What ISO standards does PICMS support?
PICMS supports the core ISO management-system standards used by UK SMEs: ISO 9001 (quality), ISO 14001 (environmental), ISO 45001 (occupational health & safety), ISO 27001 (information security), and ISO 42001 (AI management). Specialist standards including ISO 22301 (business continuity), ISO 13485 (medical devices), ISO 14064 (greenhouse gas), and ISO 50001 (energy) are also covered on the Certification and Enterprise tiers.
Is PICMS built for UK businesses?
Yes. PICMS is designed, hosted and supported in the United Kingdom. The legal register is pre-loaded with UK statute (HSWA 1974, Environmental Permitting Regulations 2016, UK GDPR, CDM 2015, COSHH 2002, etc.). Customer data is hosted in AWS eu-west-2 (London). The platform is built by an IRCA Registered Principal Auditor with first-hand UK certification body experience.
Does PICMS support ISO 27001?
Yes — full ISO 27001:2022 coverage including the 93 Annex A controls (Statement of Applicability), risk register with 5×5 matrix, document control with version history, internal audit module, and management review with the 11 mandatory clause 9.3 inputs. Most 27001 deployments use the Professional tier (3 ISO standards, £449/month) or Certification tier (5 standards, £899/month).
Can consultants manage multiple clients on PICMS?
Yes — the Consultant Partner Programme gives you a consultant dashboard with isolated workspaces per client. Pricing is per client-book, not per user or per organisation: one flat monthly fee covers every client you manage, from £1,549/month for 1–30 clients up to £5,100/month for 101–150, and we quote individually above 150. The white-label add-on (£350/month) brands the client-facing experience as your consultancy rather than per-user, so growing your consulting team doesn't inflate the licence.
Where is PICMS customer data hosted?
All customer data is hosted in AWS eu-west-2 (London, United Kingdom). Database storage uses RDS PostgreSQL with AES-256 encryption at rest. Document storage uses S3 with AES-256 server-side encryption. AI vector embeddings use Supabase (also UK-hosted). No customer data is processed or stored outside the UK without an explicit transfer impact assessment.
Does PICMS support commercial diving compliance?
Yes — the Diving Pack covers DWR 1997 (the UK statute), HSE ACoP L103/L104 (inland + offshore), and workflows aligned with IMCA D018, D023, D040 reference areas. Diving Essentials (£199/month) is register-only entry tier; Diving Professional (£449/month) adds the project workspace, AI RAMS generator, planned maintenance, and closeout evidence pack. PICMS is independent of IMCA — not affiliated, endorsed or certified by IMCA.
Can companies start with industry packs before ISO certification?
Yes. PICMS offers four industry-starter tiers at £89-£199/month that include the compliance frameworks specific to your sector (CHAS/Constructionline/SafeContractor for construction; Cyber Essentials + ISO 27701 for cyber & privacy; CQC/DSPT for healthcare; IMCA D018 + DWR 1997 for commercial diving). You can run sector compliance without subscribing to any ISO standard, then upgrade to an ISO tier when you decide to pursue formal certification — your existing evidence migrates with you.
