Self-host isms-builder

This web application helps organizations build and maintain an Information Security Management System entirely on their own hardware. It addresses major European compliance frameworks including ISO 27001, the NIS2 directive, GDPR, and BSI IT-Grundschutz. Core capabilities span policy authoring with version control, a statement of applicability covering hundreds of controls across multiple standards, risk registers with treatment tracking, GDPR-specific tooling for processing records and breach timers, asset and vendor inventories, business continuity planning, staff training logs, an incident reporting portal, audit planning with checklists, and automated policy acknowledgment workflows. A built-in calendar aggregates deadlines from every module. Optional local AI search runs via Ollama without sending data externally. The interface supports five languages and a multi-entity organizational hierarchy. Deployment is straightforward with Docker Compose using a JSON file backend by default, while SQLite, MariaDB, and PostgreSQL are available as alternatives. A companion Android application enables offline work with synchronization, though it has not yet been publicly released. Development is led by a single practitioner with decades of CISO experience; the codebase is actively evolving and not yet considered feature-complete.