Introducing the ISMS Copilot platform


Hi,

You already know ISMS Copilot as the chat for GRC work.

Introducing the platform: the same knowledge, ready to ship to your customers and your products, without you standing up a training pipeline, model stack, or compliance chatbot from scratch.

One console: https://platform.ismscopilot.com

For consultants and compliance platforms: Assistants

If you advise clients, you already own the relationship. What you often lack is a way to extend support between workshops, or to capture leads with something more useful than a generic form.

If you run a compliance product, your users expect good AI inside your product. Building and maintaining that yourself means training, evals, knowledge updates, and ops you did not sign up for.

Assistants puts a compliance Q&A widget on your domain:

  • Visitors see your assistant name and brand context
  • You keep the relationship; we run models, GRC knowledge, and infrastructure
  • You do not train or host a model to offer serious ISO / SOC 2 / GDPR-style answers

Playground + snippet: https://platform.ismscopilot.com/embed
Docs: https://docs.ismscopilot.com/docs/embed

For builders: the API

If you wire agents, internal tools, or automations that must answer compliance questions well:

  • Global: Opus-level GRC quality at about 40–50% lower output cost than Claude Opus list rates (OpenAI-compatible, prepaid credits; rates live in the console)
  • EU: compliance-oriented models that stay fast, affordable, and sovereignty-friendly
  • Everywhere on this plane: Zero Data Retention on request content (prompts and model outputs not kept in our data layer; usage metadata only for billing and accounting)

Keys: https://platform.ismscopilot.com/keys
First call: https://docs.ismscopilot.com/docs/api/get-api-key
Models and regions: https://docs.ismscopilot.com/docs/api/models-and-regions

What stays the same

Chat is where you work through controls, audits, and documents.
The platform is where that capability shows up for clients, prospects, and software.

Trust Center: https://trust.ismscopilot.com

If you try Assistants or a first API call this week, reply with what was unclear. I read every reply.

Best,
Tristan
ISMS Copilot

Better ISMS

Read more from Better ISMS
ISMS Copilot and heyGRC

Hi, You know ISMS Copilot as the chat where you do ISO 27001, SOC 2 and GDPR. heyGRC is the other half of that job. It reads your pull requests and flags a compliance problem while the change is still open, not months later in front of an auditor. If you are on ISMS Copilot Standard, Pro or Business, 100 private heyGRC reviews a month are already part of your plan, on one organization. Your price does not change. Open it with the same account: https://app.heygrc.com Sign in with the same...

December 2025 edition ISMS Copilot latest updates How we made ISMS Copilot a better GRC assistant this month. ISMS Copilot 2.5 is here The biggest update since we launched the new app: Dynamic Framework Knowledge Injection. Ok, the name is a bit scary, but put it simply: When you ask about a standard or a regulation (ISO 27001, GDPR, SOC 2, HIPAA, NIS 2, DORA, CCPA, ISO 42001, or ISO 27701), the framework is automatically detected and relevant knowledge is injected into the AI before it...