ISMS Copilot for UK Compliance Teams
UK GDPR, Cyber Essentials, and NCSC CAF. Built for UK compliance teams.
What the UK Copilot Can Do
UK GDPR, DPA 2018, and DUA 2025 guidance: DPIAs, ROPAs, IDTA and UK Addendum transfers, ICO 72-hour breach workflow
Cyber Essentials and Cyber Essentials Plus preparation against the five technical controls (we are not a certification body)
NCSC CAF outcomes for operators of essential services and GovAssure-style assessments
ISO 27001 with UK regulatory context, including the path from Cyber Essentials to a certifiable ISMS
UK FOIA 2000 and EIR 2004 documentation for public-authority teams
Cross-mapping UK GDPR and EU GDPR so dual-jurisdiction teams run one programme with documented divergence points
About ISMS Copilot for UK Compliance Teams
ISMS Copilot for UK Compliance Teams is the specialist assistant for the frameworks UK organisations actually run after Brexit: UK GDPR and the Data Protection Act 2018, the Data (Use and Access) Act 2025, Cyber Essentials and Cyber Essentials Plus, the NCSC Cyber Assessment Framework, and ISO 27001. Draft the policies, map the controls, and prepare the audit or tender pack in one workspace.
Who it's for
UK SaaS companies
UK GDPR, DPA 2018, and Cyber Essentials for teams selling into enterprise and the public sector.
UK GDPR
Retained GDPR as amended by DPA 2018 and DUA 2025. ICO, IDTA, and the divergence points from EU GDPR.
Cyber Essentials
The five-control baseline that gates many UK central-government contracts.
NCSC CAF
Outcome-based framework used for GovAssure and operators of essential services.
Cross-framework mappings
Working across UK and another standard? ISMS Mappings is a free public directory of control maps (ISO 27001, SOC 2, NIST, GDPR, and more). A Better ISMS tool, separate from the chat assistant.
Browse free mappingsFrequently Asked Questions
Which UK frameworks does it support?
Specialist coverage for UK GDPR, the Data Protection Act 2018, the Data (Use and Access) Act 2025, Cyber Essentials, NCSC CAF, UK FOIA 2000, and UK EIR 2004, plus ISO 27001. The same workspace covers EU GDPR when you still sell into the Union.
Where is my data hosted?
Database and document storage live in Frankfurt. AI processing is your choice: Mistral in the EU with zero retention, or Anthropic in the US under standard contractual clauses. See /coverage for the full split.
Does ISMS Copilot issue Cyber Essentials certification?
No. Cyber Essentials and Cyber Essentials Plus are issued by IASME-backed certification bodies. ISMS Copilot drafts the five-control evidence pack and the Plus technical-verification checklist. A licensed certifying body still runs the assessment.
Ready to do compliance work faster?
Built for speed, accuracy, and audit-ready output.