Compliance tools · Corporate governance, employment and financial

Toolkit for ISO 37301

ISO 37301:2021 · European Union and United Kingdom · Voluntary standard

Name anyone on your staff. The system makes them your compliance person.

A member of your own staff, with no compliance background, reads the training module, answers the interview, and finishes with your Toolkit for ISO 37301 documentation cited clause by clause. The knowledge stays in the business.

Every account level runs inside a dedicated Claude account. Anyone can try a toolkit in their own Claude account; compliance work runs in a dedicated one. The Claude Max plan is £90 a month, paid to Anthropic, and is not included in any level.

See a finished report before you pay

Toolkit for ISO 37301 is ISO 37301:2021, a voluntary standard in the European Union and United Kingdom. Compliance management systems standard. The toolkit runs alongside your own licensed copy of the ISO standard.

The free assessment screens for Toolkit for ISO 37301 when a business provides financial services or is an obliged financial entity, or employs 50 or more people, or bids for or holds public sector contracts.

Sectors this instrument reaches: financial services; regulated industries; public procurement suppliers; corporate groups and subsidiaries.

This is a voluntary standard rather than binding law. Businesses adopt it because customers, insurers or public buyers ask for it.

Screen your business against all 116 agent toolkits, free →

• Your exact position under Toolkit for ISO 37301: what is in place, what is missing, and what to do about each gap.
• Documentation with clause citations, ready for auditors, insurers, customers and public buyers.
• A trained person inside the business who understands what the standard requires, and stays.
• A dated record of every section completed, with the reports themselves staying in your own Claude account. The toolkit is carried by an account level, see the plans.
• All of it completed in-house, at your own pace, without booking a single meeting.

Check that Toolkit for ISO 37301 applies to your business, free →

Does Toolkit for ISO 37301 apply to my business?

ISO 37301 applies to you if your organisation wishes to establish, develop, operate, evaluate, maintain, or improve a compliance management system, and the triggers are financial services, regulated industries, public procurement suppliers and corporate groups. It applies to any organisation of any type, size, or sector.

Who does ISO 37301 apply to?

It applies to any organisation of any type, size, or sector worldwide, public, private, or not-for-profit. The duty holder is the organisation seeking conformity or certification, together with the governing body (Clause 3.11), top management (Clause 3.17), the compliance function (Clause 3.6), and persons performing compliance-related work.

Does Toolkit for ISO 37301 apply to a small business?

The standard has no size threshold. Clause 4.1 and the introduction state that ISO 37301 is scalable and that the size, complexity, and nature of the organisation determine the appropriate level of implementation, so an SME may scope its CMS narrowly and document it proportionately.

When does ISO 37301 apply from, and what are the deadlines?

ISO 37301:2021 was published in April 2021 and replaced ISO 19600:2014, and organisations previously operating under ISO 19600 were expected to transition within two to three years from publication as defined by their certification bodies. The standard imposes no statutory reporting deadlines; internal audits (Clause 9.2) and management reviews (Clause 9.3) run at planned intervals, with annual cycles expected by certification bodies.

What does ISO 37301 require me to do?

You must establish and maintain a compliance management system covering Clauses 4 to 10, including determining your context and compliance obligations (Clauses 4.1 to 4.5), obtaining governing body and top management commitment (Clauses 5.1, 5.2), establishing a compliance policy (Clause 5.3), designating a compliance function (Clause 5.4), and conducting compliance risk assessment (Clause 6.1).

What records or documents does ISO 37301 require me to keep or produce?

You must maintain documented information to support the CMS (Clauses 7.1 to 7.5) and keep operational control records (Clause 8.7). The compliance policy must be documented (Clause 5.3), and the compliance obligations register is established as part of CMS implementation on adoption.

What happens if I do not comply with ISO 37301?

ISO 37301 is voluntary and imposes no fines or penalties of its own. A certification body may raise a minor or major nonconformity, may decline to issue or continue the certificate for a major nonconformity, and may suspend or withdraw the certificate where major nonconformities remain unresolved or a required surveillance audit is missed.

Does Toolkit for ISO 37301 apply to a UK business selling into the EU?

The standard is international with no geographic restriction and applies worldwide, so a UK business selling into the EU falls within scope. National adoptions such as BS ISO 37301 in the United Kingdom and the DIN edition in Germany are technically identical, and IAF MLA mutual recognition means one certificate is recognised across signatory countries.

Does Toolkit for ISO 37301 apply to an EU business selling into the UK?

The standard is international with no geographic restriction and applies worldwide, so an EU business selling into the UK falls within scope. A certificate issued by an accredited body in one IAF MLA signatory country is recognised by accreditation bodies in the others, so separate certifications for different markets are not needed.

How do I start complying with ISO 37301?

The first practical step is to determine your context, including external and internal issues, interested parties, the scope of your CMS, and your compliance obligations (Clauses 4.1 to 4.5). The compliance obligations register is established as part of CMS implementation on adoption.

Which ComplianceSME account includes the Toolkit for ISO 37301 toolkit?

The Toolkit for ISO 37301 agent toolkit is included from the Medium level.

Related in corporate governance, employment and financial: CSRD · CS3D / CSDDD · EU AML Regulation · EU Taxonomy Regulation