Features / Standards

ISO 37001 software

Anti-bribery management. An anti-bribery system: assess bribery risk, check who you deal with, control gifts and hospitality, and give people a safe way to raise concerns.

Start your free trialSee pricingNo credit card required.

Who it’s for

Organizations that work with public officials, agents or high-risk markets, or whose customers require anti-bribery assurance.

Edition notes. ISO 37001 was revised in February 2025; certificates move to the 2025 edition by about February 2027. Because the revision is recent we show topic names, not sub-clause numbers.

What you still need

The official standard from ISO (iso.org or your national standards body), and — if you want a certificate — an accredited certification body to audit you. Total ISO helps you build, run and evidence the system; it doesn’t grant certification.

What Total ISO gives you for ISO 37001

Each requirement area below maps to a screen in the app. Your “Requirements” page shows what’s in place and what’s still to do. Coverage for ISO 37001: full requirements map with purpose-built records.

4Context and interested parties

Know the internal and external issues and the needs of interested parties that affect your system.

In the app: Relevant issues

4Scope of the system

Define the boundaries and applicability of your system.

In the app: Facilities & processes

5Roles, responsibilities and authorities

Assign and communicate who does what.

In the app: Org chart & people

5Policy

An anti-bribery policy set, communicated and maintained by top management. File it under the folder “Policy”.

In the app: Documents

Bribery risk assessment

Identify and assess the bribery risks your organization faces.

In the app: Risks & opportunities

6Objectives and planning to achieve them

Set measurable objectives with owners, resources and dates.

In the app: Objectives

7Competence and training

Decide what competence people need and keep evidence.

In the app: Training matrix

7Communication

Decide what, when, with whom and how you communicate.

In the app: Communication plan

7Documented information

Create, control and keep the documents and records the system needs.

In the app: Documents

8Operational planning and control

Plan and control the processes that deliver your product or service. File procedures under “Procedures”.

In the app: Documents

9Monitoring and measurement

Decide what to monitor, how often, and evaluate the results.

In the app: Facility inspections

9Internal audit

Audit your system at planned intervals and report the results.

In the app: Internal audits

9Management review

Top management reviews the system at planned intervals.

In the app: Management review

10Nonconformity and corrective action

React to problems, find root causes, correct, and check it worked.

In the app: Corrective actions

Due diligence

Check the people and organizations you deal with, in proportion to the risk.

In the app: Due diligence

Gifts, hospitality and donations

Control what is given and received, with approval.

In the app: Gifts & hospitality

Raising concerns

Give people a safe way to raise concerns and investigate them.

In the app: Concerns raised

Legal and other requirements

List the laws, permits and other requirements that apply and keep them current.

In the app: Compliance register

Business associates and external providers

Evaluate and control suppliers, contractors and outsourced processes.

In the app: Vendors

Working to more than one standard?

Most requirements overlap, so you enter things once. One risk register, one set of documents, one audit programme, one corrective-action process — shared by every standard you choose. Your plan includes one standard; each extra is a simple monthly add-on (see pricing) — $20/month for ISO 37001 when it isn’t your included one. Try them all free during the trial.

Mapping follows ISO 37001 (2025) as publicly described. Clause numbers appear only where we are confident of them. Standards are revised periodically; check which edition your certification body audits against. ISO is a registered mark of the International Organization for Standardization. Total ISO is not affiliated with or endorsed by ISO.