A meerkat sentinel standing guard on dark rocks in front of a glowing golden digital globe, under a starry night sky

See threats first.
Protect what matters most.

Security and compliance for companies starting their journey — policies and guidance built to be used, with training on the way.

VERIFIED LINE-BY-LINE AGAINST THE FRAMEWORKS AUDITORS TEST

93/93 ISO 27001 Annex A 38/38 SOC 2 criteria 250/250 PCI DSS v4.0.1 1,781 control statements
While you sleep

The night is busy.

Phishing, ransomware, audits you're not ready for. Threats don't wait until you've hired a security team.

Meerkats solved this millions of years ago — one watches, everyone forages.

Security isn't a wall.

It's a burrow — layered, connected, alive.

Defense in depth, meerkat style

Chamber I — start here

The Armory — Policy Packs & Toolkit

Grab-and-go policy packs for SOC 2, ISO 27001 and PCI DSS — written to be used, not to gather dust. Each pack ships with templates, checklists and a deployment toolkit. Weeks, not quarters.

SOC 2 · Starter — Audit Essentials

  • 18 Core policies mapped to the Trust Services Criteria
  • All 38 criteria covered outright — a customization guide with every policy
  • ISMS Toolkit included: the registers and runbooks the auditor asks for

€129 · one-time

ISO 27001 · Professional — Full ISMS

  • 22 policies — the Core set plus the four standard extensions
  • Statement of Applicability pre-populated, risk register and treatment workbook
  • Internal audit programme and management review kit in the toolkit

€390 · one-time

PCI DSS · PCI Bundle

  • 23 policies — Professional plus the PCI DSS Compliance Policy
  • All 250 v4.0.1 requirements, with the scope confirmation workbook
  • Periodic evidence register and TPSP responsibility matrix on top

€449 · one-time

Chamber II — when you need a guide

The Guide Tunnels — Consulting

No two burrows are alike. We will walk yours with you: find the gaps, sequence the work, prepare the evidence, and stand beside you on audit day. Consulting engagements open soon — tell us what you need.

  1. 01

    Gap analysis

    Where you stand vs. where the framework needs you.

  2. 02

    Roadmap

    The work, sequenced and sized for your team.

  3. 03

    Evidence prep

    Proof collected and organised the way auditors read it.

  4. 04

    Audit day

    A guide at your side when the auditor arrives.

Illustration of two meerkats shaking hands in agreement
SaaS · in development

The Nursery — Security awareness, the meerkat way

Meerkat pups are taught on purpose: an adult brings the lesson, stays to watch, and sees whether it took. We are building awareness training on the same principle — short videos grouped into subjects, questions after each that check the knowledge landed, and a dated record of who completed what.

STEP 1

Watch

Short videos, grouped into subjects — what a risk looks like, and what to do about it.

STEP 2

Answer

Questions after each one, to check the knowledge landed. Attendance is not assessment.

STEP 3

Record

Who completed which subjects, and when — the dated record an auditor asks for.

We use your email only to tell you when it launches. Privacy notice.

Sealed — for now

More chambers being dug.

The colony never stops expanding. Follow along to see what surfaces next.

Occasional email about new MeerLock products. Unsubscribe any time by replying 'remove me'. Privacy notice.

The other exit

From night watch to daybreak.

Every company starts in the dark. MeerLock is built so you can leave it with policies in place, evidence in order, ready for your audit — and a sentinel always on duty.

1,781
Verified control statements
93/93
ISO 27001 Annex A controls covered
24
Toolkit artifacts in every pack
27 with the PCI Bundle and Complete
— the Meerkat Spirit

Ready to start your journey?

Pick a policy pack, or tell us where you are on the road to your first audit.

We use your details only to answer you. Privacy notice.

We read every message and reply personally.

Built like an audit, before any audit

MeerLock packs are written in a clean-room process — no copied vendor text, verified by construction. Every policy passes an independence check against fifty reference documents (zero non-excepted overlaps), a pack-wide consistency audit (shared defined terms, one severity scheme, no contradictory defaults anywhere), and a line-by-line traceability pass against ISO 27001:2022, SOC 2 and PCI DSS v4.0.1 — re-run at every revision. Current verification: v2.3, August 2026.

Questions, answered plainly

What is a compliance policy pack?

A compliance policy pack is a ready-to-deploy set of security policies, templates and checklists mapped to a framework such as SOC 2, ISO 27001 or PCI DSS. MeerLock packs ship with a deployment toolkit so a small team can adapt and roll them out in weeks, not quarters.

Which frameworks do MeerLock policy packs cover?

MeerLock policy packs currently cover SOC 2, ISO 27001 and PCI DSS, in four bundles from Starter to Complete. Each bundle contains the policies, a customization guide for every policy and the ISMS Toolkit of registers and runbooks that auditors expect.

How long does it take to become audit-ready with MeerLock?

A MeerLock policy pack is designed so that a small or mid-size company can deploy it in a few weeks. Full audit readiness depends on your starting point; a gap analysis turns it into a sequenced roadmap and a realistic timeline (MeerLock consulting engagements open soon).

Does MeerLock help during the audit itself?

That is what MeerLock consulting is for, and engagements open soon. They cover gap analysis, roadmap, evidence preparation and audit-day support — a consultant beside your team when the auditor arrives. Until then, tell us what you need and we will reply personally.

What is the MeerLock security awareness platform?

An upcoming SaaS for security awareness training: staff work through short videos grouped into subjects, answer questions after each that check the knowledge landed, and every completion is recorded against a person, a subject and a date. It is in development and a waitlist is open. The record-keeping half already ships: the Training & Acknowledgment Register in the MeerLock ISMS Toolkit covers PCI DSS 12.6 and SOC 2 CC1.4.