SIS-licensed ISO clauses and controls·an add-on inside the AI clients and agents you already use
    ISO security standards · Licensed from SIS

    Put SIS-licensed ISO clauses inside the assessment.

    Ansvar serves selected clause and control text from the 27001/27002/27005 information-security family, 42001 for AI management, and ISO/SAE 21434 for road vehicles. The text is licensed from SIS, delivered to your entitled AI client, and attributed to the source standard so it can support a cited finding.

    How it works

    Available now · Licensed from SIS · An optional per-seat add-on subscription, from €99 per standard per month · Usage guide

    Licensed from SIS

    A licence agreement with the Swedish Institute for Standards

    SIS is the Swedish member of ISO and CEN, and the owner and copyright holder of the standards it publishes. Ansvar is a licensed supplier, not the owner: under a licence agreement with SIS, Ansvar reproduces selected parts of the licensed standards for its customers. Those clauses can become traceable evidence inside a supported assessment.

    Selected parts only — the complete standards are not reproduced here. Buy the full text from SIS at sis.se.

    The entitlement applies to the person or machine identity using the service. The selected text is delivered to the third-party AI client your team already uses and remains subject to the add-on terms.

    How it works

    Put licensed clauses inside the evidence chain

    A supported assessment can retrieve the selected clause it needs, attribute it to SIS, and cite it beside law and customer evidence. The complete standard remains a separate SIS product.

    01

    Resolve the relevant clause

    Each licensed standard is held as addressable clause- and control-level segments. A supported workflow can request the specific segment needed for an assessment.

    02

    Use the licensed text as evidence

    The gateway returns selected source text in the same citation shape used for law and other served evidence. The assessment can reason from the clause instead of relying on model memory.

    03

    Carry attribution into the result

    Every response carries the SIS attribution and exact product designation. A cited finding can be traced to the source standard, with a link to buy the complete text from SIS.

    The citation envelope delivered to your connected AI client. Licensed control text is left out of this public page:

    one served control, on the wire
    { "standard": "SS-EN ISO/IEC 27001:2023",
      "clause": "A.5.7", "title": "‹ control title ›",
      "text": "‹ control text served to your AI client ›",
      "_citation": {
        "publisher": "SIS — Swedish Institute for Standards",
        "license": "SIS reproduction licence",
        "source_url": "https://www.sis.se",
        "notice": "Reproduced with permission from SIS — buy the complete standard at sis.se" } }

    The full SIS copyright notice accompanies each clause served to logged-in customers:

    This text has been reproduced from Standard SS-EN ISO/IEC 27001:2023 with the due permission for Ansvar Systems AB from the Swedish Institute for Standards, which is the owner and copyright holder of the Standard and also sells the complete Standard at www.sis.se, Tel: +46 (0)8 555 523 10.

    One tier note: cross-referencing standards against your own policies and documents (upload, paragraph-level citations) is a Team-tier capability — the add-on itself serves standards text to any entitled seat holder. See pricing.

    What's covered

    Licensed standards available now

    The current set covers information security, AI management systems, and road-vehicle cybersecurity. Ask about another SIS-published standard; it must clear licensing and verification before it is served.

    SS-EN ISO/IEC 27001:2023

    Information security management systems — Requirements

    The requirements an ISMS is certified against. Your AI client cites the exact clause behind each obligation in a gap analysis or audit-readiness review.

    SS-EN ISO/IEC 27002:2022

    Information security controls

    The control set — guidance for selecting and implementing the Annex A controls. Findings in a threat model or control mapping resolve to the control text they rely on.

    SS-EN ISO/IEC 27005:2024

    Guidance on managing information security risks

    The risk process behind the ISMS — context, assessment, and treatment. Risk registers and assessments cite the guidance they follow instead of restating it from memory.

    SS-EN ISO/IEC 42001:2026

    Artificial intelligence management system — Requirements

    The AI management system requirements — the anchor standard for AI-governance and AI Act readiness work. Findings cite the exact clause they rest on.

    SS-ISO/SAE 21434:2021

    Road vehicles — Cybersecurity engineering

    Cybersecurity engineering for road vehicles across the lifecycle. TARA and type-approval work cites the engineering requirements directly.

    The standards listed above are live today. You can request another ISO, European, or Swedish standard SIS publishes. Each request must clear licensing and verification before Ansvar exposes it.

    What's served, and what isn't

    The entitlement has a clear boundary

    The licence permits Ansvar to serve selected parts used in the work. It does not transfer the complete standard or redistribution rights.

    What you get

    • Selected clause and control text — the parts your workflow cites
    • Served to your AI client through the gateway
    • Each response attributed to the source standard, SIS-credited
    • Available as cited evidence inside supported assessments

    What it is not

    • Not owned by Ansvar — SIS holds the copyright; Ansvar supplies it under licence
    • Not a reproduction of the complete standard
    • Not downloadable, printable, or redistributable
    • Not a substitute for buying the standard from SIS
    Works with your agent

    Give your agent rules for using licensed standards

    The open agent skill instructs a compatible assistant to fetch entitled clauses, include the SIS notice, disclose unevaluated scope, and avoid answering standards questions from memory.

    The sequence: install the iso-standards-expert skill, connect the Ansvar Gateway connector, sign in (a free account is enough), and subscribe to the standards you need. Works in Claude, Claude Code, and other MCP-capable clients that accept standing instructions; without an add-on the skill runs in a clearly labelled SCF cross-reference lane.

    FAQ

    The questions buyers ask first

    What's covered, what's served, how it's licensed, and when you can use it.

    Cite ISO standards through your AI client

    The SIS-licensed standards module is an additional subscription. Tell us how your team would use SS-EN ISO/IEC 27001:2023 and its siblings, and we'll line up access.

    Licensed from SIS · An optional add-on subscription — talk to us.