Run your ISO/IEC 42001 engagements on Encor.
Stop running 42001 engagements in Notion, SharePoint, and PowerPoint. Encor's consultancy edition gives you multi-tenant client workspaces, reusable methodology templates, and audit-ready evidence binders — so you spend your time on senior judgment and client relationships, not template drafting.
Pilot includes 3 client workspaces free for 30 days · No card required
The pitch in one paragraph.
Encor pre-drafts every artefact ISO/IEC 42001:2023 requires — policies, Statement of Applicability, per-AI-system risk registers, AI Impact Assessments (per ISO/IEC 42005), management-review packs, internal audit programmes, and Stage 2 operating evidence. We do the blank-page work that eats the first 60% of every engagement. You do the strategy, the executive workshops, the bespoke risk judgment, the audit-readiness sign-off. The work clients actually pay you for.
Most consultancies see engagement timelines compress from 6–9 months to 6–10 weeks, with senior-time freed up by ~40%. The bill rate doesn't drop — your throughput does.
What's in the consultancy edition.
Built on top of the same core platform direct customers use, with consultancy-specific surfaces.
Every client gets an isolated workspace with its own AIMS, AI systems, risk register, and evidence. Row-level security keeps data fully separated — no accidental cross-client visibility.
Switch between the consultancy hub and any active client engagement from the top-bar menu. Your team sees all managed clients without per-client membership setup.
Save your preferred AI Policy, SoA stance, risk taxonomy, and impact-assessment structure as templates. Clone them into a new client workspace in under two minutes.
Generate a 30-day expiring claim link. Client matches their email, becomes workspace owner, and pays direct from then on. Optionally stay on as a member for surveillance-audit support.
Generate a ZIP bundle of every artefact, register, impact assessment, and uploaded evidence file — pre-flight verified for empty placeholders before export.
Postgres row-level security enforces that consultant A's clients are invisible to consultant B. SOC 2 controls and IDOR-tested at every API endpoint.
How a 42001 engagement runs on Encor.
- 1Spin up the client workspace
From the consultancy dashboard, create the client workspace (optionally cloning from one of your methodology templates). Onboarding questionnaire takes 15 minutes.
- 2Generate the first-draft AIMS
Encor pre-drafts the AI Policy, AIMS scope, roles, objectives, Statement of Applicability (all 38 Annex A controls with justifications), per-system risk register, and AI Impact Assessments. You review and adjust.
- 3Run the gap workshops
Schedule executive workshops, role training, internal audit dry runs — the senior work clients pay you for. Encor surfaces the audit-readiness scorecard so you know exactly what's left.
- 4Stage 1 → Stage 2 evidence accumulation
Use the operating-evidence registers (audits, management reviews, nonconformities, incidents, supplier reviews, change logs) to capture Stage 2 evidence over the 3–6 month window.
- 5Hand off cleanly
At engagement close, generate a claim link. Client claims it, takes ownership, starts paying for the seat directly. You either fully detach or stay on for surveillance audits.
Client handoff in one click.
When the engagement wraps, you generate a 30-day claim link from the client's workspace. The client claims it with a matching email, becomes the workspace owner, and starts paying for the seat directly — billing flips automatically. You can either fully detach or stay on as a member for ongoing surveillance-audit support.
No data export. No PowerPoint hand-off binder. No "where did we save the SoA again?" The workspace just transfers.
Partner pricing.
Pricing models we're piloting with first partners: per-client-seat, flat annual partner license, or a referral-style model where clients pay direct and you earn recurring commission. We'll fit the model to your engagement economics.
- First 3 client workspaces free for 30 days
- Unlimited methodology templates
- Token-based client handoff (no extra cost)
- Direct line to the founder for product feedback + roadmap input
ISO/IEC 17021 prohibits the same firm from both implementing and auditing the same client. Encor's consultancy edition is built for implementer firms (you help clients prepare). If you're a certification body or a lead auditor at a CB, contact us about the auditor edition we're scoping for late 2026 — evidence review, audit findings tracking, conformity assessments.
Ready to talk?
We're onboarding the first 10 partner firms now. 20-minute intro call, no slides, no pitch deck — we want to hear where your current toolchain hurts most in a 42001 engagement.