Matthew
The limitations became clear too late
Unfortunately, Secureframe proved to be a poor fit for our requirements, but this only became apparent when we came to populate the platform with our compliance information in bulk. We found that our already-audited-and-approved ISO 27001 governance and risk-management processes didn’t map well onto Secureframe templates, the templates weren't flexible enough to cover additional requirements from our auditors, and the platform didn’t adequately cover several privacy frameworks we needed. We therefore asked to negotiate an early termination. Despite explaining that we no longer intend to use the platform, Secureframe declined and is holding us to a 36-month agreement through 2028. Their team has been polite, but we’ve been disappointed by the lack of commercial flexibility. I’d recommend prospective customers thoroughly test how their existing compliance data and processes fit the platform before committing to a multi-year contract.



