mvdmio · Compliance

One compliance system. Every framework.

Run your management system against ISO 27001, ISO 9001, ISO 14001, ISO 42001, SOC 2, GDPR, UK GDPR, the EU AI Act and Cyber Essentials — at the same time, from one set of records.

€999 / year, excl. VAT — one licence, your whole organisation. See pricing →

YOUR RECORDS ISO 27001 SOC 2 GDPR ISO 9001 AI ACT ISO 14001 ISO 42001 CYBER ESS.
crosswalkssatisfy once, cover everywhere
PoliciesRisksControlsAssetsPeople SuppliersEvidenceFindingsAudits VulnerabilitiesIncidentsContinuityTraining
01

Every register in one place

Not a folder of documents — a living management system where every record knows what it covers.

  • Policies, risks, controls, assets, evidence, audits, vulnerabilities, incidents, continuity and training — thirteen registers, one system
  • Risks sit on a 5×5 likelihood/impact matrix, with treatment actions that drive the residual score down
  • Evidence, audits and findings link straight to the requirements they prove or fail
POLICIES — illustrative RISKS — illustrative EVIDENCE — illustrative
registerspolicies · risks · evidence · 10 more
02

Frameworks that share your work

Access control satisfied ✓ A.5.15 CC6.1 Art. 32 ISO 27001SOC 2GDPR
crosswalksone requirement → three frameworks

Frameworks overlap enormously. Compliance maps that overlap for you, so adding a framework is a delta on what you've already done — not a second program.

  • Ships with ten framework catalogs: ISO 27001:2022, ISO 9001:2015, ISO 14001 (2015 and 2026 editions), ISO 42001:2023, SOC 2, Cyber Essentials, EU GDPR, UK GDPR and the EU AI Act
  • Crosswalk mappings connect matching requirements across every catalog you've adopted
  • Coverage tallies show exactly what is satisfied and what is left to do, per framework
03

An AI assistant that does the legwork

On every page, an assistant that knows your records — not a chatbot bolted on the side.

  • Ask it anything about your ISMS; it reads your actual registers, not a generic script
  • It drafts policies, files risks and updates records for you — but completing a task, cancelling one, or deleting a record always waits for your confirmation first
  • Import your existing documentation and let it map what you already have onto your registers
Which risks are still above appetite? Some have open treatment actions; two need an owner. Assign them to Sam? ✓ Confirm — assign Cancel tools: query records · update risk · draft policy destructive or terminal actions always ask first
assistantattended actions only
04

Tasks that keep you certified

Review access policy↻ yearly Test backup restore↻ scheduled Awareness training — new hiresdue soon Supplier review — hosting↻ recurring recurring cadences · owners · templates
tasksthe audit never sneaks up on you

Certification is not a project — it is a rhythm. The task layer turns every recurring obligation into scheduled, owned work.

  • Recurring reviews for policies, risks, assets and requirements, spawned automatically on schedule
  • Every task has an owner and a due date, gathered in one cross-cutting inbox
  • Templates for the ad-hoc work you repeat every cycle, on your own cadence

Plain pricing

Compliance — annual licenceincluded
Every framework catalogincluded
AI assistant & importincluded
Users in your organisationunlimited
Per year, excl. VATsee fee ↑

Ready when your auditor is.

Set up your registers this week — and walk into the audit with everything linked, current and covered.