✓ Cyber security documentation for UK small businesses

Cyber Security Policies Made Simple for Small Businesses

Get professional cyber security, data protection and IT policies created around the way your business actually works. No consultants. No complicated templates. No cyber security knowledge required.

✓Tailored to your business
◷5-10 minute questionnaire
⌖Built for UK businesses
✎Editable documents
£One simple payment
Not ready to buy? Create a free Information Security Policy →
🔒 Secure Stripe checkout  •  One payment - no subscription

Information
Security Policy

86/100 score

Your Business Security Pack

Policies tailored to your answers

Risk areas clearly identified

Priority improvements explained

Built for real small businesses. From one-person trades to growing SMEs with staff, cloud systems and remote workers.
TRY COMPLYMATE BEFORE YOU BUY

Create a real policy for your business - completely free

Don't take our word for the quality. Answer a few simple questions and we'll instantly create a professional Information Security Policy using your own business name and circumstances.

No payment or card details
No email address required
Editable Word document
Same professional document style
Useful even if you never buy
Created instantly - no AI wait
Create My Free Policy → Usually takes around 2 minutes.
See how simple it isFREE POLICY
How many people work in the business?
2-5 people
Where is most business information stored?
Mostly online / cloud systems
Do important accounts use MFA?
Yes - but only on some accounts
Then ComplyMATE prepares the document.Your policy wording adapts to the answers you give, with a professional preparation cover, document-control table, business-name headers and an approval section.
WHY YOU MAY BE HERE

Has somebody suddenly asked for cyber security documentation?

You don't need to start from a blank Word document. ComplyMATE is designed for the real situations that cause small businesses to need proper policies quickly.

CYBER INSURANCE

Your insurer asks about your security arrangements

Put clear policies behind areas such as accounts, backups, access and incident response.

CUSTOMER / SUPPLIER

A customer asks how you protect information

Have documented policies ready instead of trying to write an answer from scratch.

TENDER / CONTRACT

A tender asks for security policies

Build a professional documentation baseline that reflects the way your business works.

GETTING ORGANISED

You simply want to run the business properly

Turn informal security habits into something clear, reviewable and documented.

Still unsure? Create your free Information Security Policy first.

Why businesses buy ComplyMATE

Your business probably relies on more technology and data than you realise

You don't need to be pursuing a certification to need sensible cyber security documentation. If your business uses email, customer information, cloud software, phones, laptops or online systems, good policies help turn informal habits into a clear, documented approach.

👤

You store customer information

Names, addresses, emails, invoices and customer records all need to be handled and protected sensibly.

☁

You use cloud systems

Microsoft 365, Google, CRM, accounting and cloud storage all introduce questions around access, passwords, data and backups.

⌂

You work remotely

Home working, customer sites, personal devices and mobile working introduce risks that should be covered by clear policies.

♜

You have cyber insurance

Insurers increasingly ask about MFA, backups, access controls, incident response and the security processes you have in place.

↔

Customers ask about security

Larger customers, tenders and supply chains may ask you to explain how you protect information and manage cyber security.

✓

You simply want to run things properly

You don't need an IT department or a compliance project. Sometimes you just want sensible documentation behind the way your business operates.

If any of those sound like your business, ComplyMATE is designed for you.
No consultancy project required

Three simple steps. We do the complicated bit.

You shouldn't have to spend days writing policies just to document how your business protects its systems and information.

1▤

Choose Your Pack

Pick the Sole Trader or Business pack and complete secure Stripe checkout.

2✎

Answer Simple Questions

We'll email your unique link. Tell us how your business works using straightforward, plain-English questions.

3⇩

Receive Your Documents

Your answers are used to create a personalised set of professional, editable business documents.

Know exactly what you're buying

What's inside your ComplyMATE pack?

These aren't blank templates. Each document is created around the answers you provide, so the wording reflects the size of your business, how you work, the systems you use and the information you handle.

Sole Trader Pack

£79

For freelancers, contractors, trades and one-person businesses who want the essential foundations covered without unnecessary employee-focused paperwork.

Business Pack

£149

For limited companies and SMEs with employees, contractors, multiple users, cloud systems or a more developed IT environment.

Sole Trader Pack - 7 core documents
✓
Information Security PolicyYour overall approach to protecting business systems, information and accounts.
✓
Data Protection & Privacy PolicyHow personal and business information should be collected, used, stored and protected.
✓
Password & Access Control PolicyRules for passwords, MFA, account access and keeping logins secure.
✓
Device & Acceptable Use PolicySensible rules for business laptops, computers, phones, internet and cloud services.
✓
Backup & Recovery PolicyHow important business information should be backed up and recovered if something goes wrong.
✓
Remote & Mobile Working PolicySecurity considerations for working from home, customer sites, public places and mobile devices.
✓
Cyber Security Incident Response PlanA clear plan for what to do if an account is hacked, a device is lost or a security incident occurs.
Business Pack - 12 core documents
✓
Information Security PolicyThe central policy covering responsibilities and your overall security approach.
✓
Data Protection & Privacy PolicyPractical rules for protecting the personal and business information your organisation handles.
✓
Acceptable Use PolicyHow staff should use company devices, email, internet, software and business systems.
✓
Password & Access Control PolicyPassword, MFA, account access and permissions requirements for users and administrators.
✓
Backup & Recovery PolicyExpectations around backups, recovery and protecting important business information.
✓
Remote & Hybrid Working PolicySecurity rules for home workers, remote access, public locations and customer sites.
✓
Bring Your Own Device (BYOD) PolicyClear rules where personal phones, tablets or computers are used for business activity.
✓
Data Retention & Secure Disposal PolicyHow long information should be kept and how records and devices should be securely disposed of.
✓
Joiner, Mover & Leaver Access PolicyHow access should be granted, reviewed, changed and removed as people join, change roles or leave.
✓
Staff Cyber Security Responsibilities PolicyPlain-English expectations around reporting, awareness and protecting company information.
✓
AI & Generative AI Usage PolicyPractical rules for tools such as ChatGPT, Copilot, Gemini and other AI services.
✓
Cyber Security Incident Response PlanWho does what and what actions to take when a security incident or suspected data breach occurs.

Also included with your pack

✓Security risk review
✓Priority improvement checklist
✓Editable DOCX documents
✓PDF copies
✓UK-focused wording
✓Cyber Essentials supporting guidance where relevant
Useful long before you need a certificate

Three common reasons businesses suddenly realise they need proper documentation

ComplyMATE isn't a Cyber Essentials certification service. It's a small-business cyber security documentation product that can support many different business requirements.

CYBER INSURANCE

Has your insurer started asking more questions?

Cyber insurance forms increasingly ask about MFA, backups, employee access, security procedures and incident response. ComplyMATE helps you put the documented policies behind those practices in place. It doesn't guarantee insurance eligibility or cover, but it gives you a much better-organised starting point.

CUSTOMERS & SUPPLY CHAINS

Been sent a supplier security questionnaire?

Larger organisations increasingly want suppliers to demonstrate how they protect information. Having documented policies means you're no longer starting from a blank page every time somebody asks about your security controls.

CYBER ESSENTIALS

Thinking about Cyber Essentials?

You don't need to be pursuing Cyber Essentials to use ComplyMATE. However, the pack helps document many of the surrounding practices that businesses often need to organise when preparing for certification. ComplyMATE does not provide or guarantee certification.

Built for ordinary businesses

From a one-person trade to a 100-person SME

ComplyMATE is deliberately designed for businesses without an internal compliance team. You don't need to understand technical terminology - you just need to know how your own business operates.

Trades & ConstructionConsultantsAccountants & BookkeepersEstate AgentsRecruitmentCare & HealthcareRetailHospitalityProfessional ServicesCharitiesOnline BusinessesFreelancers & Contractors

No IT department? That's the point.

We've deliberately kept the process straightforward.

Questions written in plain English
No need to know cyber security jargon
No day-long consultancy meeting
No generic template pack to rewrite yourself
Documents created around your answers
Choose the right level

Sole Trader or Business - what's the difference?

The Sole Trader pack avoids employee-focused policies you don't need. The Business pack adds the extra controls and documentation required when multiple people access company systems and information.

IncludedSole Trader
£79
Business
£149
Core information security policy✓✓
Data protection & privacy policy✓✓
Password & access controls✓✓
Backup & recovery✓✓
Remote/mobile working✓✓
Incident response plan✓✓
Staff acceptable use rules—✓
BYOD policy—✓
Joiner/mover/leaver access policy—✓
Staff cyber security responsibilities—✓
AI usage policy—✓
Data retention & disposal policy—✓
Security risk review & improvement checklist✓✓
Editable Word + PDF copies✓✓

Not sure? If anybody other than you regularly accesses business systems or information, the Business Pack is usually the better fit.

Why not just download templates?

A better middle ground between DIY templates and expensive consultancy

Generic template bundles

Cheap, but usually full of placeholders and wording you need to understand, rewrite and adapt yourself before they mean anything to your business.

ComplyMATE

Answer straightforward questions once. Your documents are then created around your business, your working practices and the systems you use - without the consultancy price tag.

Traditional consultancy

Can be appropriate for complex organisations, but often means meetings, discovery work and a much larger bill than a small business needs for its core documentation.

What you getGeneric templateComplyMATETraditional consultancy
Starts with your business informationUsually no✓ Yes✓ Yes
Wording adapts to how you workManual editing required✓ Yes✓ Yes
Guided plain-English questionsUsually no✓ Yes✓ Yes
Professional editable documentsVaries✓ Word + PDF✓ Usually
Meetings / consultancy timeNoneNone requiredUsually required
Typical cost level££79 / £149 one-off£££
One payment. No subscription.

Simple, transparent pricing

Choose your pack, complete the questionnaire and receive your personalised documentation. No monthly commitment and no hidden consultancy fees.

Before you order

Frequently Asked Questions

Is ComplyMATE a Cyber Essentials product?

No. ComplyMATE is a cyber security documentation product for UK small businesses. The policies can be useful when preparing for Cyber Essentials, but ComplyMATE is not a certification body and purchasing a pack does not provide or guarantee Cyber Essentials certification.

Are these legal documents or legal advice?

No. ComplyMATE produces business policies, procedures and operational guidance. They are not legal advice and are not intended to replace advice from a solicitor, data protection specialist or other regulated professional where that is required.

Are the documents actually tailored to my business?

Yes. Your documents are created using the information you provide about your business, staff, working locations, systems, data, devices and current security practices.

How long does the questionnaire take?

Most customers should be able to complete it in around 5-10 minutes. Questions are deliberately written in straightforward language and unnecessary questions are avoided.

I'm a tradesperson or one-person business - is this really for me?

Yes. If you use email, customer details, cloud software, online banking, a laptop or a phone for business, cyber security and data handling are already relevant to you. The Sole Trader Pack strips out the employee-specific policies you don't need.

Does buying the pack make my business 'compliant'?

No product can automatically make every business compliant simply by providing documents. ComplyMATE helps you document sensible policies and identify areas for improvement. You are responsible for following the policies and making any operational changes recommended.

Can this help with cyber insurance questionnaires?

It can help you organise and document your approach to areas insurers commonly ask about, such as access control, backups and incident response. It does not guarantee that an insurer will accept an application or provide cover.

Can I edit the documents?

Yes. Your pack includes editable Word documents as well as PDF copies, so you can make changes as your business develops.

Is this a subscription?

No. The £79 and £149 launch packages are one-off purchases. We may introduce optional review or update services in future, but there is no recurring subscription attached to these packs.

What if I'm not technical?

That's exactly who the service is designed for. The questionnaire asks about ordinary business practices rather than expecting you to understand technical cyber security terminology.

Can I try ComplyMATE before I buy a pack?

Yes. You can create a free Information Security Policy using a short set of questions. No card details or email address are required. The free document is created from quality-controlled policy sections selected from your answers and is intended to show you the style and practical approach used by ComplyMATE.

Ready to put proper policies behind your business?

Choose the pack that fits the way you work. ComplyMATE will guide you through the short questionnaire and create the documentation from there.

View Packs - from £79