Public facts, each with its source and read date
StandardOS vs a consultant
- Who it is for
- A consultant A company that wants judgement it does not have in-house: someone who has sat on the other side of an audit and can say which risk method, which scope and which Statement of Applicability an auditor will accept. What a good consultant sells is judgement, not documents. Source, read 14 September 2026
- StandardOS A European company that wants the certified year to run itself: ISO 27001, ISO 9001 or ISO 42001 with the EU regulations on the same records, at one price it can read before it talks to anyone.
- Price model, as published
- A consultant Not compared here. The certification body's fee is the same either way: the auditor days come from ISO/IEC 27006 Annex B by headcount and a consultant does not change them. Source, read 14 September 2026
- StandardOS €249/mo excl. VAT, flat per organization, every feature, unlimited people; 14-day free trial, no card.
- EU hosting
- A consultant Wherever the consultant keeps the files: usually a shared drive the company does not control, handed over at the end of the engagement. Source, read 14 September 2026
- StandardOS EU by default. Supabase: EU (Ireland); Vercel: EU serving; global CDN for static assets; the full subprocessor list is on the trust page.
- Frameworks
- A consultant The ones the consultant has audited; a second standard is a second engagement. Source, read 14 September 2026
- StandardOS 10 on one model, every one included: 27001, CRA, NIS2, DORA, 42001, AI Act, 9001, MR, GDPR, 27701. 12 integrations, each with its checks.
- What we do not do
- Judgement calls: StandardOS does not decide your scope, your risk method or your exclusions; the free pages write the documents from your answers and a person still signs them.
- Sitting in the audit with you.
- Legal advice on which regulation reaches you; the determinations on this site are StandardOS's reading, with the article cited.
| Criterion | A consultant | StandardOS | Source |
|---|---|---|---|
| What you buy | Judgement, and documents written for you. | A system that keeps the records, the calendar and the evidence for the whole certification cycle. | our page14 September 2026 |
| Year two and three | A new engagement, or the documents stop moving. | The same subscription; surveillance audits read the records the year produced. | our page14 September 2026 |
| The audit fee | Set by ISO/IEC 27006 Annex B; unchanged. | Set by ISO/IEC 27006 Annex B; unchanged. | our page14 September 2026 |
| Who holds the evidence | The consultant's drive until hand-over. | You, from day one; every table exports in open formats. | our page14 September 2026 |
| Who answers the auditor | Often the consultant, which an auditor notices. | You, from records with dates on them. | our page14 September 2026 |
| Both at once | A consultant who works in the system instead of on a drive. | The partner programme is open to consultancies that do; the records stay yours. | our page14 September 2026 |
Every figure re-read on 14 September 2026; next check 13 December 2026. A fact the other side does not publish is written as not published, never estimated. Corrections: contact.
See the price before you talk to anyone
€249/mo excl. VAT, flat per organization, every feature, unlimited people; the trial writes your Statement of Applicability in the first fifteen minutes.
vs Vantavs Dratavs Cyberdayvs Secureframevs spreadsheets and a shared driveThe price-shape table