Start with what you are actually auditing.
Define the client, audit objectives, boundaries and criteria. Work through clauses 4 to 10 and Annex A applicability with your own methodology.
A clear scope. A defensible audit trail.
Polara Enterprise · For ISO 27001 practices
Your audit practice.
Beautifully in order.
A complete workspace for ISO 27001 internal auditors.
From the first evidence request to the report you sign your name to.
€199/month per firm · unlimited client workspaces · Unlimited team members
Audit scope
Illustrative client data · Your methodology, your judgment
Audit objectivesReview ISMS implementation
Audit criteriaISO 27001 · Clauses 4 to 10 & Annex A
BoundariesProduct and engineering
Record applicability and your justification before assessing a requirement.
Interactive workflow illustration. Client names and evidence are examples.
One connected audit
Less chasing.
More considered work.
Keep evidence, review and follow-through together. Every decision stays with the practitioner.
Evidence, with its context attached.
Collect files in one engagement. AI helps triage the material, map relevant requirements and prepare cited workpaper drafts for your review.
Inspect the source. Accept, edit or reject the suggestion.
Turn observations into actions.
Record the requirement, evidence and finding. Track correction, root cause, owner, due date and corrective action through effectiveness review.
The practitioner decides the finding and its closure.
Finish with work you can stand behind.
Issue a branded internal audit report in Word or PDF. Preserve the issued record, keep corrective actions moving and carry the structure into the next audit.
A usable report. A useful next audit.
Integrated AI
A useful second pair of eyes.
You have the final say.
Move from a file to a reviewable draft with source references. Check the underlying material, resolve gaps and adopt only the work you can support.
See evidence reviewEvidence → Workpaper → Review
What supports this finding?
The source stays connected to the work. AI proposes a mapping or draft; your review supplies the judgment.
Source-grounded suggestions
Practitioner adoption and review
Findings and conclusions under your control
The practice plan
One firm. One clear price.
Invite the team. Bring your clients. Keep your audit work together.
ISO 27001 Practice
€199/month
Per firm. Monthly subscription. No annual commitment.
Create your workspaceApplicable taxes shown at checkout.
- Unlimited client workspaces
- Unlimited team members
- Scope, applicability, evidence & workpapers
- Reviewed AI, findings & corrective actions
- Branded Word and PDF internal audit reports
- Repeat audits for your existing clients
- Unlimited AI assistance
All ISO Practice features are included. No client ceiling, daily or monthly AI quota, or automatic overages. Temporary service protection can ask you to retry shortly during unusually high concurrent use.
Moving a practice over? Bring one real audit to a working session.
The practical questions.
Who is this for?
Independent ISO 27001 internal auditors and small consulting practices managing several clients. The workspace is designed around the practitioner’s work, from audit scope to the next audit.
Does Polara issue ISO certificates?
No. You issue an internal audit report through your practice. Accredited certification bodies conduct separate certification audits and make their own certification decisions.
What does AI decide?
AI helps with evidence triage, requirement mapping, cited drafts and review checks. The practitioner reviews the sources and makes every finding, conclusion and release decision. An AI suggestion is never an audit conclusion.
How many clients can we manage?
The ISO Practice plan includes unlimited client workspaces and repeat audits. Archive inactive clients to keep your workspace organized; their reports and manual follow-up remain available. Reactivate them when you are ready to resume new audit or AI work.
What happens if we cancel?
Renewal stops at the end of the paid billing period. New audits and AI then require an active subscription. Your existing manual audit work, corrective actions, history and exports remain available to authenticated team members; issued records stay locked. You can set up your firm and client workspaces before activating the plan.
Is AI included?
Unlimited AI assistance. No daily or monthly usage quota and no automatic overages. Temporary service protection may ask you to retry shortly during unusually high concurrent use. Source checking and all audit decisions stay with the practitioner.
Can we move our existing work here?
Bring portable spreadsheets, source documents, ZIP evidence or a Polara audit package. Preview the mappings and exceptions, preserve the originals and import into one selected audit at a time. Imported work needs practitioner review; prior signoffs do not become current approvals. Your own licensed standard and professional methodology remain the audit criteria.
Where is our data processed?
Enterprise uses Supabase and AWS, including AWS Bedrock for AI. We do not claim EU-only hosting or processing. Confirm the current hosting regions, subprocessors and data processing terms with us before onboarding client material with a residency requirement.
Make room for better audit work.
Your evidence, your methodology, your judgment.
One calm place to bring it together.