Tristan Roth

Tristan Roth is an ISO 27001 consultant and engineer best known as the founder of ISMS Copilot, an AI assistant for information security compliance often described as ChatGPT for ISO 27001. Tristan runs Better ISMS, a small founder-owned company registered in Paris and operating from France and Barcelona, with no outside investors.

Tristan spent years as an ISO 27001 specialist, preparing companies for certification audits, writing security policies and answering compliance questions. Frustrated that most ISMS documentation came from generic templates, Tristan spent nights and weekends building the ISMS Policy Generator, which launched in November 2023 and produced more than 20 policies needed for ISO 27001. The same month Tristan introduced an ISO 27001 copilot, and the products grew into ISMS Copilot.

ISMS Copilot drafts policies, assesses risks and maps requirements across more than 100 frameworks, including ISO 27001, SOC 2, GDPR, DORA and the EU AI Act. It is available as a chat app, API, MCP server and embed. A September 2025 case study reported more than 1,500 users and about 400 monthly active users. In 2024 Tristan commissioned an AI penetration test of the product from StackAware to check its own security.

Tristan has since moved compliance checks into code review. heyGRC is a GitHub app that reviews pull requests for issues tied to framework controls, and Aevral reviews pull requests for authorization, IDOR and business-logic flaws. Tristan also runs Use AI Securely, whose free AI literacy courses on Udemy passed 50,000 enrollments in 2026, and several directories, including ISMS Directory and AI Security Directory.

Better ISMS publishes prices, avoids per-seat pricing and also sells fixed-price ISO 27001 and SOC 2 consulting. In late 2026 the company was going through its own ISO 27001 certification audit.