ISO 27001. SMALL TEAM ENERGY.

Your ISMS.
Under control.

You don’t need a whole department.
You need a little direction.

Know what needs attention, follow practical guidance, and ask an AI assistant about your own policies, risks and records. Keep your ISMS moving alongside everything else on your plate.

An early heads-up when we launch. No spam. Privacy

Built for the person wearing one too many hats.
A LITTLE CLARITY GOES A LONG WAY
Merlin
YOUR WORKSPACE JD
Dashboard / My work
A little progress, every day.

Here’s what needs you next.

3 things to do You’re making progress
YOUR NEXT STEPSTHIS WEEK
Review your access rightsA.5.18 · Quarterly review
Today
Approve the security policyA.5.1 · Ready for your sign-off
Check supplier assessmentsA.5.19 · Annual review
✓
Awareness training recordedCompleted · Evidence attached
?

Not sure where to start?
There’s a guide on every page.

The work. And the proof.Evidence linked. One less loose end.

A glimpse of Merlin · illustrative product data

LESS TO JUGGLE.
MORE UNDER CONTROL.
A clear next step AI help, in context A rhythm you can keep

01 / A LIGHTER WAY TO RUN YOUR ISMS

For the days when
ISMS isn’t your only job.

Maybe a customer needs your certification. Maybe the next audit is getting closer. Either way, it shouldn’t take a dedicated team to keep things moving.

YOUR WORK, IN ONE PLACE
Review access rightsAccess · Needs attention
Overdue
Approve security policyDocuments · Awaiting you
Complete awareness trainingPeople · Due this week
01 — KNOW WHERE TO START

A clear next step.
Whenever you come back.

Tasks, approvals, findings and training come together in your work list. See what needs attention first, then go straight to the work.

GUIDANCE, RIGHT HERE
Understand. Then act.
01

What this means

02

What you need to do

03

What good evidence looks like

02 — FIND YOUR FEET

A little guidance.
A lot less guesswork.

Plain-language page guides explain what each part of your ISMS is for, how to use it, and the common things to look out for.

YOUR ISMS, IN RHYTHM
MTWTFSS
12131415161718
Quarterly access reviewDue this week · Assigned to you

The next review is already on your radar.

03 — KEEP IT MOVING

Keep the rhythm.
Without keeping it all in mind.

Set a schedule that fits your organisation. Recurring tasks, reminders and overdue follow-up help you keep reviews and routine checks moving.

02 / MEET YOUR AI ASSISTANT

Your ISMS has answers.
Ask Merlin.

“What needs my attention?” “What does our policy say?” Ask in your own words. Merlin can look across your records and documents to help you find the answer.

  • Your organisation’s context.Answers draw on the policies, risks and records in your ISMS.
  • Sources you can check.Document references include the code and version, so you can check the wording for yourself.
  • You make the decisions.Merlin reads the records you’re allowed to see. You review the answer and decide what happens next.
Get an early heads-up

Ask Merlin

AI ASSISTANT
YOU

What does our policy say about reviewing access rights?

MERLIN

Your access control policy calls for a quarterly review of user access rights.

System owners review whether access is still appropriate and record any changes needed.

Access control policyPOL-04 · v2.1
SOURCE

Illustrative conversation with sample policy data. Your answers depend on your records.

OTHER QUESTIONS TO ASK

“Which risks still need treatment?”

“Who hasn’t acknowledged the policy?”

03 / ONE CONNECTED SYSTEM

All the moving parts.
One place to land.

From your first risk assessment to your next management review, Merlin gives your ISMS a home—and keeps the work connected to the standard.

Get an early heads-up
01Scope, risks & controlsSET THE DIRECTION
02Policies & evidenceKEEP THE RECORD
03Tasks, reviews & trainingBUILD THE RHYTHM
04Audits, findings & actionsCLOSE THE LOOP
05Ask MerlinFIND YOUR ANSWERS

04 / SMALL TEAM. REAL RESPONSIBILITY.

A small team shouldn’t need
a big-tool budget.

Merlin is being built for the solo implementer, the busy founder, and the person who also runs IT. Practical help with ISO 27001, priced with small organisations in mind.

Pricing is still taking shape. Join the waitlist to hear first.

A FEW THINGS YOU MIGHT BE WONDERING

Good questions.
Straight answers.

Something else on your mind?

Yes. Merlin is designed for small teams and solo implementers who manage the ISMS alongside other responsibilities. Page guides, connected records and a personal work queue help you find your next step, even when you can only give it a little time.

You don’t need to have all the answers before you start. Merlin explains the purpose of its registers and the work to do in each. Your organisation still makes its own decisions about scope, risks and controls; the software helps you organise and follow through on them.

Ask Merlin about what needs attention, a risk, or what one of your policies says. The assistant can read your ISMS records and search document text, using your existing permissions. It includes document references so you can check the source. It helps you understand the work; it doesn’t change records or make decisions for you.

Merlin helps you run and document your ISMS. Certification is a separate assessment by an independent certification body. Merlin doesn’t issue certificates or guarantee an audit result.

Affordability for small organisations is central to what we’re building. We’re still working out pricing and will share it before you decide whether to use Merlin. Joining the waitlist is free and doesn’t commit you to anything.

We’ll save your email and let you know when Merlin opens for access. This isn’t an app account, and there’s no payment or immediate signup. You can ask to leave at any time through the request form.

A LITTLE LESS ON YOUR PLATE

You’ve got enough to do.
Let’s make this part easier.

Be the first to hear when Merlin is ready for you.

ISO 27001:2022 · BUILT FOR SMALL TEAMS