A clear next step.
Whenever you come back.
Tasks, approvals, findings and training come together in your work list. See what needs attention first, then go straight to the work.
You don’t need a whole department.
You need a little direction.
Know what needs attention, follow practical guidance, and ask an AI assistant about your own policies, risks and records. Keep your ISMS moving alongside everything else on your plate.
Here’s what needs you next.
Not sure where to start?
There’s a guide on every page.
A glimpse of Merlin · illustrative product data
01 / A LIGHTER WAY TO RUN YOUR ISMS
Maybe a customer needs your certification. Maybe the next audit is getting closer. Either way, it shouldn’t take a dedicated team to keep things moving.
Tasks, approvals, findings and training come together in your work list. See what needs attention first, then go straight to the work.
Plain-language page guides explain what each part of your ISMS is for, how to use it, and the common things to look out for.
The next review is already on your radar.
Set a schedule that fits your organisation. Recurring tasks, reminders and overdue follow-up help you keep reviews and routine checks moving.
02 / MEET YOUR AI ASSISTANT
“What needs my attention?” “What does our policy say?” Ask in your own words. Merlin can look across your records and documents to help you find the answer.
What does our policy say about reviewing access rights?
Your access control policy calls for a quarterly review of user access rights.
System owners review whether access is still appropriate and record any changes needed.
Illustrative conversation with sample policy data. Your answers depend on your records.
“Which risks still need treatment?”
“Who hasn’t acknowledged the policy?”
03 / ONE CONNECTED SYSTEM
From your first risk assessment to your next management review, Merlin gives your ISMS a home—and keeps the work connected to the standard.
Get an early heads-up04 / SMALL TEAM. REAL RESPONSIBILITY.
Merlin is being built for the solo implementer, the busy founder, and the person who also runs IT. Practical help with ISO 27001, priced with small organisations in mind.
Pricing is still taking shape. Join the waitlist to hear first.Yes. Merlin is designed for small teams and solo implementers who manage the ISMS alongside other responsibilities. Page guides, connected records and a personal work queue help you find your next step, even when you can only give it a little time.
You don’t need to have all the answers before you start. Merlin explains the purpose of its registers and the work to do in each. Your organisation still makes its own decisions about scope, risks and controls; the software helps you organise and follow through on them.
Ask Merlin about what needs attention, a risk, or what one of your policies says. The assistant can read your ISMS records and search document text, using your existing permissions. It includes document references so you can check the source. It helps you understand the work; it doesn’t change records or make decisions for you.
Merlin helps you run and document your ISMS. Certification is a separate assessment by an independent certification body. Merlin doesn’t issue certificates or guarantee an audit result.
Affordability for small organisations is central to what we’re building. We’re still working out pricing and will share it before you decide whether to use Merlin. Joining the waitlist is free and doesn’t commit you to anything.
We’ll save your email and let you know when Merlin opens for access. This isn’t an app account, and there’s no payment or immediate signup. You can ask to leave at any time through the request form.
A LITTLE LESS ON YOUR PLATE
Be the first to hear when Merlin is ready for you.