Instant 27001 is delivered as a one-time (perpetual) license, for one deployment. This means, that you can install it once, on one server, for one organization. The price of the license depends on the organization’s size and structure (read more)
This page explains how we handle edge cases.
#1: “Can we use Instant 27001 across all our subsidiaries?”
A holding company can use just one license, as long as:
- All subsidiaries use the same ISMS (one scope, one risk analysis, one set of documents, one Statement of Applicability)
- The license is in the name of the holding company, and
- The holding company is the legal entity that is subject to certification
If the subsidiaries are independent organizations however, one single ISMS is often too rigid (and very complex to certify, too). You could regain flexibility by using multiple instances of the ISMS, but that would of course require a license for each subsidiary.
#2: “Can we continue to use Instant 27001 after a merger, acquisition or reorganization?”
Licenses are granted to one legal entity and are non-transferable. If your organization is acquired by another organization, you can continue to use it within the original scope. If you have acquired another organization that should also be included in the scope of the ISMS, an upgrade might be required. Contact us for the possibilities.
#3: “Can I share my policies outside my organization?”
Yes, of course. Once you adapt/adopt them, they are yours, and you are free to distribute them to any of your stakeholders (in fact, ISO 27001 even requires you to do so!).
#4: “Can I buy one license and then use it for all my clients?”
A license is limited to one legal entity and redistribution is prohibited. Consultants can use Instant 27001 together with their clients, as long as they are each individually licensed.
We run a partner program, so you could be the one selling Instant 27001 to them (and earn a healthy profit along the way!).
TL;DR
- One license is valid for one ISMS deployment
- The price of the license depends on the organization’s size and structure (read more)
- It is not allowed to resell or redistribute (parts of) Instant 27001 to other organizations, irregardless of their relationship (that includes subsidiaries, customers, partners and holdings)
- If you want to use (parts of) Instant 27001 with your clients, consider becoming our partner
- The licensing model is further described in our Terms and Conditions