ISO4 is the automated compliance platform that guides schools and small organisations to ISO 27001 and ISO 42001 certification — then keeps them there, continuously. World-class security and AI governance, at a fraction of the consultant cost.
Built in Australia · Our CEO led the first Australian school to ISO 27001 — and the first school in the world certified to ISO 42001
ISO 27001 is the world's leading standard for information security management. ISO 42001 is its counterpart for the responsible use of AI. But for schools and small organisations, the traditional path to certification is broken in three ways.
Traditional certification relies on specialist consultants at $200–$400 an hour, across 6–18 months of engagement. For schools and SMBs, that's simply out of reach.
Even after certification, organisations drift out of compliance. Annual surveillance audits reveal the gaps — and the expensive cycle of remediation starts again.
The standard is dense and technical. Without in-house expertise, organisations are entirely dependent on external advisors to interpret requirements and assess gaps.
The global benchmark for information security management. Certification tells parents, boards, insurers and clients that student records, staff files and financial data are governed by verified, audited controls — not good intentions.
AI is already in your classrooms, your admin office and your inbox. ISO 42001 — the world's first AI management system standard — certifies that your organisation uses AI safely, transparently and accountably. The same guided ISO4 journey takes you there.
ISO4 replaces the consultant playbook with a product: plain-language guidance, automated evidence, and a compliance posture you can see in real time.
Step-by-step workflows translate ISO 27001 and ISO 42001 clauses and controls into plain-language tasks, tailored to your organisation's context.
Integrations with the tools you already run — Microsoft 365, cloud platforms, RMM systems — continuously gather and map evidence against controls.
Always-on posture assessment flags drift before it becomes a finding — moving you from periodic audit panic to sustained readiness.
From first login to certificate — and beyond — in five clear stages.
See exactly where you stand against ISO 27001, in plain language.
Generate tailored policies and assign controls with guided tasks.
Connect your systems and let evidence collect itself, continuously.
Walk into your certification audit prepared — with everything mapped.
Continuous monitoring keeps you audit-ready all year round.
ISO 4 Schools is the first platform purpose-built to guide Australian and New Zealand schools through ISO 27001 and ISO 42001 certification — from gap analysis to audit, with continuous compliance built in.
We're onboarding a small cohort of early-adopter schools and personally guiding each one through its certification journey — while the platform does the heavy lifting.
We price on the value delivered — certification achieved and maintained — not on features consumed. Plans scale from guided gap analysis through to always-on continuous compliance.
Consultants charge $200–$400 an hour, month after month. ISO4 starts at $5,000 a year — a school on the platform typically spends less annually than a consultant charges in a fortnight, and it pays for itself within the first year of certification.
Typical point-in-time consulting engagements run 6–18 months at $200–$400/hour, with ongoing retainers to maintain certification. ISO4 replaces that with software — guided, automated, and continuous. Detailed tier pricing is available when you talk to us.
ISO 27001 has historically been the domain of large enterprises with deep pockets and dedicated compliance teams. We believe every organisation — regardless of size, budget or technical maturity — deserves access to world-class information security governance.
To make ISO 27001 and other compliance certifications accessible, affordable and continuous for every organisation — replacing expensive consultants with intelligent software that guides, automates and sustains certification.
Our CEO, Andrew Hottes, led the first school in Australia to achieve ISO 27001 certification — and then the first school in the world to be certified to ISO 42001, the world's first AI management standard. That experience — the governance, the IT realities, the audits themselves — is embedded directly into the ISO4 platform methodology. This isn't theory; it's a proven playbook, turned into software so every school can follow it.
Led the first Australian school to ISO 27001 and the first school in the world certified to ISO 42001. Personally guides our early customers through certification while building the methodology into the platform.
Product vision and strategy, go-to-market, and partnerships across the education sector.
Operations, governance, legal and financial compliance — making sure we hold ourselves to the standards we help others achieve.
Join the ISO 4 Schools beta, ask about ISO 27001 or ISO 42001 for your organisation, or just find out where you stand with a guided gap analysis. We'd love to talk.