Resources
Field notes on multi-framework compliance
Practical writing on running ISO 9001, ISO 27001 and SOC 2 together — and on AI that earns its place in a regulated workflow.
- Frameworks6 min read
ISO 27001 vs SOC 2: which does your business need?
ISO 27001 vs SOC 2 compared — certification vs attestation, who audits each, which your buyers ask for, and why many companies end up doing both (and can reuse most of the work).
Read - Frameworks5 min read
How much does ISO 27001 certification cost? A 2026 UK guide
What ISO 27001 certification actually costs in the UK — audit fees, consultancy, tooling and internal time — with indicative ranges by company size and practical ways to bring the number down.
Read - Frameworks6 min read
How to get ISO 27001 certified: a step-by-step guide (2026)
The full path to ISO 27001 certification in nine steps — scope, risk assessment, Statement of Applicability, internal audit and the Stage 1 / Stage 2 certification audit — plus how long it takes and where teams get stuck.
Read - AI16 min read
EU AI Act deadlines 2026–2028: what the Digital Omnibus changed
The EU AI Act high-risk deadline moved to December 2027. Current deadlines, what applies to your business now, and a free readiness check. Updated September 2026.
Read - AI6 min read
The EU AI Act, explained: the deadlines that matter and an easier way to think about it
The EU AI Act is the first horizontal law for AI, and it applies by role and risk — not by sector. Here are the deadlines that matter, the penalties, and a simpler mental model for working out what applies to you.
Read - Frameworks4 min read
The ISO 27001 → SOC 2 cross-walk: 71 mappings that save 3 weeks
If you already hold ISO 27001, most of your SOC 2 evidence already exists. Here is how a 71-entry cross-walk reuses it — and where it stops.
Read - Product3 min read
Why we built one workspace for QMS + ISMS
Quality and security are run by different people in different tools — yet they share most of the same evidence. Here is why we put them on one process map.
Read - AI3 min read
AI in compliance: useful vs theatrical
A chatbot that confidently invents a control reference is theatre. Useful AI reads your real records, stays inside your permissions, and never saves without you.
Read
See it on your own frameworks
A 30-minute walkthrough on your QMS, ISMS or SOC 2 scope — no slideware, just the workspace.