Overview
Documentation for ISMS Copilot, the AI compliance assistant for SOC 2, HIPAA, NIST, CMMC, ISO 27001, GDPR, NIS 2 and more. Chat, API, agent access (MCP), and website Assistants.
ISMS Copilot is an AI assistant built for information security and compliance work. US frameworks are first-class: SOC 2, HIPAA, NIST, CMMC, and CCPA, alongside ISO 27001, GDPR, NIS 2, DORA, ISO 42001 and the EU AI Act. These docs cover the chat product and the developer surfaces that share the same compliance knowledge.
Start here
Getting started
Create an account, send your first message, and set up a workspace.
Chat
The product itself: using the assistant, skills, frameworks, prompt libraries and use cases.
Account & billing
Plans, usage limits, subscriptions and seats.
Security & compliance
How we protect your data, our safeguards, and where to find legal documents.
Build on ISMS Copilot
Three separate surfaces. Each has its own auth model and billing. Do not mix them up.
API
OpenAI-compatible completions with compliance framework knowledge. Keys and credits in the platform console.
Agents
Use your ISMS Copilot account from Claude Code, Cursor, Codex and any MCP client.
Embed (Assistants)
Put a compliance Q&A assistant on your website. Playground and install snippet in the platform console.