ISO 27001 platform for software and service suppliers.
Your customers send a security questionnaire or ask for ISO 27001 before they sign, and the deal waits until you answer. Naq maps your controls to ISO 27001, and a public Trust Centre shows buyers what is in place.
.png)
.png)
When the security review starts, your deal keeps moving.
The problem
Security questionnaires from the NHS and similar buyers can run to around 400 questions. The information behind the answers can take weeks to gather, and the deal stalls while your team digs it out.
The outcome
Naq fills in the questionnaire in under two minutes, from the information already held in your Naq record.
How Naq helps
Controls shown as they stand
Your Trust Centre shows a control as in place only while it is implemented.
Restricted documents on request
Buyers request restricted documents through your Trust Centre, and you approve each request.
ISO 27001 progress in view
Follow ISO 27001 requirement by requirement, and see what is covered and what still needs work.
Approved, acknowledged policies
Each policy goes out as an approved version that staff read and acknowledge. Naq reopens it on its review date.
Frameworks, scopes and controls that share evidence
Choose the frameworks you are measured against and the scope each one covers. One control meets requirements in several frameworks, so the work is done once. Evidence checks run on a schedule, and a control drops back to needs review when its evidence expires.
Policies drafted from templates, approved and acknowledged
Start from a template already mapped to your frameworks. Your organisation’s details fill in, you submit it for approval, and the approved version goes to everyone who must read and acknowledge it. Naq reopens it on its review date.
Suppliers, risks, incidents and corrective actions
Track suppliers and who has access to each one. Score every risk before and after treatment and set its review date. Log incidents with what happened, then follow each corrective action through to closed.
A Trust Centre buyers can check for themselves
Choose which controls, documents and FAQs appear on your public page. A control shows as in place only while it is implemented. Buyers request restricted documents and you approve each request.
What changes when the next review arrives.
Without one record, each review is rebuilt from shared folders and whoever answered the last one.
Virtual compliance partnerISO 27001 first, and the standards beside it.
ISO 27001
The information security standard enterprise procurement asks for first.
Cyber Essentials
The NCSC baseline, which software buyers ask for as well as public sector ones.
UK and EU GDPR
Your Article 30 record and DSAR register in one place, where your team can ask Naq Assistant about them.
A customer's own standard
Scoped with you and mapped to the controls you already hold.
Naq is licensed by IASME as a Cyber Essentials Certification Body. For Cyber Essentials Plus, you choose a Certification Body licensed to run the audit.
Naq AI analyses and suggests. Your team decides.
Nothing is written to your compliance record without a person approving it. Every suggestion is reviewed, confirmed by a named team member and timestamped, so your audit trail stays yours.
OverviewFrameworksPoliciesProcessing recordPeopleYour own DPO and CSO, or a named expert from Naq's partner network.
Some decisions need a person with their name on them: a Clinical Safety Officer signing off a hazard log, a DPO reviewing a transfer clause. Whoever holds the role records their review or sign-off inside your Naq record, so every decision stays in the audit trail.
Bring your existing DPO or CSO into Naq
Invite your in-house or outsourced specialist as a user and assign them the named role. Naq routes the reviews and approvals that need them, and their review or sign-off is recorded against the record.
Access Naq's partner network
Naq partners with specialist firms who take on the named role for you. Meet them before you commit. They work inside your Naq workspace, alongside your team.
ISO 27001, DTAC and DSPT, achieved and kept with Naq.
“Maintaining and demonstrating our credentials in the past has been onerous. The Naq platform makes the whole process remarkably seamless.”
Dr Taz Aldawoud, Founder & CEO, Doc Abode
“Naq has been instrumental in obtaining ISO 27001 certification and shortening our sales cycle by easily demonstrating our compliance to enterprise customers.”
Arnold Bouwman, Co-founder, Vormats
“Naq helped us complete our Cyber Essentials and DSPT toolkit applications. I already know next year’s DSPT Toolkit will be easy with Naq.”
Otesa, NHS supplierTalk us through the deal waiting on its security review.
A Trust Centre page and the controls behind it, in 15 minutes.
