Get ENS and ISO 27001 certified without depending on a consultancy.
Less than a coffee a day, with real qualified professionals behind you when you need them. Mentor prepares it all with Lucy, an AI trained by auditors with years of audits behind them, and writes every policy, procedure and evidence exactly the way the auditor expects to see them.
✓ 6 months free on every plan · −50% for two years for companies up to 5 employees · No sales reps
If you sell to the Spanish public sector you will be asked for ENS; more and more clients require ISO 27001 to keep working with you. It is not optional: it is the ticket to the contract.
While you decide, your competitors are already getting certified. With Mentor, in 15 minutes the system is set up and the documentation has started.
What's included
Everything the audit will ask for, done
Every control explains what it asks and why it matters — in your language, not the standard's.
Documentation written by Lucy
Answer simple questions and the AI writes policies, rules and procedures ready to approve and sign — versioned and signed.
ENS and ISO 27001 with the same answers
Unique on the market: answer once and the same document serves both certificates. Two seals, one effort.
Risk analysis included
Vigía's engine inside Mentor: assets, threats, treatment and sign-off — the same analysis feeds the certification evidence.
Evidence, control by control
Inventory, incidents, training, minutes and records: each control with its evidence attached, just as the auditor will request it.
Auditors and seniors one click away
Catalogue of certified auditors for your audit and senior consultants by the hour — only when you really need them.
NIS2 and derivations
If NIS2 applies to you, it derives from what you already answered. No starting from scratch with every new standard.
Bring your auditor inside
Temporary read-only access with an expiry date: the auditor reviews your evidence inside Mentor, without ZIPs or e-mail threads. When they finish, the access dies on its own.
This simple
From zero to the audit in three steps
Tell Lucy about your company
15 minutes of jargon-free questions: what you do, what equipment you have, who does what.
Approve what the AI generates
Policies, rules, procedures and evidence, control by control. You just review and approve.
Walk into the audit all green
Pick an auditor from the catalogue and show up with complete, versioned, signed documentation.
Pricing by company size
Public prices, no small print
Every plan starts with 6 free months and activates instantly through the payment gateway. 24-month contract (ENS) or 36 (ISO 27001), monthly fee, VAT excluded.
| Size | ENS | ENS + ISO 27001 | |
|---|---|---|---|
| 2–5 employees | 24,50 € /mes | 44,50 € /mes | −50% the first 2 years |
| 6–15 employees | 79 € /mes | 129 € /mes | 6 months free |
| 16–30 employees | 109 € /mes | 179 € /mes | 6 months free |
| Start — 6 months free | |||
The traditional route
€3,000 – €12,000to get started with a consultancy, plus €2,000 – €6,000 every year in maintenance. And they set the pace.
With Mentor
€2,148/year at mostthe most expensive plan in the table, everything included — and the first 6 months are free. You start today, at your own pace.
Mentor prepares the documentation, controls and evidence. The certificate itself is always issued by an independent certification body after its audit.
Mentor gives you more
Build your pack, standard by standard
Add to your plan the standards your business needs, at €19.90/month per standard (cloud ones, €5/month). Answer once: each new standard builds on what you already answered — you never start from scratch.
Each added standard inherits your answers, your risk analysis and your evidence: only what that standard still needs gets asked.
Local AI
Your data is yours alone. Literally.
Our AI runs in our own data centre in Spain. Your inventory, your risks and everything you write are processed locally, inside that boundary — nothing is sent to third-party AI providers.
- No OpenAI, no Google, no provider on the other side of the world
- Data centre in Spain — your data never crosses a border
- Nobody trains models on your information
- When you sell compliance, you start at home
Your information does not leave the data centre: any attempt to get out bounces back.
Frequently asked questions
What everyone asks before starting
What if the auditor rejects something?
You fix it inside Mentor, control by control, with Lucy proposing the missing wording. You can also give your auditor read-only access before the real audit, and if you don't have one yet, pick one from the catalogue of certified auditors.
Is this serious or a toy AI?
Lucy is trained by active certification auditors: she knows what an auditor looks at, asks and rejects. Documents come out the way the auditor expects to see them — not generic templates with your name on top.
Where does my data end up?
In our own ENS-certified data centre in Spain. The AI runs locally: no OpenAI, no Google, no providers on the other side of the world. Nothing you write leaves that border.
I know nothing about ENS or ISO. Can I do this?
Yes — it is designed exactly for you. Lucy's interview is 15 minutes of plain-language questions about your company, and every control explains what it asks and why it matters. You just approve and sign.
What is the ENS and who must comply?
Spain's National Security Framework (RD 311/2022) is mandatory to sell services to the Spanish public sector: more and more tenders require it as an entry condition. If your client is public, sooner or later they will ask for it.
Does it also cover ISO 27001, NIS2 or continuity?
Yes. Answer once and your answers count for all your standards: ENS and ISO 27001 out of the box, plus ISO 22301, 27701, 27017, 27018 and 42001 in the pack. NIS2 is derived from what you already answered.
Questions? Write to us
No sales reps, no calls: we reply in writing within 24 working hours.
Submissions are sent via FormSubmit (USA) to info@grcgo.com. Details and your rights in the privacy policy.
By sending you accept that we process your data only to reply to you. Rights: info@grcgo.com.
Your certification starts today. Free for the first 6 months.
Fifteen minutes with Lucy and the documentation starts writing itself. No consultants, no sales reps, no surprises.