Compliance tools · Corporate governance, employment and financial

Toolkit for ISO 37001

ISO 37001:2025 · European Union and United Kingdom · Voluntary standard

Name anyone on your staff. The system makes them your compliance person.

A member of your own staff, with no compliance background, reads the training module, answers the interview, and finishes with your Toolkit for ISO 37001 documentation cited clause by clause. The knowledge stays in the business.

Every account level runs inside a dedicated Claude account. Anyone can try a toolkit in their own Claude account; compliance work runs in a dedicated one. The Claude Max plan is £90 a month, paid to Anthropic, and is not included in any level.

See a finished report before you pay

Toolkit for ISO 37001 is ISO 37001:2025, a voluntary standard in the European Union and United Kingdom. Anti-bribery management systems. Supports Bribery Act adequate procedures. The toolkit runs alongside your own licensed copy of the ISO standard.

The free assessment screens for Toolkit for ISO 37001 when a business bids for or holds public sector contracts, or imports goods, or carries out construction or building work.

Sectors this instrument reaches: construction; defence; extractives and energy; pharmaceuticals; public procurement suppliers; international trade.

This is a voluntary standard rather than binding law. Businesses adopt it because customers, insurers or public buyers ask for it.

Screen your business against all 116 agent toolkits, free →

• Your exact position under Toolkit for ISO 37001: what is in place, what is missing, and what to do about each gap.
• Documentation with clause citations, ready for auditors, insurers, customers and public buyers.
• A trained person inside the business who understands what the standard requires, and stays.
• A dated record of every section completed, with the reports themselves staying in your own Claude account. The toolkit is carried by an account level, see the plans.
• All of it completed in-house, at your own pace, without booking a single meeting.

Check that Toolkit for ISO 37001 applies to your business, free →

Does Toolkit for ISO 37001 apply to my business?

ISO 37001 applies to any organisation, whatever its type, size, sector or jurisdiction, that wishes to set up, run, maintain, review and improve an anti-bribery management system (Clause 1). Public contracts, imports and construction are the activities that bring a business to this toolkit.

Who does ISO 37001 apply to?

It applies to organisations and their personnel, business associates and controlled entities (Clause 1). It covers public, private and not-for-profit bodies alike, and it is sector-agnostic.

Does Toolkit for ISO 37001 apply to a small business?

There is no size threshold and no size exemption. The standard is designed to be scalable and proportionate to organisational size and complexity, so an SME can apply a simplified system suited to its bribery risks (Annex A, Clause A.1).

When does ISO 37001 apply from, and what are the deadlines?

The standard sets no statutory reporting deadlines. Certification runs as a two-stage initial audit, surveillance audits at annual or biannual intervals, and a full recertification every three years, with internal audits at planned intervals (Clause 9.2) and management reviews at planned intervals (Clause 9.3).

What does ISO 37001 require me to do?

You must build and run an anti-bribery management system across Clauses 4 to 10: bribery risk assessment (Clause 4.5), an anti-bribery policy (Clause 5.2), an appointed compliance function (Clause 5.3), operational controls including due diligence (Clause 8.2), and monitoring, internal audit and management review (Clauses 9.2 and 9.3).

What records or documents does ISO 37001 require me to keep or produce?

You must keep documented information for the management system (Clause 7), conduct and record bribery risk assessments (Clause 4.5), keep due diligence records on business associates before and during the relationship (Clause 8.2), and report internal audit results to management (Clause 9.2).

What happens if I do not comply with ISO 37001?

ISO is not a regulator and imposes no fines. Nonconformity works through the certification system: a major nonconformity can stop a certificate being issued or continued, unresolved major nonconformities or a missed surveillance audit can lead to suspension, and persistent nonconformity leads to withdrawal.

Does Toolkit for ISO 37001 apply to a UK business selling into the EU?

The standard is international with no geographic restriction, and national adoptions such as BS ISO 37001 are technically identical. A UK business selling into the EU can use one certification, because the IAF Multilateral Recognition Arrangement means organisations do not need separate certifications for different markets.

Does Toolkit for ISO 37001 apply to an EU business selling into the UK?

The standard applies worldwide with no geographic restriction, and an EU business selling into the UK can rely on a certificate issued by an accredited body in its own country, since the IAF Multilateral Recognition Arrangement covers all signatory countries.

How is ISO 37001 different from ISO 37301?

ISO 37301 is the compliance management system standard, and the difference that matters most is that an anti-bribery management system may be a subset of a broader compliance management system, with both sharing the ISO High Level Structure so documented information, audit programmes and management reviews can be integrated (Introduction; Clause 4).

How do I start complying with ISO 37001?

The first practical step is the bribery risk assessment required by Clause 4.5, which must consider organisational size, structure, locations, sectors, business associates and the jurisdictions in which the organisation operates.

Which ComplianceSME account includes the Toolkit for ISO 37001 toolkit?

The Toolkit for ISO 37001 agent toolkit is included in Compliance Complete.

Related in corporate governance, employment and financial: CSRD · CS3D / CSDDD · EU AML Regulation · EU Taxonomy Regulation