Question 1

What is included in every Valiido plan?

Accepted Answer

Every plan includes AuditMagic, all ISMS policy templates, 1-Click examples, and 10+ built-in modules for risks, audits, vendors, assets, incidents, and more. You also get unlimited support by email and chat, without any ticket limits.

Question 2

What does Valiido cost?

Accepted Answer

Plans start at €149 per month, or €124 per month on a yearly plan, with 50 employees included as a flat rate. No setup fee, no consultants on the side, no per-document charges. The full breakdown is on the pricing page.

Question 3

How fast can I get started?

Accepted Answer

Instantly. After payment, you get immediate access to the full platform and can start working on your ISMS the same day.

Question 4

Which standards does Valiido support?

Accepted Answer

Valiido covers ISO® 27001 and VDA® ISA / TISAX®. All policies, examples, and modules map directly to the requirements of both standards and are kept in sync with the latest versions.

Question 5

How long does certification typically take?

Accepted Answer

Most teams using Valiido reach certification in 3 to 6 months, depending on company size, scope, and internal capacity. The structured guide takes you from setup to a passed audit, task by task.

Question 6

Do you provide ISO or TISAX® certification?

Accepted Answer

No. Valiido is software that helps you build and run your ISMS and prepare for the audit. Certification itself is issued by an accredited certification body, which we can recommend on request.

Question 7

Can TISAX® and ISO® 27001 audits be combined?

Accepted Answer

Yes. If you choose a certification body accredited for both, the audits can be performed together, which saves time and effort. Valiido is built so that one ISMS covers both standards.

Question 8

Can our team implement an ISMS on our own?

Accepted Answer

Absolutely. Valiido is designed for teams that want to run their ISMS in-house. The guided path, ready-made policies, and 1-Click examples replace the work that consultants would otherwise charge tens of thousands of euros for.

Question 9

Does Valiido cover both ISO® 27001 and TISAX®?

Accepted Answer

Yes. Every chapter, policy template, and example is mapped to the relevant ISO® 27001 controls and TISAX® questions in parallel. You implement once and the references for both standards are recorded automatically.

Question 10

Can I use Valiido for only one of the two standards?

Accepted Answer

Yes. Scope Valiido to ISO® 27001 or TISAX® alone and only the relevant chapters, controls, and policies render. Anything not in scope stays hidden.

Question 11

What happens when ISO® 27001 or TISAX® release a new version?

Accepted Answer

Valiido updates with the standard. New requirements appear as new tasks in the affected chapters, deprecated ones are marked, and your existing records get re-linked to the latest controls.

Question 12

How is the risk register different from a risk-management spreadsheet?

Accepted Answer

Every row carries a named owner, a versioned history, a calculated risk class, and the policies and tasks that treat it. A spreadsheet cell carries text. Auditors notice the difference on the first question.

Question 13

Which scoring method does Valiido use?

Accepted Answer

A 5x5 damage-by-likelihood matrix (1-5 on each axis), aligned with the most common ISO® 27001 and TISAX® implementations. The register multiplies both values and reads the risk class straight from the matrix: Low, Medium, High, or Critical. Low risks auto-accept. Everything else requires an explicit, recorded decision.

Question 14

Do I have to start from a blank register?

Accepted Answer

No. Typical example risks are pre-loaded the moment you open the module, the same ones every small ISMS encounters. You assess what is in scope, delete what is not, and add what is specific to your organisation.

Question 15

How does the register connect to the rest of the ISMS?

Accepted Answer

The register lives in the same workspace as your policies, tasks, and documents. Link a risk to the policies and tasks that treat it, and open the references from either side. The register itself implements the risk-management process ISO® 27001 and TISAX® require.

Question 16

Will my auditor accept the risk assessment from Valiido?

Accepted Answer

Yes. The register covers the risk-management lifecycle ISO® 27001 and TISAX® ask for: identification, owners, scoring, acceptance, treatment, and re-assessment, with a versioned history per risk. 98.7% of certifications run on Valiido pass on first attempt.

Question 17

How soon can I take my risk register into an audit?

Accepted Answer

Open the register, the example risks are already in place. Score them in an afternoon, link the high-risk ones to the policies that treat them, and you have an auditable register the same week. Some teams finish on a single Friday.

Question 18

Do I need to be a compliance expert to use Valiido?

Accepted Answer

No. Valiido is written for first-time ISMS owners. Every chapter starts with a short Overview in plain English, expands the norm only where it matters, and ends with a concrete Todo list. If you can follow the steps, you can run the project.

Question 19

How long does the full path to a passed audit take?

Accepted Answer

Most small and mid-sized teams reach a passed audit within 10 to 14 weeks of focused work. A single chapter is typically a single sitting; the longer ones (risk assessment, continuity) break into sub-tasks you can split across the team.

Question 20

What if my organisation does things differently from the examples?

Accepted Answer

Every example is pre-filled and ready to adapt to your organisation. Valiido tells you what to tweak, who to involve, and what to approve. The wording stays yours.

Question 21

Will my auditor accept the evidence Valiido produces?

Accepted Answer

98.7% of certifications run on Valiido pass on first attempt. Every task references the controls it satisfies and every record carries those references into the audit, so your auditor walks the same path you walked.

Question 22

Can I get help when I need it?

Accepted Answer

Yes. Every plan includes unlimited support by email and chat. Pro additionally includes an Expert Pre-Audit Review where a human expert reviews five of your documents before the audit.

ID	Risk	Category	Damage	Likelihood	Score	Status	Owner
R-001	Phishing emails targeting employees	Personnel	4/5	5/5	20 / 25	Action	LM
R-002	Unauthorized access to customer database	Data	5/5	3/5	15 / 25	Action	AB
R-003	Cloud service provider outage	Services	4/5	3/5	12 / 25	Action	MK
R-004	Physical theft of company laptops	Hardware	3/5	3/5	9 / 25	Action	MK
R-005	Insider threat from disgruntled employee	Personnel	4/5	2/5	8 / 25	Action	LM
R-006	Natural disaster affecting data center	Facilities	5/5	1/5	5 / 25	Accepted	JR
R-007	Lost office key	Buildings	2/5	2/5	4 / 25	Auto-accept	JR
R-008	Outdated emergency contact list	Documentation	1/5	3/5	3 / 25	Auto-accept	AB
R-009	Unattended print output collected late	Hardware	1/5	3/5	3 / 25	Auto-accept	MK

Score the risks. Treat them. Pass the audit.

Risks do not belong in a spreadsheet.

Every risk on one screen. Scored, owned, tracked.

Open one risk and see every decision.

Start with Valiido today.

What the register handles beyond the score.

Damage x likelihood

One owner per risk

Three decisions, in plain words

Linked to policies and tasks

Versioned history per risk

Checked weekly by AuditMagic

Risk management in four steps.

List the risks that matter

Score damage and likelihood

Plan treatment and document it

Re-assess on a schedule

What risk management usually costs.

Frequently asked questions

Keep your risk register ready for every review.

Popular insights