Free readiness scan

See your ISO 27001 gap in 5 minutes.

Connect your M365 tenant and get a gap report showing which controls you already evidence and where to start.

Read-only access
No data stored
Launches Q3 2026
  • Read-only scan permissions
  • No data leaves your tenant
  • Built on Microsoft Power Platform

Sample output

What your readiness snapshot looks like.

You get a clear control coverage baseline and a practical starting point for your certification work.

CertAria Readiness Scan
Example result — ISO 27001 Annex A coverage
A.5 Organisational Controls 8/12
A.6 People Controls 3/8
A.7 Physical Controls 2/8
A.8 Technological Controls 15/25
28
controls evidenced
53
in scope
53%
coverage

Example scan result — your numbers will depend on your M365 configuration.

Transparency

Here's exactly what we'll access -- and what we won't.

Device.Read.All

Device management policies

This reads which devices are managed by Intune and what policies apply. It doesn't change any device settings.

Policy.Read.All

Security configuration

This reads your Conditional Access policies and security defaults. It doesn't modify any security settings.

InformationProtectionPolicy.Read

Sensitivity labels

This reads whether sensitivity labels are configured for documents and emails. It doesn't read document content.

AuditLog.Read.All

Audit log settings

This checks whether unified audit logging is enabled. It doesn't read individual audit entries.

The scan runs in your browser. No data is stored on our servers. All permissions are read-only.

The scan checks setup, not your business content.

Graph scopes are limited to security configuration metadata and policy state.

You get a credible readiness baseline without exposing customer or document content.

Early access

Be first to run your scan.

We'll email you once — when the scan is live. No newsletter. No follow-up sequence.

We'll email you once when the scan launches. See our privacy policy.

When the scan launches: connect your M365 tenant (2 minutes) → receive your gap report (3 minutes) → decide if CertAria is right for you (your pace, no pressure).