ISO 27001 vendors for Government & Public Sector
Vendors that support ISO/IEC 27001 Information Security Management and explicitly serve government & public sector customers. Each vendor’s last-checked date is shown in the table.
| Vendor | HQ | Founded | Size | Pricing | Last checked |
|---|---|---|---|---|---|
| Naaia | Louveciennes, France | 2021 | 11-50 | No public pricing tiers; demo and quote requested via website. | Sep 21, 2026 |
| PrivacyScrubber | United States | — | — | Contact for pricing | Sep 21, 2026 |
| Drata | United States | 2020 | — | GRC plans (Foundation, Advanced, Enterprise) and Assurance plans (Trust Center and questionnaires) are quoted; drata.com shows no prices. Its AWS Marketplace listing charges a $25,000 platform fee for a 100-FTE organization plus $7,500 per framework, for a 12-month contract. | Oct 15, 2026 |
About ISO 27001
ISO/IEC 27001 is the international standard for information security management systems (ISMS). It complements ISO/IEC 42001 (AI management systems) and is often held by AI governance vendors as a baseline information-security certification. Required by many enterprise procurement processes globally.
Read framework guide →About Government & Public Sector
Federal, state, and local agencies. Covered by OMB M-24-10, state AI governance orders, and procurement requirements for safety-impacting AI.
See all government & public sector vendors →