# Genroks - Full Site Content > Get compliant. Stay compliant. Genroks is an AI-powered compliance (GRC) platform for ISO 27001, SOC 2, GDPR and NIS 2. Genroks gets companies ready for ISO 27001, SOC 2, GDPR and NIS 2, and keeps them ready. Onboarding is a guided set of plain-language questions. When it is done, the policies are ready, reflecting the company's own processes and systems, and Genroks builds a compliance program of controls, risks and tasks with owners. Connected tools and vendors supply evidence automatically. Most teams spend a few hours a week. For companies that need ISO 27001 urgently, the Fast Track add-on gets them certified in about 10 days, two weeks at most. Website: https://www.genroks.com Contact: https://www.genroks.com/book-a-call/ --- ## The platform - Gap assessment: plain-language questions show where you stand. One answer counts toward every framework it applies to. - Policies: ready after onboarding, built on your processes, systems and tools. You review and approve them. - Evidence: collected automatically from connected tools, and requested from the right person when it can't be. - Risks and vendors: a risk register that stays current, with suggestions for risks you may have missed. - Vulnerabilities: continuous scans of domains, code and cloud, with every fix assigned. - Trust Center: a public page that shows clients you're secure, and shares documents under NDA. - Stay Compliant: a compliance calendar, reminders and monitoring between audits. ## How it works 1. Onboard: answer plain-language questions; one answer covers every framework it applies to. 2. Policies: ready after onboarding, reflecting how your company works. 3. Build: Genroks sets up your controls, risks and tasks from your compliance status, each with an owner. 4. Automate: connect your tools and vendors; evidence is collected automatically. 5. Stay compliant: monitoring, reminders and a compliance calendar. We coordinate the audit when you're ready. ## Plans - Platform: €199 per framework per month. Two frameworks: €349 per month. Three frameworks: €499 per month. Everything on the platform is included. - Fast Track (ISO 27001 add-on): our experts do the work on your platform, coordinate the certification body and attend the audit. Certified in about 10 days, two weeks at most, or your money back. Priced on request. Details: https://www.genroks.com/pricing/ --- ## Frameworks ### ISO 27001 (ISO/IEC 27001:2022) The security certification enterprise clients and tenders ask for. The world's most recognised security certification. Genroks takes you from the first question to the certificate, and keeps you there. What it asks for: - Management system: Scope, risk assessment, internal audit and management review. - Organisational controls: Policies, roles, suppliers and incident management. - People controls: Screening, training, and what happens when people join or leave. - Physical controls: Offices, equipment and secure disposal. - Technological controls: Access, encryption, backups, logging and secure development. How Genroks gets you there: 1. Assess: Plain-language questions map where you stand against every clause and control. 2. Implement: Your policies are ready after onboarding; every remaining gap becomes a task with an owner. 3. Prove: Evidence, your risk register and the Statement of Applicability build themselves as you work. 4. Certify: We coordinate an accredited certification body. With Fast Track, our experts join your audit. URL: https://www.genroks.com/iso27001/ --- ### SOC 2 (SOC 2, AICPA Trust Services Criteria) The security report US customers expect from their vendors. The security report US customers ask for. Genroks prepares your controls and evidence, and coordinates the audit with a licensed CPA firm. What it asks for: - Security: Required. Access, change management, monitoring and risk assessment. - Availability: Uptime, capacity and recovery. - Confidentiality: Protecting information marked confidential. - Processing integrity: Complete, accurate and timely processing. - Privacy: How personal information is collected, used and disposed of. How Genroks gets you there: 1. Scope: Choose the criteria your customers care about. Security is always included. 2. Implement: Close gaps with guided tasks, with your policies ready from onboarding. 3. Observe: For Type II, Genroks collects evidence continuously across the observation window. 4. Report: We coordinate a licensed CPA firm, and share the report through your Trust Center. URL: https://www.genroks.com/soc2/ --- ### GDPR (EU General Data Protection Regulation) The EU law for any company that handles personal data of people in the EU. GDPR applies to any company that handles personal data of people in the EU. Genroks turns its requirements into clear tasks, and the documents that prove you meet them. What it asks for: - Lawful basis and transparency: Why you process data, and privacy notices that say so. - Records of processing: A living record of what data you hold, where and why. - Data subject rights: Access, correction and deletion requests, answered on time. - Processors and transfers: Data processing agreements and safe transfers outside the EU. - Security and breaches: Appropriate security, and a 72-hour breach process. - Impact assessments: DPIAs for high-risk processing. How Genroks gets you there: 1. Map: Answer questions about the data you collect. Genroks builds your records of processing. 2. Document: Privacy notices, data processing agreements and a breach procedure, ready for you. 3. Operate: Handle data subject requests and vendor reviews on time, with reminders. 4. Prove: Everything a regulator or customer asks for, ready to share. URL: https://www.genroks.com/gdpr/ --- ### NIS 2 (EU Directive 2022/2555) The EU cybersecurity law for medium and large companies in 18 sectors. NIS 2 brings EU cybersecurity rules to thousands of medium and large companies across 18 sectors. Genroks shows whether you're in scope, and gets you compliant. What it asks for: - Risk management: Policies for risk analysis and information system security. - Incident handling and reporting: Early warning in 24 hours, notification in 72, final report in a month. - Business continuity: Backups, disaster recovery and crisis management. - Supply chain security: Security requirements for suppliers and service providers. - Secure development: Acquisition, development, maintenance and vulnerability handling. - Access, MFA and encryption: Access control, multi-factor authentication and cryptography. - Training and cyber hygiene: Basic practices and training, including for management. How Genroks gets you there: 1. Check scope: Find out whether you're an essential or important entity, or out of scope. 2. Assess: Measure yourself against the Article 21 measures, in plain language. 3. Implement: Close gaps with guided tasks, policies and an incident reporting process. 4. Stay ready: Monitoring, reminders and management reporting keep you compliant. URL: https://www.genroks.com/nis2/ --- ## Customers 130+ companies across Europe and beyond. 100% audit pass rate for every client taken to audit. "We had a client deadline and needed ISO 27001 fast. Genroks mapped our gaps, created the policies, and got us certified in two weeks. Now we use the platform to stay compliant." - Tony, Founder, Govin "The process was faster than we thought possible. We had our certification quickly and the whole thing required almost none of our internal time." - Stevan Radovanović, CEO, Techtonnik "We needed ISO 27001 to unlock enterprise deals. Genroks got us certified fast. The onboarding was seamless and we barely had to lift a finger." - Ivan Avramović, Founder, TopOMS --- ## About Genroks Genroks is a team of compliance experts and engineers in Belgrade. Founders: Uroš Stanimirović (Co-founder and CTO) and Blažo Sokić (Co-founder and BDM). Genroks is not a certification body. Certificates are issued by independent, accredited certification bodies (ISO 27001), and SOC 2 reports by licensed CPA firms. Genroks prepares you, coordinates the audit and keeps you compliant afterwards. --- ## Blog ### ISO 27001 Is Not the Law. GDPR Is Not a Certificate. People mix them up every day. One is a legal obligation. The other is a management framework. Confusing the two creates a false sense of security, and false security is expensive. URL: https://www.genroks.com/blog/iso-27001-vs-gdpr/ Tags: ISO 27001, GDPR, Compliance --- ### That 'Just in Case' Email Can Cost You €20 Million Keeping data you no longer need feels cautious. Under GDPR, it is a liability. No purpose means no legal basis, and stored data becomes stored risk. URL: https://www.genroks.com/blog/gdpr-data-retention/ Tags: GDPR, Data Retention, Compliance --- ### How to prepare for an ISO audit in two weeks A practical fast-track plan for teams that need to get audit-ready quickly without pulling the whole company into paperwork. URL: https://www.genroks.com/blog/how-to-prepare-for-iso-audit-in-two-weeks/ Tags: Audit Prep, ISO, Implementation --- ### ISO 27001 for B2B sales teams: why it shortens enterprise cycles ISO 27001 is not only a compliance milestone. It is often the difference between stalled procurement and faster enterprise deals. URL: https://www.genroks.com/blog/iso-27001-for-b2b-sales-teams/ Tags: ISO 27001, B2B Sales, Enterprise --- ## Case Studies ### COMIT: ISO 27001 to close a $100k+ US enterprise deal in 18 days Industry: Professional Services | Team size: 11 to 50 | Timeline: 18 days COMIT was in final negotiations with a US enterprise client on a contract worth over $100,000. The client required ISO 27001 before signing. Genroks delivered the complete documentation package in 18 days without slowing ongoing delivery. URL: https://www.genroks.com/case-studies/comit-iso-27001-fast-track/ --- ### EatingPapers team: GDPR Documentation Industry: Media | Team size: 1 to 10 | Timeline: 2 weeks A growing media team needed GDPR documentation to increase their professionalism. URL: https://www.genroks.com/case-studies/eatingpapers-gdpr-fast-track/ --- ### Nordsec: From client pressure to ISO 27001 audit-ready in four weeks Industry: Cybersecurity SaaS | Team size: 21 to 50 | Timeline: 4 weeks Nordsec needed ISO 27001 fast to unblock enterprise deals and answer client security pressure without slowing product delivery. URL: https://www.genroks.com/case-studies/nordsec-iso-27001/ --- ### Techtonnik: ISO certification to unlock enterprise deals Industry: Software Development | Team size: 11 to 50 | Timeline: 16 days Techtonnik needed ISO 27001 certification to meet enterprise client requirements and strengthen their credibility as a world-class software development agency. URL: https://www.genroks.com/case-studies/techtonnik-iso-certification/ --- ### Topoms: ISO 27001 in Two Weeks Industry: Technology | Team size: 1 to 11 | Timeline: 2 weeks Topoms needed ISO 27001 to unlock enterprise deals. Genroks completed the full certification process in just two weeks. URL: https://www.genroks.com/case-studies/topoms-iso-27001/ --- ### Govin: ISO 27001 in Three Weeks Industry: Technology | Team size: 11 to 50 | Timeline: 3 weeks Netherlands-based Govin needed ISO 27001 fast for a client requirement. Genroks delivered full certification in three weeks. URL: https://www.genroks.com/case-studies/govin-iso-27001/