# Better ISMS

> Better ISMS is the company behind ISMS Copilot (compliance AI: chat, API, MCP, embed), heyGRC (compliance review for GitHub pull requests), Aevral (pull request security review: authorization, IDOR and business-logic flaws, self-serve) and a set of free directories and training. Built by an ISO 27001 consultant and an engineer. Self-funded, no investors. Better ISMS EURL, RCS Paris. ISO 27001 certification of the company is in progress (audit November 2026); not certified today. Services at fixed prices in USD: ISO 27001 internal audit 5,000, ISO 27001 on your compliance platform 10,000, ISO 27001 from zero 20,000, SOC 2 readiness 7,500; in France, ISO 27001 and HDS internal audit from 4,500 EUR excl. VAT on quote; request a proposal through the contact form; no certification guarantee. This file is a pointer index; product truth (status, retention, quotas, pricing) lives at the linked machine feeds.

## Company pages

- [Services](https://betterisms.co/services): fixed-price ISO 27001 and SOC 2 work, led by an ISO 27001 Lead Auditor
- [ISO 27001 internal audit](https://betterisms.co/services/internal-audit): independent internal audit, 5,000 USD
- [ISO 27001 on your platform](https://betterisms.co/services/iso-27001-on-your-platform): implementation inside your compliance platform, 10,000 USD
- [ISO 27001 from zero](https://betterisms.co/services/iso-27001-from-zero): platform and ISMS from nothing, 20,000 USD
- [SOC 2 readiness](https://betterisms.co/services/soc-2-readiness): readiness in Drata or Vanta, 7,500 USD
- [Audit interne ISO 27001 et HDS](https://betterisms.co/fr/audit-hds): French health-data hosts, from 4,500 EUR excl. VAT
- [Manifesto](https://betterisms.co/manifesto): what we believe and why the products exist

## Products (human pages)

- [ISMS Copilot](https://www.ismscopilot.com): the AI assistant for ISO 27001 and GRC work
- [ISMS Copilot products](https://www.ismscopilot.com/products): chat, API, agents (MCP), embed
- [heyGRC](https://heygrc.com): compliance review on GitHub pull requests
- [Aevral](https://aevral.com): catch security flaws before you merge; pull request security review, by ISMS Copilot
- [ISMS Directory](https://ismsdirectory.com): directory of ISO 27001 and GRC tools and services
- [Use AI Securely](https://useaisecurely.com): free AI literacy training

## Machine feeds

- [ISMS Copilot llms.txt](https://www.ismscopilot.com/llms.txt)
- [Connect protocol (JSON)](https://www.ismscopilot.com/api/public/connect/v1)
- [Agents product (JSON)](https://www.ismscopilot.com/api/public/agents/v1)
- [API product (JSON)](https://www.ismscopilot.com/api/public/api/v1)
- [Embed product (JSON)](https://www.ismscopilot.com/api/public/embed/v1)
- [Pricing snapshot (JSON)](https://www.ismscopilot.com/api/public/pricing/v1)
- [heyGRC changelog (JSON)](https://heygrc.com/api/public/heygrc-changelog/v1)
- [Aevral llms.txt](https://aevral.com/llms.txt)
- [Docs center llms.txt](https://docs.ismscopilot.com/llms.txt)

## Trust

- [Trust center](https://trust.ismscopilot.com): security programme, DPA, sub-processors
- [ISO 27001 programme](https://trust.ismscopilot.com/en/iso-27001): certification status with audit dates