Q-Hub
£245/month
Essentials — up to 3 full and 50 basic users
- Implementation included — no setup fee
- Live in about four weeks
- 30-day trial, no card
Comparison
Q-Hub vs ISMS.online
ISMS.online is built around information security — ISO 27001 first, with other standards available as optional extras. Q-Hub is built around operational QHSE. If your compliance started with 27001 and has grown, the question is whether you want QHSE added to an infosec platform or infosec added to a QHSE one.
Compliance Report · Q1 2026Export PDF
Compliance 94% +3.2
Open NCRs 12 -5
On-time close 88% +6.1
Overdue 3 -2
Compliance trend
Compliance by site
The short answer
Read this and you may not need the rest of the page.
Choose ISMS.online if…
Information security is the centre of your compliance. You need ISO 27001, SOC 2, NIS 2, DORA or GDPR, and you want pre-built policy content and a guided method to certification.
Choose Q-Hub if…
Your compliance is operational — incidents on site, audits in the field, CAPA, controlled documents, training — across ISO 9001, 45001 and 14001.
Choose neither if…
You need deep coverage of both. An infosec platform with QHSE bolted on, and a QHSE platform with infosec bolted on, are both compromises.
At a glance
Every row is checkable. The ISMS.online column reflects what they publish on their own plans page. Source: isms.online/pricing, read 21 September 2026.
Scroll to compare
| Feature | ISMS.online | Q-Hub |
|---|---|---|
| What each covers | ||
Built for EvidenceTheir plans page leads with ISO 27001 and offers further standards as optional extras. Source · checked 2026-09-21 | Information security and compliance frameworks | Operational quality, health, safety and environment |
ISO 9001, 45001 and 14001 EvidenceTheir plans page lists ISO 9001, ISO 14001 and ISO 45001 among "Additional standards" under Optional Extras. Source · checked 2026-09-21 | Available as optional additional standards | Included as the core system |
Mobile incident and near-miss reporting EvidenceTheir plans page names Headstart content, Assured Results Method, Virtual Coach, Integrations, Dynamic Risk Register & Treatment, Policy Packs and a Supply Chain Module. Mobile incident reporting is not among them. Source · checked 2026-09-21 | Not named on their plans page | ✓ |
Audit programme in the field EvidenceField audit and inspection execution is not named among their plans-page capabilities. Source · checked 2026-09-21 | Not named on their plans page | ✓ |
Risk register EvidenceTheir plans page names "Dynamic Risk Register & Treatment" as always included. Source · checked 2026-09-21 | ✓ | ✓ |
Supplier management EvidenceTheir plans page lists a "Supply Chain Module" under Optional Extras. Source · checked 2026-09-21 | Yes — optional Supply Chain Module | Yes — included |
| Commercials | ||
Published pricing EvidenceTheir plans page states: "IO’s pricing is bespoke to you, this means you’re not paying for things you don’t need or seats you won’t use. Fill in the form and we’ll get in touch soon." Source · checked 2026-09-21 | Bespoke — request a quote | Yes — from £85/month |
Free trial EvidenceTheir plans page states: "If you still need more time we can offer you a trial so you can explore in your own time." Source · checked 2026-09-21 | On request | 30 days, no card |
| Where they go further | ||
Information security frameworks EvidenceTheir plans page names ISO 27001, ISO 42001, SOC 2, NIS 2, ISO 22301, ISO 27701, DORA and GDPR. Q-Hub does not cover information-security frameworks. Source · checked 2026-09-21 | Yes — ISO 27001, SOC 2, NIS 2, DORA, GDPR, ISO 27701 | No — not offered |
Pre-built policy content EvidenceTheir plans page names "Headstart content" (pre-configured policies and controls) and "Policy Packs". Q-Hub configures to your existing documents rather than shipping a policy library. Source · checked 2026-09-21 | Yes — Headstart content and Policy Packs | No — configured to your own processes |
Guided certification method EvidenceTheir plans page names the "Assured Results Method (ARM)" and a "Virtual Coach" as always included. Source · checked 2026-09-21 | Yes — Assured Results Method and Virtual Coach | No — implementation support instead |
Competitor pricing as published by each vendor. Figures marked ≈ are converted from the currency they were published in at today’s rate, for comparison only.
Competitor details read from their own published materials, last checked 2026-09-21.
Where Q-Hub is the better choice
Five differences that change the day-to-day, not a feature list.
3 standards included, not added on
QHSE is the system, not an optional extra
- ISMS.online
- Available as optional additional standards
- Q-Hub
- Included as the core system
Their plans page lists ISO 9001, ISO 14001 and ISO 45001 under "Additional standards" in Optional Extras. In Q-Hub those three are the core system, sharing one document library, one CAPA register and one audit programme.
Incidents reported from the floor
- ISMS.online
- Not named on their plans page
- Q-Hub
- Yes
Their plans page names Headstart content, the Assured Results Method, a Virtual Coach, Integrations, a Dynamic Risk Register, Policy Packs and a Supply Chain Module. Mobile incident and near-miss reporting is not among them.
Audits run in the field
- ISMS.online
- Not named on their plans page
- Q-Hub
- Yes
Field audit and inspection execution is not named among their capabilities. Q-Hub schedules and runs audits on a phone or tablet, with findings feeding straight into CAPA.
£85 a month, published
You can see the price before you speak to anyone
- ISMS.online
- Bespoke — request a quote
- Q-Hub
- Yes — from £85/month
Their plans page states pricing "is bespoke to you" and asks you to fill in a form. Q-Hub publishes its plans.
Included nothing to add on
Supplier management is included, not an extra module
- ISMS.online
- Yes — optional Supply Chain Module
- Q-Hub
- Yes — included
ISMS.online lists supply chain as an optional Supply Chain Module. In Q-Hub supplier management is part of the system, so approved-supplier lists, performance records and supplier non-conformances sit with the rest of your audit evidence.
Reported from where it happened
Mobile incident and near-miss reporting is not named on their plans page. This is it: captured at the point of the event, offline if the signal is poor, and on the safety board without anyone re-keying it.
Safety · Live incidents 3 open
High Near miss — forklift vs racking Workshop B just now
Med Slip hazard — spill not signed Warehouse 2 12m
Low PPE observation — no goggles Line 4 1h
Incidents this month · 47
New Incident
Offline
Low Med High
Location · GPS Workshop B — Loading Bay 3
Description Near miss — forklift contact with racking during unloading
Photos
Submit Incident Report
Synced to dashboard
Where ISMS.online is the better choice
Cases where we would tell you to choose them, because a comparison page that never concedes is not worth reading.
You need information security frameworks
- ISMS.online
- Yes — ISO 27001, SOC 2, NIS 2, DORA, GDPR, ISO 27701
- Q-Hub
- No — not offered
They cover ISO 27001, ISO 42001, SOC 2, NIS 2, ISO 22301, ISO 27701, DORA and GDPR. Q-Hub covers none of these, and if infosec is your obligation they are the right tool.
You want policies written for you
- ISMS.online
- Yes — Headstart content and Policy Packs
- Q-Hub
- No — configured to your own processes
They ship Headstart content — pre-configured policies and controls — and Policy Packs. Q-Hub configures to your existing documents rather than supplying a policy library.
You want a guided route to certification
- ISMS.online
- Yes — Assured Results Method and Virtual Coach
- Q-Hub
- No — implementation support instead
Their Assured Results Method and Virtual Coach walk you through certification. Q-Hub gives you an implementation team for four weeks, which is a different kind of help.
What you would actually pay
Set your team size and see the Q-Hub price. ISMS.online quotes bespoke pricing on request, so nothing on their side is estimated — their column quotes their own plans page.
ISMS.online
Bespoke — request a quote
Published pricing is not available, so the figure depends on a quote.
- Free trial: On request
Q-Hub figures are our published prices. ISMS.online does not publish prices, so nothing is estimated on their side — their column quotes their own pricing page, read 2026-09-21.
Feature deep-dive
ISMS.online is an information security platform. ISO 27001, SOC 2, NIS 2, DORA, GDPR and ISO 27701 are its core, with Headstart policy content and a guided certification method — the Assured Results Method and a Virtual Coach — built around getting you certified.
ISO 9001, 45001 and 14001 are available there as optional additional standards. In Q-Hub they are the core system, not an add-on. Mobile incident and near-miss reporting and a scheduled audit programme carried out in the field are not named on their plans page, and supplier management is an optional Supply Chain Module rather than something included.
More often than not these two are complementary rather than competitive. If the job is certifying an information security management system, they are the better tool and we do not pretend otherwise. If it is running quality, safety and environment across operating sites, that is this one.
- ISO 9001, 45001 and 14001 as the core, not optional extras
- Mobile incident and near-miss reporting
- Scheduled audit programme carried out in the field
- Supplier management included rather than a paid module
ISO 9001 Internal Audit · Site A 68% JS
Audit checklist
4.2 Document control procedures reviewed Conform
5.1 Management responsibility evidenced Conform
6.1 Resource management adequate Conform
7.1 Product realisation processes verified Nonconformity
8.2 Monitoring & measurement calibrated Observation
Switching from ISMS.online
What a move actually involves.
This is often not a switch
If ISO 27001 is a genuine obligation, keep the tool that does it. The question is usually what runs QHSE alongside, not what replaces the ISMS.
What comes across
Documents, risk registers, audit history and training records, mapped rather than flattened.
What stays behind
Information-security control sets and framework mappings. We do not hold them.
What we cannot promise
We have not migrated an ISMS.online tenant end to end.
Trusted by compliance teams worldwide
“
“Qhub provides a visible, intuitive way to manage data and workflows, revolutionising our approach to operations”
Fowlers of Bristol (Engineers) Ltd
Operations director
“
“Qhub helps us to... proactively use our QMS... and increase efficiency”
Anglia Cathodic Protection Services
Business manager
“
“Really made a difference with providing compliance during audits – both regulatory, customer, and internal.”
Auxitrol Weston
Quality manager
“
“QHub has supported us in achieving a higher compliance rate.”
BMC Analysis
Technical Manager/ Quality Manage
“
“We can't believe how fast we were able to get it up and running.”
Cawood Group
“
“Managing NCRs are now so much easier”
Enviromesh
Quality manager
“
“Where was this 2 years ago... we're blown away”
Jaltek
Compliance manager for Jaltek
“
“Qhub has improved our safety management system no end, making it very efficient”
Rocal Endurance Doors
Compliance manager
“
“We use it for as much as possible.”
Scottish Leather Group
Compliance manager
Integrations
Connects with the tools you already use
Q-Hub connects to your existing tools via REST API, webhooks and SSO, with bespoke connectors on request. More integrations coming soon.
Microsoft 365
SharePoint
Teams
Slack
Google Workspace
Power BI
Jira
SAP
Salesforce
Enterprise Security
Your data is safe with us
Each certification and commitment, with the detail behind it.
ISO 27001 Independently audited information security management, certified to ISO/IEC 27001.
Cyber Essentials UK Government-backed certification against the most common cyber attacks.
GDPR Compliant Full compliance with UK & EU data protection law.
99.9% Uptime SLA Guaranteed platform availability, backed by our SLA.
UK Data Centres All customer data hosted in ISO 27001-certified UK data centres.
FAQ
Frequently asked questions
No. Information security frameworks are not something Q-Hub covers, and we would rather say so plainly than imply partial support.
Only if your 27001 obligation has gone away. If it has not, they should stay and Q-Hub should sit alongside for operational QHSE.
Mobile incident and near-miss reporting, field audits, CAPA, controlled documents and training across ISO 9001, 45001 and 14001 as the core system rather than optional extras.
They state pricing "is bespoke to you" and ask you to fill in a form. Q-Hub publishes £85, £245 and £530 a month.
No. Q-Hub is configured around your existing documents, numbering and approval routes. ISMS.online ships Headstart content and Policy Packs if you would rather start from a library.
Four weeks is standard, including data migration and role-based training.
Yes — the three standards share a harmonised ten-clause structure, which is why BSI, the UK national standards body, runs them as a single integrated management system: “an integrated management system for ISO 9001, ISO 14001 and ISO 45001”. Q-Hub runs all three as one audit programme, so a finding closes once against whichever standard it belongs to instead of being re-entered somewhere else. On ISMS.online the three are available as optional additional standards rather than the core of the system, which is the distinction this page turns on.
ISO 9001, 45001 and 14001 as the main event
If those three are the core of your management system rather than optional extras, see them run as one audit programme on your own standards.
Start free trialNo credit card required · 30-day free trial · Live in 4 weeks