LorvarisCompliance operating system
Sign up

Compliance,
scored in minutes.

Connect Microsoft 365 or the tools you already run, and those controls check themselves. Answer the rest once — every answer is kept as proof for your auditor.

Start with Microsoft See how it works

Works with Microsoft 365, Azure, Entra ID, Intune and Defender — or start with no connection at all.

Fernhill Logistics

Welcome back, Tom

Here is where Fernhill Logistics stands today.

AzureConnected
Entra IDConnected
IntuneConnected
DefenderConnected
Reading AzureChecking 312 controlsScoring 4 frameworksUp to date · just now
ISO 27001
SOC 2
NIS2
UK GDPR

ISO 27001 evidence pack

  • Status and reason for every control
  • Who answered, and when
  • Attached files

Packing controls…

iso27001-evidence.zip25 controls · 41 files · 4.2 MB
Ready for your auditor

Score history

ISO 27001SOC 2NIS2UK GDPR

72%+24 pts in 6 months

What changed

  1. 112 JunAdmins enrolled in multi-factor sign-in+9
  2. 23 AugLaptop encryption drifted on 6 devices−4
  3. 32 SepBackup restore test answered+6

Example data.

12 standards

Scored from one set of evidence

Connect or answer

Two routes to every control, your choice

Read-only

Nothing in your environment is changed

ISO 27001 & 9001

The team behind it is certified to both

How it works

Before, during and after the audit.

Before

See where you stand.

Every check the standard asks for, run against what you actually have.

During

Hand over the proof.

An evidence pack for any standard, not a spreadsheet you rebuilt by hand.

After

Prove it stayed fixed.

Actions close themselves when the next check passes.

See the full product
How the data gets in

Connect it, or answer it.

Every control is answered by a person or read from a system. Which route a control takes is your choice, and it can change at any time without losing the history.

Answer it

You answer once and attach proof if you have it. Lorvaris records who answered, dates it, and counts that answer for a year.

  • Policies and training
  • Backup restore tests
  • Supplier reviews and physical security

Connect it

Lorvaris reads the setting, scores the control, and re-checks it on every scheduled run. Nothing in your environment changes.

  • Multi-factor sign-in and admin roles
  • Device encryption and patch state
  • Antivirus, EDR and backup jobs
See every connector, and how each route is scored
Your score

One number, and everything behind it.

Every control the standard asks for, whichever route it took. An auditor is never told which controls a system answered and which a person did — only the answer, the date, and who stands behind it.

Example data.

Every failure tells you who.

You are told which two accounts, not that coverage is 92%. If one is meant to be that way, exclude it with a reason and a review date.

Admins use multi-factor sign-inNon-compliant
2Exact accounts
[email protected]Last sign-in 41 days agoExclude
[email protected]Never signed inExclude

Example data.

Standards

One answer. Every standard that asks for it.

Add a standard and it is scored on the next check from evidence Lorvaris already holds.

ISO 27001Cyber EssentialsCyber Essentials PlusSOC 2UK GDPRNIS2ISO 9001PCI DSS 4.0NIST CSF 2.0DORAISO 27017Cyber Assessment Framework

Start where you are.

Connect Microsoft, connect something else, or answer your way in. All three end in a score you can put in front of an auditor.

Start with Microsoft Book a demo