Help centre

KhutsoGRC helps small and mid-size businesses check how ready they are for ISO/IEC 42001 (AI management) and ISO/IEC 27001 (information security). You answer plain-language questions, and we give you a score for each area plus a prioritised list of what to fix first. We don't cover POPIA: South Africa already has good POPIA tools, and we'd rather point you to those.

Most people finish in 15 to 25 minutes. Each assessment has around 30 questions, grouped into short screens by topic.

Yes. Your answers save automatically every time you pick one. Close the tab whenever you like and pick up from your dashboard.

Start with ISO/IEC 42001 if your team uses or builds AI tools, which is most businesses these days. Choose ISO/IEC 27001 if clients or tenders are asking about your information security. Many people do 42001 first, then 27001.

Pick 'Partly' if something is in place but not complete or not written down. Pick 'No' if you're really not sure, because it's safer to flag a possible gap. You can add a short note to any question to remind yourself why you answered that way.

Each 'yes' answer earns points. Your score is the points you earned divided by the total points possible. Questions about data governance and lifecycle management count 1.5 times as much as others, because gaps there usually cause the most harm. 'Partly' and 'no' answers don't earn points, but they do appear on your action checklist.

Green means 75% or higher. Amber means 40% to 74%. Red means under 40%. They're a quick guide to where to focus, not a pass or fail.

No. KhutsoGRC is a self-assessment that shows how ready you are. It isn't legal advice, an audit or a certification. For ISO certification you'll need an accredited certification body, and for legal questions about POPIA, speak to a qualified adviser.

On the Free plan you can download a sample report. It's watermarked and only shows your first three action items. Upgrade to Pro to get the full report with every action item and no watermark.

On Pro and Team plans you can re-run any assessment as often as you like. Each run is saved so you can see your score change over time on a chart, for up to 12 months.

Every new account gets 14 days of Pro for free, with no card needed. You get every assessment, full reports and history tracking.

You move to the Free plan automatically. Nothing is charged, and your answers are kept. On Free you keep access to one assessment and your on-screen score. Upgrade any time to unlock everything again.

Your paid plan starts the day you upgrade, and the first payment is taken then. If you'd rather use the whole trial, upgrade on the last day: nothing is charged until you do.

Go to Account. Depending on how you pay, you'll either get a billing portal (change plan, update card, download invoices, cancel) or a Cancel button that stops future payments straight away. Either way you keep access until the end of the period you've paid for, and you never have to email us to cancel.

The Team plan includes 5 seats. The person who buys it can invite up to 4 colleagues from the Team page. Everyone gets full Pro access, and the shared company dashboard shows every assessment run across your team.

Prices are in South African rand (ZAR), so South African cards pay no conversion fees. If your card is from another country, your bank will convert the amount.

Yes. Data is encrypted in transit and at rest, and access is restricted to your own account (and your team, if you're on the Team plan). See our Security & data handling page for details.

Go to Account and scroll to 'Delete account'. This cancels any subscription and permanently removes your answers, scores and history.

Use the 'Forgot password?' link on the log in page and we'll email you a reset link. If you signed up with Google or Microsoft, use that button instead.

Most questions are answered here. If you still need help, email our support address at the bottom of any page and we'll reply by email.