Launching Encor on Jun 2 — ISO/IEC 42001 readiness without the $200K consultant
Launching @encor Tuesday June 2 (12:01am Pacific Time). Solo-built. Posting a week early so the Product Hunt community sees it coming.
Pitch: ISO/IEC 42001 — the new AI Management System standard — is the first international certification your customers and regulators will ask for as AI moves from "experimental capability" to "regulated capability." Today's options: Big Four consultancy engagement ($150,000–$400,000, 9 months) or bolt 42001 onto a horizontal GRC platform like Drata or Vanta that wasn't built for it. There's no opinionated, 42001-native SaaS. So I built one.
What's in the product: versioned Statement of Applicability across all 38 Annex A controls. AI Impact Assessments structured per ISO/IEC 42005. Management-review packs auto-aggregating Clause 9.3.2's actual 5 inputs (not the 9 most consultants cite). Internal audit programme with per-clause checklists. Surveillance changelog against any baseline date. Read-only auditor portal so the Certification Body can browse live instead of wrangling a ZIP file.
The non-obvious bet: most preparation tools chase the Stage 1 documentation pass. The real certificate-loss risk is year-2 surveillance — Nonconformities sitting open past 90 days, overdue management reviews, stale policies. So Encor instruments the full 3-year certification cycle: certificate-expiry countdowns, weekly governance digest emails, Corrective Action and Preventive Action aging widgets, a "ready for your Certification Body" traffic-light indicator.
Built honest: I read ISO/IEC 42001:2023 and ISO/IEC Technical Specification 42006:2025 cover-to-cover (both purchased from the ISO Store) and validated every clause reference in the codebase against a literal "shall" in the standard. The validation pass is in the public repository.
Pricing: $999 per month, 14-day trial, no credit card required. encorsys.com
Two questions for makers here:
If you've been through ISO 27001 / SOC 2 / ISO/IEC 42001 preparation — what one thing would have saved you the most time?
If you've launched a B2B SaaS into a regulated niche on Product Hunt, what worked and what didn't on launch day?
Will reply to every comment.
Replies