WHAT IS IT?
ISMS Builder is a self-hosted web platform to run an Information Security Management System (ISMS). It covers the full compliance lifecycle, from drafting policies to collecting audit evidence, across several frameworks (ISO 27001:2022, NIS2, GDPR, BSI IT-Grundschutz, EUCS, ISO 9001). The goal: give SMEs an alternative to overpriced compliance software that keeps your data on vendor servers.
WHY IS IT INTERESTING?
- Multi-framework: ISO 27001:2022, NIS2, GDPR, BSI IT-Grundschutz, EUCS and ISO 9001 in a single tool, with per-entity applicability.
- Complete modules: policies, Statement of Applicability (313 controls), risk management, assets, suppliers, business continuity, training, incident inbox and audit findings.
- Self-hosted, your data stays yours: Docker or Node.js deployment, JSON, SQLite or MariaDB/MySQL storage, no cloud dependency.
- Built-in traceability: an audit trail on every action, six-level RBAC, JWT authentication and optional TOTP 2FA.
- Multilingual + optional AI: UI in German, English, French and Dutch, with local semantic search via Ollama.
USE CASES
- Build an ISO 27001 compliance program in an SME without paying for a costly SaaS.
- Document GDPR or NIS2 compliance with an actionable audit trail.
- Let a consultant roll out an ISMS across multiple clients.
- Centralize policies, risks, assets and audit evidence for an internal IT team.