The international standard for information security. Tidal Control builds and runs your ISMS, collects evidence automatically and keeps you continuously audit-ready. When you get stuck, a GRC expert is there.
Across our customers the median is 13 weeks, not a promise of “instant compliant”. Tidal shows in every phase what is expected of your team, and it does not stop at the certificate.
Week 1–2
Baseline
Set scope, run the gap analysis and start the risk register.
Week 3–8
Implementation
Fill in policies, controls and evidence using templates.
Week 9–10
Internal audit
Test yourself and run the management review.
Week 11
Stage 1 audit
Documentation review by the certification body.
Week 12–13
Stage 2 and certificate
Implementation audit and your ISO 27001 certificate.
After that
Audits and sparring
Your annual audits prepared, and a sparring partner for new threats.
Tidal maps every one of the 93 Annex A controls to the four themes of ISO 27001:2022. For each control you record policy, evidence and owner in one place, and see at a glance what is still open.
Annex A · 93 controls
71 in order22 open
37
A.5
Organisational
28 of 37 demonstrably in order
8
A.6
People
6 of 8 demonstrably in order
14
A.7
Physical
11 of 14 demonstrably in order
34
A.8
Technological
26 of 34 demonstrably in order
ISO 27001 is the international standard for information security. The certificate shows customers, partners and tendering bodies that you manage your risks demonstrably, through an Information Security Management System (ISMS). Tidal Control sets that ISMS up for you: pre-mapped controls, ready-made policies and evidence from your own tools, so you are ready for the audit.
From risk assessment to vendor management: every part of your ISMS in one place.
Risk assessment
Turn risk assessment from a time-consuming task into a guided process that helps your business grow. Our AI-powered platform learns from your company's context to help assess and manage risks - even if you're new to the process.
Risk assessment in Tidal Control
Controls management
Simplify control management with flexible, automation-ready tools that adapt to your needs. Start with our control library or build your own - either way, you'll get powerful automation, clear ownership, and real-time insights.
Controls management in Tidal Control
Policy center
Turn policy management from a complex, time-consuming task into an automated process that grows with your business. Start with our pre-written policies designed for modern companies, or import your existing documents - either way, you'll benefit from smart automation that keeps everything on track.
Policy center in Tidal Control
Vendor management
Transform supplier risk assessment from a time-consuming task into an automated process that helps your business grow. Add vendors in seconds with our vendor database that automatically fills in all important details, from privacy policies to SOC2 reports. Our intelligent system then automatically assesses risks and helps you make the right decisions.
Vendor management in Tidal Control
Issues management
Simplify issue management with a centralised system that handles everything from audit findings to improvement opportunities. Keep your team aligned and ensure nothing gets missed with clear ownership, priorities, and automated tracking.
Issues management in Tidal Control
Personnel & onboarding
The Personnel module turns employee compliance (onboarding, policy acknowledgements, role assignments) into a self-service flow for your team. No more chasing email confirmations or maintaining a separate spreadsheet of who has accepted which policy.
Personnel & onboarding in Tidal Control
AI assistant
Tidal AI helps your team move faster on the work that used to take days: risk assessments, business impact analyses, policy drafting, control mapping. And with the Model Context Protocol (MCP) integration, you can now drive your entire compliance environment from Claude, ChatGPT, Codex, or VS Code, with permissions scoped to your role.
AI assistant in Tidal Control
Integrations
Our integrations collect and evaluate evidence for you, saving you the time of preparing system reports and screenshots every time you need to run a control test.
Integrations in Tidal Control
Every industry has its own requirements and risks. See how Tidal fits ISO 27001 to your practice.
Collecting evidence
Manual
Screenshots by hand, per control
With Tidal
Automatically from your tools
Managing controls
Manual
A spreadsheet with 93 rows
With Tidal
Pre-mapped, with owners
Audit preparation
Manual
Weeks of puzzling right before the audit
With Tidal
Always audit-ready
Keeping evidence current
Manual
Lapses between audits
With Tidal
Continuous monitoring
Time to certificate
Manual
Depends on who has time for it
With Tidal
Median 13 weeks to certificate
Testimonials
With a single click, one Tidal test checks dozens of disks for encryption. Doing that manually would take a lot of time.
Explore complementary frameworks that extend your information security programme.
Sharing responsibilities with cloud providers? ISO 27017 extends ISO 27001 with cloud-specific security controls, helping you secure your cloud infrastructure.
Protecting personal data in the cloud? ISO 27018 adds cloud privacy guidance to ISO 27001, ensuring your cloud services comply with privacy regulations while processing sensitive data.
Building a privacy programme? ISO 27701 extends ISO 27001 with privacy-specific controls, helping you implement a Privacy Information Management System aligned with GDPR.
Securing healthcare data? NEN 7510 applies ISO 27001 principles to healthcare, providing sector-specific controls for protecting patient information and meeting Dutch healthcare security requirements.
Learn more about implementing and managing ISO 27001
The terms that help you on the way to your certificate.
Many ISO 27001 software focuses on filling in templates and checking off controls for the audit. That helps at the start, but provides insufficient support once processes change, risks evolve, or multiple standards must be managed simultaneously.
Effective ISO 27001 software connects risk analysis, Annex A controls, and the Statement of Applicability with daily processes and ownership. This makes it always clear which measures apply, why they were chosen, and how they are followed up.
By continuously monitoring controls and automatically capturing evidence, ISO 27001 remains current. Compliance becomes not a periodic effort, but an ongoing process that moves with the organisation and its risk profile.
An independent, accredited certification body. Tidal does not certify you itself, and that independence is what gives the certificate its weight: an auditor with no stake in the outcome tests whether your ISMS works in practice. Tidal gets you ready for that audit. Our customers have passed more than 50 audits, with 0 to 2 findings on average.
Most organisations achieve certification within 3-5 months using our platform. This includes establishing your ISMS, implementing controls, and conducting internal audits. Our pre-built content and automation tools significantly reduce the time typically needed for certification.
Yes, our platform guides you through the scoping process with templates and best practices. We help you identify relevant assets, processes, and locations to include in your ISMS scope, ensuring it's appropriate for your business while remaining manageable.
Our platform includes a risk assessment module with pre-identified risks and controls. The AI-powered system learns from your context to suggest relevant risks and controls, while automation helps you track risk treatment and reassessment over time.
Yes, we provide all required ISO 27001 documentation templates, including policies, procedures, and records. These templates are customisable to your needs while ensuring you meet all ISO 27001 documentation requirements.
We help you prepare for both Stage 1 and Stage 2 audits with pre-audit assessments and gap analysis. Our platform organises your evidence and documentation in an auditor-friendly format, making the certification process smoother.
Our platform automates many maintenance tasks including evidence collection, control testing, and review scheduling. You'll receive automated alerts for upcoming reviews, potential gaps, and required actions, helping you maintain certification with less effort.
