ISMS
Keep information security under control.
"Show the auditor the truth. With one click."
- Controls + Measures · dual model for any standard
- Live gap analysis · status now, not in the quarterly
GRC software · One shared foundation
Less compliance administration. More control over your information security.
Kopexa connects risks, processes, controls and evidence in one shared GRC platform. For ISO 27001, NIS2, TISAX, quality management and further requirements – without maintaining information twice.
From 249 EUR/month · Hosted in Europe
One shared foundation. For teams, integrations and AI assistants.
Compliance is not a folder. It is infrastructure.
Our customers
Customer voice · ISO 27001
“I often didn’t know where to put the evidence. Now it’s: bring it on, I find the right place instantly!”
Gunnar Mentzel · Information Security Officer · CSN Solutions
Read the customer storyWhy Kopexa
SharePoint can do a lot. Management system isn't one of them.
Policies in versions. Risks across Excel tabs. Evidence in the inbox. Works fine. Until the first auditor asks how it connects.
Excel · SharePoint · emailChaos
73 files. Nobody knows which is current.
KopexaLive
Cross-mapping across all modules
Risk, control, policy, evidence, asset, and vendor in one data layer. The auditor clicks through, instead of searching.
Capture → Connect → Demonstrate
From separate lists to a shared way of working.
01
Understand what matters
Bring your risks, assets and processes together. See which business functions depend on which systems, people and suppliers.
Explore this workflow
02
Connect responsibility and action
Link tasks to risks, controls and processes. Your team sees what needs doing and can discuss the work in its context.
Explore this workflow
03
Keep evidence current
Review whether a policy is still current, independently of its version and approval. Set reviewers and review intervals so accountability stays clear.
Explore this workflow
Work with your GRC data. From your AI assistant, too.
Connect ChatGPT or Claude to Kopexa through MCP. Ask about your work instead of copying information into a chat.
Example conversation · Kopexa MCP
You ask
“Show me all open measures for the next ISO 27001 audit.”
From your Kopexa space
| Measure | Owner | Status |
|---|---|---|
| Review access rights | IT team | Open |
| Update the security policy | ISMS team | Open |
Example data. In use, the assistant retrieves current information from your selected space within your permissions.
Kopexa’s built-in AI also supports your team, for example when developing risk scenarios. Your team stays in charge of decisions.
Explore it in a demoWhere are you starting from?
Build your first ISMS
Turn requirements into responsibilities, controls and evidence.
Find your next stepModernize an existing ISMS
Connect the work that currently sits in spreadsheets, folders and tickets.
Find your next stepBring several frameworks together
Use a shared foundation rather than maintaining each standard separately.
Find your next stepThe platform
One system. For everything you manage.
Four modules, one data layer. Risk, security, quality, and documents share the same assets, policies, and evidence. No duplicate maintenance. No tool sprawl. No SharePoint as your management system.
ERM
Understand risks. Make better decisions.
"Not where it's burning. Whether you have it handled."
- Live matrix · instead of quarterly Excel
- Cross-mapping · risk ↔ control ↔ policy
- AI treatments · upside, not just damage control
QMS
Improve quality systematically.
ISO 9001 processes, document control, internal audits, CIP workflow. One tool, many management systems.
Explore this area- Processes
- Describe how your team works and who is responsible.
- Document control
- Keep approved instructions and evidence together.
- Continuous improvement
- Turn findings into tasks your team can follow through.
DMS
Control documents. Keep your evidence.
Policies and evidence versioned, approved, and acknowledged. No SharePoint chaos, no 'which version is current?'.
Explore this area- 01
Create a new version
Develop changes together before releasing them.
- 02
Review and approve
Make the approved version clear to your team.
- 03
Check it is still current
Set a reviewer and an interval, independently of version approval.
OSCAL-native
Ready for BSI C5 2026, NIS2, DORA, whatever comes next.
Agentic AI
Native AI. Not a bolted-on chatbot.
EU-sovereign
Hosted in Paris. No US cloud.
KSPEC
Open-source standard for compliance checks.
Incident management
Reporting obligations in view. Responsibilities clear.
When an incident occurs, your team needs a shared picture. Bring impact, responsibilities, recorded reporting obligations and progress together in Kopexa.
Understand the incident
Record the incident, assess its impact and link affected assets and parties.
Clarify responsibilities
Keep the owner, severity and reporting status together with the incident.
Keep the timeline visible
Review recorded reporting deadlines and the timeline from detection to resolution.
The ecosystem
Keep your tools. Bring your information together.
Cloud providers, dev tools, business apps. Ready-made frameworks. And an OSCAL builder for everything else that shows up.
Integrations
More coming
More standards. Without starting over.
Manage ISO 27001, NIS2, TISAX and further programs together. Keep progress and responsibilities in view, and connect the work to your risks, tasks and evidence.
Find your standardWhat can a shared foundation save?
Compare estimated implementation effort for different framework combinations. These model estimates are a starting point, not a guarantee for your project.
Latest case study
All case studies
CSN Solutions: Less evidence stress. More time for the actual ISMS.
- Use cases
- ISO 27001
- Evidence
- Tasks
- Industry
- IT services
Pricing
Fair pricing. No surprises.
Get started with Lite from €249 per month.
Kopexa Pro from €599 per month with unlimited users per space. Compare the plans to find the right fit for your team.
View pricingQuestions before your demo
Do we need to start over with our existing ISMS?
An existing management system is a starting point. In the demo, we can look at your policies, controls and evidence and discuss how to bring them together. CSN Solutions modernized an ISMS with more than ten years of history.
Can we work with more than one framework?
Yes. Kopexa connects frameworks through shared risks, actions and evidence. The framework calculator helps you explore possible overlaps; its estimates are not a guaranteed saving.
Is this only for information security?
Kopexa also covers risk management, quality, policies, business processes and impact analysis. Shared links let these areas work together.
What will we see in a demo?
We’ll explore workflows relevant to your team, such as connecting risks and actions, reviewing policies or understanding process dependencies. You can ask questions about your starting point and implementation.
See how your work connects in Kopexa.
Show us where your team is today. Together, we’ll explore how Kopexa can support your processes, frameworks and everyday work.
Book a demo