How search works at ISMS Directory

1. Data we use

We initially created the ISMS Directory database ourselves, listing compliance providers along with details like company name, standards they cover (ISO 27001, SOC 2, GDPR, etc.), regions they serve, target company sizes, key features, supported languages, and direct links. This database gets updated every quarter based on new information submitted by users.

For AI agents: structured catalog search

External agents should use the public catalog search API for exact multi-filter lookup (frameworks are ANDed). This is separate from the optional homepage Ask AI assistant, which gives short NL recommendations and is not a full filter engine. Demand-ranked shortlists live on /best and /best.txt, not on the catalog search API.

GET https://ismsdirectory.com/api/search?framework=iso-27001&framework=dora&region=germany&service_type=consulting
GET https://ismsdirectory.com/llms.txt
GET https://ismsdirectory.com/.well-known/llms.txt

Region filters mean service coverage listed on the vendor card, not verified headquarters.

2. How search works

1. You type what you need: a name, a framework like ISO 27001 or SOC 2, a region, an industry, or a problem to solve.
2. We match your words against every provider's name, summary, frameworks, regions, industries, and the problems they solve.
3. Matching is typo-tolerant and ranked by relevance, so the closest providers come first.
4. The standard directory search runs in your browser over our curated list; those search terms are never sent to us or any third party. The separately labelled AI search processes your messages as described in our privacy policy.

3. Why we rotate broad results

When lots of providers fit a broad search (like just “ISO 27001”), we gently rotate the closely-matched ones so smaller providers get noticed too, instead of the same big names always on top. The optional AI is likewise told to lead with well-matching lesser-known providers and re-reads the list in a different order each day. For specific searches, results stay in strict relevance order.

4. Why use ISMS Directory instead of Google

Google Google gives you too many irrelevant results, you can't say exactly what you need, and ads make sure you see whoever pays the most.

ISMS Directory ISMS Directory gives clear, focused results over a hand-picked list. We don't favour one product over another (not even our own, ISMS Copilot), any company can submit, and there's no "pay more to rank higher." The most you can pay is $200 to be reviewed faster, and a paid listing is never ranked above a free one once it's in. That's how we designed search: to be fair.

5. We're not live

Our information isn't real-time. Providers change prices and services often. Always confirm details directly on their website.

We don't claim to "know everything" about a service, beyond the problems they solve, the regions covered, the frameworks we know they cover, and the languages supported.