Packages and prices
ISO/IEC 27001 pilot (founding)
EUR 1,490 for year 1. Year 2 onward: EUR 1,490 per year.
What the package includes:
| Item | Description |
|---|---|
| Document package | 33–47 documents for companies of 10 to 25 people, most of them 1–3 pages; language of your choice: Bosnian, Croatian, Serbian (Latin or Cyrillic script) or English (for Croatian and English the date is in the pro-forma invoice) |
| DNS/TLS evidence | passive check of your domain's public DNS and TLS data, as evidence in the package |
| Documentation review report | Lead Auditor findings per clause and per document |
| Stage 1 readiness report | issued only after you pass the maturity gate (at least about 3 months of records of the system in operation, an internal audit and a management review). Until then you receive the report "Review before the audit: findings". |
Internal audit (clause 9.2). Before Stage 2 you must have an internal audit done. We can offer it as a separate line on the pro-forma invoice; it is performed by an auditor who did not review your package.
Fallback delivery (part of the offer and terms, before the pro-forma invoice)
If we notify you in writing that we are stopping development of the Normalius platform, or if the platform is not available by 1 Mar 2027, the pilot still receives:
- the complete template package (DOCX);
- the documentation review report;
- the readiness report, after you pass the maturity gate (until then: "Review before the audit: findings");
- 12 months of template updates by e-mail.
No refunds are given. Our liability is limited to the amount you paid in 12 months, except for damage caused intentionally or by gross negligence (details in the Terms).
The full path to certification (honest, with all costs)
Normalius, pilot
EUR 1,490 (year 1)
Certification body, Stage 1 + Stage 2
ESTIMATE EUR 3,000–8,000 for companies of 10 to 50 people
Your internal work
ESTIMATE 80–200 h
Time
ESTIMATE 4–6 months
Choice of certification body
your choice
Realistic sequence (ESTIMATE): documentation drafts in about 2 weeks from the completed questionnaire; then at least about 3 months of records of the system in operation, an internal audit (clause 9.2) and a management review (clause 9.3) before the readiness report and Stage 2; certification realistically in 4–6 months. The audit outcome depends on the certification body and on your work.