🏗️ ConformEdge — AI-Powered ISO Compliance Management

Product Overview

ConformEdge is an AI-powered ISO compliance management SaaS platform built by ISU Technologies. It serves South African construction, infrastructure, mining, and manufacturing companies — as well as ISO consulting firms — with an intelligent, multi-tenant platform that transforms how organisations achieve, maintain, and demonstrate ISO certification compliance.

ConformEdge combines the power of artificial intelligence with deep domain expertise in quality, safety, environmental, and information security standards to deliver a platform that is architecturally unique in the global market.

The core problem: 55% of organisations lose their ISO certification within the first year due to documentation gaps, missed deadlines, and manual tracking failures. The downstream cost is devastating: CIDB grading downgrades, OHS Act penalties (up to R50,000 per offence), DMRE Section 54 stoppages (R500K-R2M/day), lost government tenders, and BBBEE verification lapses. These aren’t caused by negligence — they’re caused by fragmented systems that can’t connect what’s due, when it’s due, and what happens if it’s missed. ConformEdge eliminates this risk through compliance intelligence: automated monitoring, AI-driven gap analysis, proactive deadline tracking, and cross-standard awareness that surfaces risks before they become penalties.

🎯 What Makes ConformEdge Different

AI-First Compliance — Upload any document and Claude AI instantly classifies it against ISO clauses with confidence scores. No manual tagging required.
7 ISO Standards, One Platform — ISO 9001, 14001, 45001, 27001, 22301, 37001, and 39001 with 49 top-level clauses and 187 sub-clauses pre-loaded.
IMS Intelligence Engine — Proprietary Union-Find equivalence grouping maps ~441 cross-references across standards, delivering integration scoring, gap cascades, and shared requirements analysis.
Multi-Tenant by Design — ISO consultants manage multiple client organisations from a single account. No competitor offers this for quality/SHEQ standards.
South African Native — ZAR pricing, Paystack payments, SA-hosted infrastructure, local market focus.
Subcontractor Self-Service — Token-based portal for subcontractors to upload and renew certifications. No login required. No competitor has this.
Audit-Ready at All Times — Real-time gap analysis, automated document expiry tracking, and one-click audit pack generation mean you are always prepared for surveillance audits.

🚀 Key Features

AI Document Classification

Upload any document — PDF, Word, scanned image — and ConformEdge’s AI engine (powered by Anthropic Claude Haiku) automatically:

Maps the document to relevant ISO clauses
Assigns confidence scores per clause
Detects gaps in your compliance coverage
Falls back to Google Cloud Vision OCR for scanned/handwritten documents

Real-Time Gap Analysis

A live dashboard showing compliance coverage percentages per standard, per clause. Instantly see where your documentation is strong and where critical gaps exist. Coverage below 25% triggers automatic notifications to responsible parties.

Integrated Management System (IMS) Engine

The only platform with a Union-Find equivalence grouping algorithm that:

Maps equivalent requirements across all 7 standards
Calculates integration scores showing how well your IMS is functioning
Cascades gap closures — fixing one gap can resolve related gaps across standards
Generates a shared requirements matrix for auditor presentation

Document Management

Full lifecycle document control with:

Version history and change tracking
Sequential approval workflows (configurable chains)
Expiry date tracking with automated notifications
Cloudflare R2 cloud storage (zero egress fees)
Bulk upload and bulk AI classification

Assessment Management

Schedule and conduct internal audits and management reviews with:

Calendar view (month grid + list)
Assessor assignment with notifications
Status derivation (Draft → Scheduled → In Progress → Completed/Overdue)
Finding capture linked to specific clauses

CAPA Management

Corrective and Preventive Actions with:

Cross-standard linking via junction table
Auto-escalation (priority bumps after 7 days overdue)
Root cause analysis tracking
Evidence attachment

Compliance Checklists

Customisable checklists with 5 field types:

Compliance — standard compliant/non-compliant toggle
Boolean — yes/no switches
Number — numeric input with min/max/unit validation
Rating — star rating (1-5)
Select — dropdown from custom options

Supports recurring schedules (weekly, monthly, quarterly, annually, custom interval) with automatic generation.

Audit Pack Generation

One-click PDF audit packs compiled from your documents, assessments, CAPAs, and checklists. Delivered via email using Resend. Perfect for surveillance audit preparation.

Subcontractor Management

Track subcontractor certifications with:

Self-service portal (token-based, no account needed)
Certificate upload and renewal
Admin review workflow (approve/reject)
Expiry tracking and notifications

Client Portal

Share compliance status with external stakeholders via:

Token-based secure links (SHA-256 hashed, shown once)
Read-only document access, audit packs, and portal views
Access audit logging with view counts
Automatic expiry management

Reports & Analytics

9 chart types powered by Recharts with CSV and PDF export. Coverage trends, gap analysis summaries, CAPA aging reports, assessment completion rates, and more.

Role-Based Access Control

5 roles with granular permissions:

Role	Permissions
Owner	Full platform access, billing, org settings
Admin	All features, user management, approvals
Manager	Create/edit documents, assessments, CAPAs
Auditor	View all, create assessments and findings
Viewer	Read-only access to all data

Notifications

13 notification types delivered via in-app alerts and email (Resend):

Document expiry warnings
Approval requests and decisions
Assessment scheduling and overdue alerts
CAPA escalations
Subcontractor certificate uploads
Low coverage gap alerts
Checklist due dates

In-App Help

Contextual help panels on all 14 dashboard pages with feature summaries, usage tips, and expandable guidance sections.

🎯 Target Market

Primary: ISO Consulting Firms

200-400+ firms in South Africa
Manage 5-50+ client organisations each
Need multi-tenant visibility and reporting
ConformEdge’s multi-org architecture is purpose-built for this segment

Secondary: Construction & Infrastructure

Grade 5-9 CIDB contractors requiring ISO 9001 + 14001 + 45001
Subcontractor management is critical (dozens to hundreds of subs)
IMS engine handles the multi-standard integration they need
Audit pack generation streamlines surveillance audits

Tertiary: Mining, Manufacturing & IT

Mining services firms needing ISO 45001 for DMRE compliance
Manufacturers pursuing ISO 9001 + 14001 for tender requirements
IT companies needing ISO 27001 for enterprise clients
Any organisation managing ISO standards seriously

💰 Pricing Overview

All prices in South African Rand (ZAR), inclusive of VAT.

Plan	Monthly	Users	Standards	Documents	AI Credits/mo
Starter	R699	5	2	500	50
Professional	R1,999	15	7	Unlimited	200
Business	R4,499	50	Unlimited + Custom	Unlimited	500
Enterprise	Custom	Unlimited	Unlimited	Unlimited	Unlimited

Annual billing: Pay 10 months, get 12 (~17% discount)
AI Credit Top-Ups: 100 for R15 | 500 for R65 | 1,000 for R120 (never expire)
14-day free trial with 100 onboarding AI credits

See Pricing & Investment Options for full details.

🏆 Competitive Advantage

What It Replaces

Current Approach	Pain Points	Penalty Risk
Spreadsheets & shared drives	No traceability, version chaos, no gap visibility	Missed deadlines → fines, lost tenders
Email-based approvals	Lost threads, no audit trail, no accountability	Untracked expiry → compliance lapse
Manual subcontractor tracking	Expired certs go unnoticed, liability risk	DMRE stoppages, OHS penalties
Consultant-only management	Expensive (R80K-R500K/yr), no client self-service	Gaps between visits → surprise findings
Generic document management	No ISO intelligence, no clause mapping	No deadline awareness → silent decay
Calendar/reminder tools	Deadlines tracked but zero context	No gap analysis, no cross-standard impact
InfoSec-only platforms (Vanta, Drata)	Don’t cover quality/SHEQ standards at all	Blind to 9001/14001/45001 deadlines

What ConformEdge Provides

Capability	Benefit
AI classification	90%+ accuracy, seconds not hours
Real-time gap analysis	Always know your audit readiness
IMS cross-standard mapping	One fix resolves gaps across multiple standards
Multi-tenant architecture	Consultants manage all clients from one platform
Subcontractor self-service	Eliminate manual cert chasing
Automated monitoring	Never miss an expiry or deadline

🔧 Technical Architecture

Component	Technology
Frontend	Next.js 15 (App Router) + TypeScript
Styling	Tailwind CSS v4 + shadcn/ui (new-york)
Authentication	Clerk (multi-tenant organisations + RBAC)
Database	PostgreSQL + Prisma 7 ORM
AI Engine	Anthropic Claude Haiku
OCR	Google Cloud Vision
File Storage	Cloudflare R2 (S3-compatible)
PDF Generation	@react-pdf/renderer
Charts	Recharts
Email	Resend
Payments	Paystack
Hosting	Hetzner VPS (South Africa-accessible)
CI/CD	GitHub Actions
Process Manager	PM2

Database

25+ Prisma models
UUID primary keys throughout
Multi-tenant data isolation (all queries scoped to organisation)
Full audit trail on all mutations

Security

Clerk authentication with webhook sync
5-tier RBAC enforced at server action level
SHA-256 token hashing for external access
Path traversal guards on file access
Atomic database transactions for critical operations
Organisation-scoped R2 storage keys

📋 Use Cases

ISO Consulting Firm

A consulting firm managing 20 client organisations uses ConformEdge to:

Onboard each client as a separate Clerk organisation
Bulk-upload existing documentation with AI classification
Monitor gap analysis dashboards across all clients
Generate audit packs before surveillance audits
Share compliance status via client portals

Result: 60% reduction in administrative overhead, zero missed audit deadlines.

→ Full Use Case: ISO Consulting Firm

Construction Company

A Grade 7 CIDB contractor maintaining ISO 9001 + 14001 + 45001:

Uses IMS engine to manage integrated requirements
Tracks 40+ subcontractor certifications via self-service portal
Schedules quarterly internal audits with assessor assignment
Generates audit packs for annual surveillance audits

Result: Maintained triple certification for 3 consecutive years with 70% less manual effort.

→ Full Use Case: Construction Company

Mining Services Firm

A mining services company with 200 employees needing ISO 45001:

Uploads safety documentation and AI maps to OH&S clauses
Tracks subcontractor safety certifications with expiry alerts
Runs recurring safety checklists across multiple sites
Demonstrates DMRE compliance with real-time gap analysis

Result: Achieved ISO 45001 certification in 4 months, passed first surveillance audit with zero non-conformities.

→ Full Use Case: Mining Company

📊 Success Metrics

Metric	Target
Time to initial gap analysis	< 1 hour (vs 2-4 weeks manual)
Document classification accuracy	90%+
Certification retention rate	95%+ (vs industry 45%)
Audit preparation time	80% reduction
Subcontractor cert compliance	100% visibility
Consultant client capacity	2-3x increase
Annual cost vs consultants	85-95% savings

📚 Documentation

Document	Description
Product Brief	2-page executive summary
Technical Whitepaper	Deep architecture and AI engine details
Competitive Positioning	Market analysis and feature comparisons
Demo Script	45-minute guided demonstration
Objection Handling	Comprehensive Q&A for sales conversations
Implementation Roadmap	4-week onboarding timeline
Pricing & Investment	Full pricing details and ROI analysis

🔗 Quick Links

Product Website: conformedge.com
Platform: app.conformedge.com
Support: support@isutech.co.za
Sales: nhlanhla@isutech.co.za

ConformEdge is a product of ISU Technologies (Pty) Ltd. Built in South Africa, for South African businesses.