Built like an audit, before any audit
MeerLock packs are written in a clean-room process — no copied vendor text, verified by construction. Every policy passes an independence check against fifty reference documents (zero non-excepted overlaps), a pack-wide consistency audit (shared defined terms, one severity scheme, no contradictory defaults anywhere), and a line-by-line traceability pass against ISO 27001:2022, SOC 2 and PCI DSS v4.0.1 — re-run at every revision. Current verification: v2.3, August 2026.
Questions, answered plainly
What is a compliance policy pack?
A compliance policy pack is a ready-to-deploy set of security policies, templates and checklists mapped to a framework such as SOC 2, ISO 27001 or PCI DSS. MeerLock packs ship with a deployment toolkit so a small team can adapt and roll them out in weeks, not quarters.
Which frameworks do MeerLock policy packs cover?
MeerLock policy packs currently cover SOC 2, ISO 27001 and PCI DSS, in four bundles from Starter to Complete. Each bundle contains the policies, a customization guide for every policy and the ISMS Toolkit of registers and runbooks that auditors expect.
How long does it take to become audit-ready with MeerLock?
A MeerLock policy pack is designed so that a small or mid-size company can deploy it in a few weeks. Full audit readiness depends on your starting point; a gap analysis turns it into a sequenced roadmap and a realistic timeline (MeerLock consulting engagements open soon).
Does MeerLock help during the audit itself?
That is what MeerLock consulting is for, and engagements open soon. They cover gap analysis, roadmap, evidence preparation and audit-day support — a consultant beside your team when the auditor arrives. Until then, tell us what you need and we will reply personally.
What is the MeerLock security awareness platform?
An upcoming SaaS for security awareness training: staff work through short videos grouped into subjects, answer questions after each that check the knowledge landed, and every completion is recorded against a person, a subject and a date. It is in development and a waitlist is open. The record-keeping half already ships: the Training & Acknowledgment Register in the MeerLock ISMS Toolkit covers PCI DSS 12.6 and SOC 2 CC1.4.