ISMS Copilot

ISMS Copilot vs Claude: use both for compliance

Use both. Claude does the work, ISMS Copilot is the compliance expert it consults on ISO 27001, SOC 2, and NIS 2 and has check that work, and you decide and sign. Connect the ISMS Copilot MCP server and Claude can do this without leaving the session.

Claude Code, one line, then /mcp to sign in

claude mcp add --scope user --transport http ismscopilot https://account.ismscopilot.com/v1/account/mcp

TL;DR

AspectClaude + ISMS CopilotClaude alone
Who does whatClaude runs the task; ISMS Copilot answers the compliance stepOne general model does everything
Framework answersGrounded in curated, versioned text for 150+ frameworksFrom general training; check control numbers and versions yourself
Your compliance contextYour ISMS Copilot workspaces, memories, and company context, reachable from Claude Code over MCPWhat you paste in or keep in a Claude Project
DraftsAudit-shaped policies, SoA entries, and control mappingsStrong writing you structure for the audit yourself
Claude's own contextThe specialist's framework sources and working context stay on ISMS Copilot's side; Claude reads the answer or draft it gets backFramework text, working notes, and drafts all sit in Claude's context
Auditor acceptanceA draft you still own, review, and signSame rule: auditors do not accept a chatbot dump
Data handlingThe compliance step can run under ISMS Copilot's optional Advanced Data Protection (AI only on Mistral AI in Frankfurt; off by default)Anthropic's data terms for your Claude plan
PriceYour Claude plan, plus one ISMS Copilot plan: teammates free up to 50, shared usage poolClaude Pro is $20/person. Claude Team Standard seats are $20/seat/month billed annually, 2-seat minimum (observed 2026-08-29).

What Claude does well on its own

Claude is a strong general assistant and agent: analysis, writing, reasoning, code, and running multi-step tasks. For a quick question about a control, or a first pass at a paragraph you will rewrite anyway, Claude alone is fine. Keep it for all of that.

Where a GRC specialist adds

Compliance work runs for weeks and ends in front of an auditor. ISMS Copilot answers from curated, versioned framework text for 150+ frameworks, keeps your workspaces, memories, and uploaded files between sessions, and returns audit-shaped drafts: policies, Statement of Applicability entries, control mappings, and gap analyses. It does not replace Claude's reasoning. It gives Claude a specialist to ask.

ISMS Copilot for agents →

Use both from Claude Code

Add the ISMS Copilot MCP server to Claude Code and sign in. Claude keeps running the task. When it reaches a compliance step, it opens an ISMS Copilot conversation, asks the question, and reads back the answer. With the setup rule, it also has ISMS Copilot check the text it sends before it finishes compliance work. The specialist's framework sources and working context stay on ISMS Copilot's side. Only what Claude sends and the answer or draft it returns pass through Claude's context, and that answer can itself quote framework text. Usage counts against your ISMS Copilot chat plan, with no separate agent plan. claude.ai and Claude Desktop connectors, and ChatGPT as a custom MCP app, connect to the same server by signing in and approving.

Connect ISMS Copilot to Claude Code →

What a team pays for Claude vs ISMS Copilot

USD list, pretax, United States. Observed 2026-08-29. Prices move. Our checkout and the vendor pages win if this drifts.

One person, monthly list

MeterISMS Copilot PlusClaude Pro
Monthly list$29$20

Cost to give N people access, prepaid annual

Their workspace minimum is 2 paid seats.

PeopleISMS Copilot PlusISMS Copilot StandardClaude Team, Standard seatClaude Team, Premium seat
2$290$490$480$2,400
5$290$490$1,200$6,000
10$290$490$2,400$12,000
25$290$490$6,000$30,000

This is the cost to give N people access, not equivalent throughput. On ISMS Copilot those people share one plan's 4-hour credit pool (Plus 60 credits, Standard 125) and pause at the cap. Each Claude Team Standard seat has its own included usage.

When the team's allowance runs out, the pause is the hard stop until it resets. The owner can buy extra usage or upgrade the plan to raise the pool.

Claude Team Standard seats include a usage bucket, then optional usage credits billed at API rates.

Claude Enterprise self-serve is $20 per seat per month billed annually plus usage at API rates. That is a different meter, so it is not in this table.

Illustrative. Confirm live prices before you buy.

Sources: Our pricing page · claude.com/pricing · support.claude.com/en/articles/9266767-what-is-the-team-plan

See ISMS Copilot plans →

ISMS Copilot is independent and not affiliated with or endorsed by OpenAI or Anthropic. ChatGPT and OpenAI are trademarks of OpenAI. Claude and Anthropic are trademarks of Anthropic.

More than the model

A great general-purpose AI is one part of the answer. The product layer on top (per-client workspaces, framework-by-clause coverage, audit-shaped outputs, sectoral regimes, and EU storage on AWS Frankfurt plus Advanced Data Protection for AI processing on Mistral AI in the EU) is what carries a compliance project from a single answer to a finished certification.

Frequently Asked Questions

Can I use Claude and ISMS Copilot together?

Yes, that is the setup we recommend. Claude does the work. In Claude Code, connect the ISMS Copilot MCP server, and in the Claude apps add it as a custom connector. Claude can then consult the specialist on compliance steps (policies, risk, SoA, control mapping, audit prep) and, when you ask or with the setup rule, have the work checked before it finishes. You decide and sign.

Is Claude good enough for ISO 27001 on its own?

For quick questions and first drafts, often yes. For a project an auditor will read, you still manage framework versions, SoA structure, evidence, and files yourself. That is the part the specialist carries.

Does ISMS Copilot use Claude under the hood?

It can sit on top of frontier models, including Claude. The product is the compliance workspace, framework knowledge, and audit-shaped outputs, not a raw Claude chat.

Does calling ISMS Copilot use less of my Claude usage?

It changes what Claude carries. The specialist's framework sources and working context stay on ISMS Copilot's side. Claude still sends the question and reads the answer or draft it gets back, which can itself quote framework text, so a call is not free on the Claude side. ISMS Copilot turns count against your ISMS Copilot chat plan.

Is ISMS Copilot more expensive than Claude?

For one person, Plus is $29/month, $9 above Claude Pro's $20/month list (observed 2026-08-29). For a team, Claude Team sells Standard seats from $20/seat/month billed annually (2-seat minimum). ISMS Copilot sells one plan; teammates are free up to 50 and share one usage pool. That is cost of access, not equivalent throughput. See the table on this page.

Will my auditor accept an AI-drafted SoA from Claude?

No. Auditors accept an SoA that your organization owns and can explain. An AI draft is a starting point, from Claude or from ISMS Copilot.

What about EU data residency?

Claude is provided by Anthropic, a US-headquartered company; check the data terms of the Claude plan you use. ISMS Copilot offers optional Advanced Data Protection, off by default, for the compliance work Claude sends it.

What should Claude keep doing?

Everything outside the compliance step: analysis, writing, code, and running the overall task. ISMS Copilot is the specialist Claude asks, not a replacement for Claude.

What is the best AI for ISO 27001?

A specialist grounded in the frameworks, used from the assistant or agent you already work in. See the dedicated best-AI-for-ISO-27001 comparison for the category answer.

Ready to do compliance work faster?

Built for speed, accuracy, and audit-ready output.