Built for AI startups.
Integrated Sprint
For UK AI startups of up to 50 people that need ISO 27001 plus ISO 42001.
What's in the package
Six parts, delivered with you over the Sprint.
Kickoff, scope and gap assessment
We agree the standard, the scope and the timeline in a focused kickoff, then review what you already do against the standard and turn the gaps into a dated remediation roadmap.
Your compliance platform, or ours
Runs on your compliance platform if you have one, or in our UK-hosted GRC workspace at no extra subscription.
Policies and the management system, built for you
Policies, the risk assessment and the control documentation your standard asks for, written around how your company actually works rather than copied from a template.
Trust centre
A customer-facing trust centre page showing the policies and controls you choose to share, so there's one link to send when a prospect asks about your security.
Internal audit, independent of the build
The internal audit is carried out by an independent internal auditor appointed by Goldline, never by the team that built your system.
Readiness review and support through the certification audit
A written summary of where you stand and what's left, then support through the certification audit and any findings. For SOC 2: through the CPA firm's examination. The certification body or the CPA firm makes its own decision.
One legal entity, up to 50 people in scope, one site or cloud hosted.
Half at the start, half on delivery, or spread across the programme in instalments agreed on the diagnostic.
£12,500 fixed, plus VAT
How it works
- 01
Free 45-minute diagnostic.
We agree the standard, the scope and how you'd like to pay. You keep the one-page roadmap.
- 02
Audit-ready in 8 to 12 weeks.
Audit-ready in 8 to 12 weeks for a single entity with up to 50 people in scope and a named owner giving about four hours a week. Larger or multi-entity scopes typically take 12 to 24 weeks to audit-ready. The certification body then sets its own Stage 1 and Stage 2 dates. SOC 2 timing is agreed on the diagnostic.
In week 1 we request quotations and Stage 1 and Stage 2 dates from three UKAS-accredited certification bodies, so you know your audit dates early. The body sets its own dates.
Built with your named owner, about four hours a week, with Goldline directing the order and reviewing every artefact.
- How long ISO 27001 implementation takes, and when it takes longer
- What ISO 27001 costs
- All published prices
- Not sure which AI tools and systems you run? Start with the AI readiness assessment.
Goldline never sells implementation and certification to the same organisation for the same scope. The internal audit is carried out by an independent internal auditor appointed by Goldline, never by the team that built your system.
What you know before you commit
The diagnostic is free and the one-page roadmap is yours either way. The fee is confirmed in writing before work begins and does not move unless the scope changes and both sides agree in writing. A readiness service credits in full against a Sprint started within six months.