

What changes when the program lives in StandardOS instead of folders, reminders and somebody's memory.

Shared drives and spreadsheetsWith StandardOS
Which rules applyWeeks of reading, or a guessA few questions, and an answer in writing with the article behind it
PoliciesTemplates that drift out of dateDrafted for you, approved by you, reviewed on a schedule
EvidenceScreenshots the week before the auditRead from your tools every day, dated and kept
DeadlinesIn someone's calendarOn the compliance calendar, with the CRA's reporting clocks beside them
Audit dayFolders emailed to the auditorThe auditor reads every record and can change none

What it does

Everything a program needs, already wired together

Know what applies, in writing

Answer a few questions. Get each rule's verdict with the article it rests on.

Machinery makerMedium-sizedConnected productsNo bank customers
NIS2 · important entity, Annex IIApplies
Cyber Resilience Act · 3 products in scopeApplies
DORA · not a financial entityDoes not apply
Example data

Evidence every morning

Read from your tools, tied to the control it proves.

MFA required A.8.5Pass
Disks encrypted A.8.24Pass
Backups kept A.8.13Failing
Example data

Every clock, counted

The deadlines that matter to you, nobody else's.

CRA early warning24 h
Machinery Regulation

Policies people sign

Drafted for your company, approved with a name and a date.

Access control policy v3Approved
Supplier policy v1To review
Example data

Integrations

It reads the tools you already use

12 integrations, 3 of them in one click. Read-only access you grant and can revoke at any time.

  • GitHub
  • Microsoft Entra ID
  • Okta
  • Google Workspace
  • Personio
  • Amazon Web Services
  • Microsoft Azure
  • Google Cloud
  • Snyk
  • Kandji
  • Jamf Pro
  • Microsoft Intune

Live

Watch the program run itself

Every check, every morning, with the result and the control it proves. When a check that was passing starts failing, the owners and admins hear about it the same day.

Today

184checks run173passing11need a person

Passing share, this month

Check stream

MFA required for every account, Entra ID A.8.5PASS
Laptops encrypted, Intune A.8.24PASS
Review required before merging, GitHub A.8.32PASS
Leaver still active in the register, Personio A.5.18FAIL
Critical finding past its interval, Snyk A.8.8FAIL

Example data

27frameworks on one model
12integrations, read-only
€249a month, every feature

Industries

Pages for your kind of company, with your deadlines on them

Document packs

Or buy one document pack, no account

  • CRAApplies from 11 Dec 2027

    You make a product with digital elements

    CRA technical file

    CRA file, one product

    List price €3,000

    €2,000 excl. VAT

    33% off the list price, introductory, until 30 Nov 2026
    See the pack, €2,000
  • NIS2Applies since 18 Oct 2024

    You must register as an essential or important entity

    NIS2 Registration Pack

    Offline: worksheet, registration, runbook

    €199 excl. VAT

    See the pack, €199
  • DORAApplies since 17 Jan 2025

    A bank or insurer sends you the DORA questionnaire

    DORA Vendor Pack

    Offline: clauses, register, due diligence

    €199 excl. VAT

    See the pack, €199

All packs in the Marketplace

Pricing

€249 /mo · excl. VAT

Per organization, every feature, unlimited people.

  • Every framework and every feature
  • Unlimited users, auditors included
  • 7 days free, no card, no sales call

What's included, what isn't, and the total costCompared with Vanta, Drata, Cyberday, Secureframe, a consultant and spreadsheets

Example data

This page in:DeutschFrançaisNederlandsEspañolDansk