A compliance AI assistant inside your platform
https://embed.ismscopilot.com/loader.js
Give your users an AI that actually knows compliance, without building one. One script tag, your assistant name, our engine. Free tier: 100 replies a month, no card.
Floating bubble, one script tag
<script src="https://embed.ismscopilot.com/loader.js"></script>
<script>
IsmsCopilotEmbed.init({
partnerId: "<your-partner-id>",
publicKey: "<public-key-from-console>"
});
</script>Two ways to mount it
- 01
Floating bubble
The snippet above. Bottom right by default; position: "left" moves it.
- 02
Inline panel
Give the target a definite height. The panel fills it.
<div id="isms-embed" style="height: 480px"></div> <script src="https://embed.ismscopilot.com/loader.js"></script> <script> IsmsCopilotEmbed.init({ partnerId: "<your-partner-id>", publicKey: "<public-key-from-console>", layout: "inline", target: "#isms-embed" }); </script>
Auth
- Public key
- pk_live_... from the console
- Allowed origins
- Exact-origin domain allowlist per assistant
- Sessions
- Short-lived, minted server-side on load
- Identified users
- Partner-signed HS256 JWT, kid-based, 24-hour maximum lifetime (advanced path)
Theming
Fourteen allowlisted CSS variables. The assistant name is server-owned and set in the console, not in the snippet.
- --ic-bg, --ic-fg, --ic-muted, --ic-border
Surface and text colours
- --ic-accent, --ic-accent-fg
Buttons and highlights
- --ic-user-bubble, --ic-assistant-bubble
Message bubbles
- --ic-header-bg, --ic-composer-bg
Header and composer
- --ic-radius, --ic-font, --ic-shadow
Shape, typeface, elevation
Plans
The console is the source of truth for the paid ladder.
- Free
- 100 AI replies per calendar month, hard stop, no card, one assistant
- Paid
- EUR reply pools from Entry to Scale, Enterprise on request, 14-day trial with card. Ladder at platform.ismscopilot.com/pricing
- EU processing
- Growth and above
Data and retention
- Public path
- Sliding 30-day expiry after last activity, then daily purge
- Identified path
- No automatic TTL until you delete or offboard
- Isolation
- Per partner. No access to other partners' end users.
- Terms
- Embed terms, DPA and subprocessors on trust.ismscopilot.com
Honest limits
- Multi-turn while the widget is open; no visitor-side history sidebar, no reload resume
- Partners read conversations in the console inbox
- One widget instance per page; call destroy() before re-initialising in a single-page app
- The Powered by ISMS Copilot footer shows on all tiers today; automatic removal on Growth and above ships with the removal release
- Not a full white-label chat product
Live example
Our own company site, betterisms.co, runs the floating bubble in production. Open it, ask it something about ISO 27001. No customer installs are named here.
betterisms.co →Full white label
Selling a compliance AI under your own brand is a partner program we are still scoping with early partners. It is not self-serve today. If that is you, join the waitlist and we will get in touch.
Join the white label waitlist →Status: live
Create an assistant at platform.ismscopilot.com/embed, allowlist your domain, paste the snippet. Machine summary: GET /api/public/embed/v1.
Frequently Asked Questions
Do my users need an ISMS Copilot account?
No. The widget runs on your public key and your domain allowlist. For identified users you can mint a JWT from your backend.
What does it cost?
Free tier: 100 AI replies per calendar month, no card. Paid plans are EUR reply pools with a 14-day trial; the ladder is in the console.
Can I rebrand it fully?
You set the assistant name, colours, radius and typeface. Full white label is a partner program in scoping, not self-serve; see the waitlist above.
Where is data processed?
Global by default; EU processing on Growth and above. Retention differs by path: public sessions expire after 30 days of inactivity, identified sessions stay until you delete them.
Put the specialist on your site
Create an assistant, allowlist your domain, paste one script tag. The free tier needs no card.