The CRA's 24-hour reporting duty has applied since 11 September 2026. Check whether it reaches you
Start the system

Comparisons

Public facts, each with its source and read date.

StandardOS vs a consultant

  • Read 14 Sep 2026
  • Consultant
StandardOSWho it is for
A European company that wants the certified year to run itself: ISO 27001, ISO 9001 or ISO 42001 with the EU regulations on the same records, at one price it can read before it talks to anyone.
a consultantWho it is for
A company that wants judgement it does not have in-house: someone who has sat on the other side of an audit and can say which risk method, which scope and which Statement of Applicability an auditor will accept. What a good consultant sells is judgement, not documents. Source, read 14 Sep 2026
What we do not do
  • Judgement calls: StandardOS does not decide your scope, your risk method or your exclusions; the free pages write the documents from your answers and a person still signs them.
  • Sitting in the audit with you.
  • Legal advice on which regulation reaches you; the determinations on this site are StandardOS's reading, with the article cited.
a consultant and StandardOS, criterion by criterion, with the source of each fact
CriterionStandardOSa consultant
What you buyA system that keeps the records, the calendar and the evidence for the whole certification cycle. our page · 14 Sep 2026Judgement, and documents written for you.
Year two and threeThe same subscription; surveillance audits read the records the year produced. our page · 14 Sep 2026A new engagement, or the documents stop moving.
The audit feeThe same either way; the software is not the big number. our page · 14 Sep 2026The same either way: the auditor days come from ISO/IEC 27006-1:2024 Annex C by headcount and a consultant does not change them. The price of the advice is not compared here.
Who holds the evidenceYou, from day one; every table exports in open formats. our page · 14 Sep 2026Usually a shared drive the company does not control, handed over at the end of the engagement.
Who answers the auditorYou, from records with dates on them. our page · 14 Sep 2026Often the consultant, which an auditor notices.
A second standard27 on one model, every one included: 27001, CRA, NIS2, DORA, 42001, AI Act, 9001, MR, GDPR, DA, 27701, EAA, 14001, PLD, RED, GPSR, NIS2 IR, RoHS, REACH, WEEE, PPWR, WB, BAT, Pay, EUDR, EED, CER. our page · 14 Sep 2026The ones the consultant has audited; a second standard is a second engagement.
Both at onceThe partner programme is open to consultancies that do; the records stay yours. our page · 14 Sep 2026A consultant who works in the system instead of on a drive.

Every figure re-read on 14 September 2026; next check 13 December 2026. A fact the other side does not publish is written as not published, never estimated. Corrections: contact

See the price before you talk to anyone

€249/mo excl. VAT, flat per organization, every feature, unlimited people; the trial writes your Statement of Applicability in the first fifteen minutes.

Start your compliance systemThe pricing page

The price-shape table

This page in:DeutschFrançaisNederlandsEspañolDansk