Skip to content
Phalanx
roRequest a quote
Menu+

For companies that have to prove compliance

A management system that is alive, not filed away.

Start with external site scans or the package your requirements call for. Compliance modules keep documents and evidence for audit. Add Monitoring when you need alerts and agents.

ISO 27001: standard requirements and implementation status.
The risk register: likelihood, impact and a scored rating, with the treatment and the owner.

Policies

Draft ISO policies in the platform.

ISO 27001 and ISO 9001 have separate standard pages. Policy text is available in Policies, where a person reviews and approves it before it goes live.

Gap analysis

Know what exists, what is missing, and what you cannot prove.

Three states, not two. The difference between a policy that does not exist and one that exists but shows no sign of being practised is exactly what an auditor asks about.

Guided interview

No documentation at all? Then you answer questions.

Answer questions about your company’s processes. When AI is available, help explains the question in Romanian and suggests whom to ask. It does not supply your answer. A person approves the resulting policy.

Registers

The registers have their own place in the menu.

Risks, Suppliers, Vulnerabilities and Business continuity have dedicated pages. IT operations groups changes and access with certificates and backup. Legal and GDPR holds legal requirements and data processing.

Cases

From alert to audit evidence without leaving the app.

With Monitoring, an alert can become a case. The case keeps the investigation timeline and can be attached as audit evidence when the organisation has access to the audit report.

NIS2

Track incident deadlines and obligations towards DNSC.

The incident register tracks reporting deadlines. A separate DNSC obligations card shows each step’s status and calculates deadlines from the dates you record.

Post incident report

Every closed case leaves a report behind, not a memory.

Root cause, impact, affected systems, corrective actions, lessons learned. The draft fills itself from the case rather than from a blank form, and exports as a signable document.

Audit log

Who changed what, and when. With no way to rewrite it.

Document creation, editing and approval land in an append only log.

Which audit is in front of you?

Tell us which standard or regime obliges you and where the documentation stands today. We will come back with what the platform covers of it and what is left to do by hand.

Request a quote