How it works
Turn your MSP’s good work into proof prospects can check.
Eight steps, from connecting your tools to keeping the Trustmark. From 2 hours a week, you set the pace, and we keep you on track.
From your first connection to a Trustmark you keep.
Three stages, eight steps. You can show prospects your progress from the first one.
- Step 1: Connect tools
Read-only. No manual exports.
On the Journey badgeOn the journey to becoming an Assurix Trusted MSPYours as soon as work starts. Add the badge to your website and email signature, and your Trustmark Directory listing shows the same status.
- Step 2: Do Launchpad
See where you stand, with answers pre-filled.
- Step 3: Get your tasks in risk order
Quick wins first, so risk falls from the start.
- Step 4: Work the tasks
Done with Assurix. Weekly check-ins keep you on track.
- Step 5: Assessment
An Assurix assessor reviews your evidence.
- Step 6: Earn the Trustmark
All 59 controls pass. There is no half Trustmark.
Assurix Trusted MSPThe Trustmark replaces the badge. Show it on your website, linked to your Trust Portal and your Directory listing.
- Step 7: Use it
Be chosen on proof, in proposals and at renewal.
- Step 8: Keep it
Live measures every six hours, and 30 days to fix a failure.
Signed up with a later start month? The Trustmark Directory lists you as Committed until work starts.
Connect the tools you already run.
No manual exports
Assurix connects read-only to your PSA, RMM, Microsoft 365 and security tools, and takes the least data possible. Most MSPs connect their PSA within 20 minutes, and we help set up the rest at onboarding.
Use a tool we don’t connect to yet? We build the connector.
Start from what you already have.
Less duplicate work
Do Launchpad
Launchpad reads your existing policies and documents, and Rosie maps them to the controls. Answers come pre-filled, each with its source.
- Current figures from your connected tools
- ISO 27001 and Cyber Essentials evidence reused where they overlap
- The questions left, grouped by who can answer them
Get your tasks in risk order
The gap report turns what is left into tasks, ordered by risk. Quick wins come first, with the hours left at your pace.
Give Rosie her starting pack
Rosie reads your documents and queries your integrations, builds your evidence picture, and queues up only the things she can’t answer for you.
- Starting packShare docs and integrations
- Rosie’s questionsAnswer what only you know
- Gap reportSee where you stand
- Policies and registersBuild your foundation
- Start your tasksPick up where Rosie left off
Connected integrations
- Microsoft 365IdentityConnected
- KnowBe4SATConnected
- ConnectWise RMMRMMConnected
- Acronis Cyber Protect CloudBackupConnected
RosieWork the tasks. You’re not doing it alone.
From 2 hours a week
You set the pace. We work through it with you and keep you on track.
- A guided task for every control, with a template ready to adapt
- Rosie reviews your evidence and drafts policies
- A named customer success person, with a weekly 30-minute check-in, on top of your 2 hours
- Fortnightly office hours
Policies
Upload, version-control, and track review dates for your security and compliance policies.
- Asset Management PolicyLive
- Backup and Recovery PolicyLive
- Change Management PolicyLive
- Data Protection PolicyLive
- Data Retention PolicyLive
Every hour you put in takes risk out.
Around 50 hours to the Trustmark in total, from 2 hours a week, and you set the pace. ISO 27001 holders typically need less, and Cyber Essentials helps.
Launchpad orders the work by risk, quick wins first, so your own risk falls from the start.
Fit it around the day jobFor comparison, Netstar, the MSP Assurix’s founder ran, spent 180 hours and £28,000 on ISO 27001 in year one.
For your technical lead
- Access
- Read-only, to your PSA, RMM, Microsoft 365 and security tools. Assurix never writes to them, and takes the least data possible.
- Hosting
- UK-hosted, every integration.
- Tools
- Most MSPs connect their PSA within 20 minutes. Use a tool we don’t connect to yet? We build the connector.
Pass the assessment. Earn the Trustmark.
Independent sign-off
Assessment
When your evidence is in, an Assurix assessor reviews it. The 40 security controls and the 19 operational controls must both pass. There is no half Trustmark.
Earn the Trustmark
An Assurix assessor signs off, then reviews your evidence every quarter and in full every year. The Trustmark replaces your On the Journey badge.
Use it.
Be chosen on proof, in proposals and at renewal
One Trust Portal link for prospects and clients, and a listing on the Trustmark Directory. Use it as soon as work starts. Until you earn the Trustmark, it shows you as on the journey to becoming an Assurix Trusted MSP.
Keep it live.
Proof stays credible
Live-measured controls are checked every six hours. The rest reopen as guided tasks: 13 controls each quarter, 1 every six months and the rest each year.
A failure opens 30 days to fix it, and the Trustmark stays live meanwhile. Leave it unfixed and the Trustmark is suspended publicly.
What if a metric dips for a day? You get an alert, and help to fix it. A person reviews exceptions, such as a client refusing an update.
“It isn’t do or die. ... There is a proper process around this, and there is opportunity to rectify anything.”
Alongside your certificates
A certificate proves a date. Assurix proves today.
Keep Cyber Essentials and ISO 27001, because clients and tenders name them. Each proves a point in time, and neither checks the service a client gets.
The rival had certificates too. Down to the last two for a 70-user deal, Sereno walked the prospect through its live results and won against a rival holding ISO 27001 and SOC 2. Not the cheapest quote.
How it works day to day
What happens in the first few weeks?
A kick-off, a platform access call and a getting-started session, where you pick your pace. We help connect your tools. Then Launchpad builds your gap report and first quick-win tasks.
Who on our team needs to be involved?
One person leads it, usually your technical lead. That’s your service desk manager, technical manager or technical director, or the owner in a smaller MSP. They connect your tools and handle most of the tasks. The framework covers how you run the business as well as your security, so a few others add evidence they usually already have. The owner or MD covers board oversight, complaints and financial resilience. Finance covers billing. HR or operations covers onboarding, leavers and training. Account managers cover QBRs, service reports and contracts. On your weekly check-in, your customer success person helps you give each task to the right person, with a due date, so nobody has to chase.
Do we need to measure client satisfaction (CSAT) before we start?
No. You’ll need to by the time you’re assessed, not on day one. We integrate with SmileBack, Customer Thermometer, Simplesat and Crewhu.
We hold patches back to test them. Does that count against us?
No. We measure critical patch compliance from your RMM. Patches held inside your testing window are not counted as missing.
Can we agree now and start later?
Yes. We take on 10 new MSPs a month, so you can agree now and book a start date that suits you. Billing starts the month you start. There’s rarely a quiet quarter in an MSP, and it starts from 2 hours a week, at the pace you set.
We’re in the middle of a PSA or RMM migration. Should we wait?
Finishing the migration first makes sense, and you can agree now to start once it’s done. Or run Assurix alongside it. It connects to the PSA, RMM and Microsoft 365 you already run, so the new setup is evidenced as it is built. Work done for ISO 27001 or Cyber Essentials is reused where it overlaps.
An MSP that promises, or one independently checked every day?
- Book a demo.30 minutes with Ollie. Mit joins the second call.
- Start in the month you pick.From 2 hours a week, quick wins first.
- Show prospects your live results.Share your link in proposals and at renewal.