Connects to what you run.Certified and EU hosted.Priced per scheduled day.
ScheduleAI connects to your ERP or certification platform through a REST API and webhooks, is ISO/IEC 27001 certified and hosted in AWS Ireland, and keeps a planner in control of every change. Security documentation is in the trust centre, and live status is public.REST API and webhooks, ISO/IEC 27001 certified, hosted in AWS Ireland. A planner approves every change.
- ISO/IEC 27001
- certified
- 99.9%
- monthly uptime commitment
- ✓ISO/IEC 27001 certified
- ✓GDPR compliant · hosted in AWS Ireland (EU)
- ✓Independent penetration test, most recent May 2026
- ✓TLS 1.2+ in transit, AES-256 at rest
- ✓Multi-factor authentication and role-based access
- ✓Public status page and trust centre
✓Security documentation at trust.checkfirst.ai
Security reviews stall when the evidence is scattered across emails and questionnaires.
The evidence is published or ready on request: ISO/IEC 27001 certificate, penetration-test summary, data processing agreement with its sub-processors, and live service status.
ISO/IEC 27001 certified, independently penetration tested in May 2026, with a 99.9% monthly uptime SLA.
Answers before the questionnaire.
Integration
- REST API and webhooks
- OAuth 2.0 or API-key authentication; signed webhooks
- Outlook calendar sync; Google Calendar coming soon
- Engine-only deployment behind your own interface
Security
- ISO/IEC 27001 certified
- GDPR compliant; hosted in AWS Ireland (EU)
- Independent penetration test, most recent May 2026
- TLS 1.2+ in transit, AES-256 at rest
Access and data
- MFA enforced for every user; Microsoft Entra ID single sign-on in final testing
- Role-based access with custom roles
- Audit log of every change, exportable
- Full data export on exit (CSV or JSON); deletion under your DPA
- 99.9% monthly uptime SLA; daily backups with point-in-time recovery
AI governance
- Optimisation engine, not a language model
- Language models assistive only; data never used to train models
- Planner approval before anything is confirmed
- Every decision and override logged
Commercial
- Annual licence per scheduled day, plus a platform fee
- Scoping and integration at a fixed fee
- Free two-week custom demo on your data
- Custom work never exceeds the agreed price without written approval
Your security questionnaire, answered up front.
| Question | Answer |
|---|---|
| Certification | ISO/IEC 27001 certified |
| Hosting and data residency | AWS Ireland, in the EU |
| Encryption | TLS 1.2+ in transit, AES-256 at rest |
| Authentication | MFA enforced for every user; Microsoft Entra ID single sign-on in final testing |
| Penetration testing | Independent penetration test, most recent May 2026 |
| Personal data | GDPR compliant; data processing agreement with sub-processor list |
| Model training | Customer data is never used to train models |
| Availability | 99.9% monthly uptime SLA; live status at status.checkfirst.ai |
| Exit | Full export in CSV or JSON, including audit logs |
| AI governance | Planner approves every allocation; no scoring of auditors on behaviour or performance; every decision logged with its reason |
| Security pack | ISO/IEC 27001 certificate, penetration-test summary, data processing agreement and sub-processor list, on request |
Your system stays the record.
Master data comes in by API, results go back by API or webhooks, and auditors answer in Outlook.
Clients, sites, audits, auditors, competencies
Allocations, dates and status
Invites and emails
Accept, reject or new time; availability
Everything you can check yourself.
Trust centre
Security documentation, sub-processors and policies at trust.checkfirst.ai.
Live status
Service status and incident history at status.checkfirst.ai.
Support
Critical issues answered within one hour, 24/7, and restored within eight hours; standard support Monday to Friday, 09:00 to 17:00 CET.
From a demo on your data to go-live.
- 12 weeks · freeCustom demoA month of your own audits planned and compared with your plan.
- 24 weeks · fixed feeScoping and integrationRules, data and connections configured with your team.
- 38 weeks · one divisionPilotMeasured against success measures agreed in writing. The licence starts.
- 4division by divisionRoll-outFurther divisions and countries on the same rules.
Questions IT and procurement teams ask
Where is our data hosted?
In AWS Ireland, in the EU. ScheduleAI is ISO/IEC 27001 certified and GDPR compliant.
Do you support single sign-on?
Multi-factor authentication is enforced for every user today. Microsoft Entra ID single sign-on is in final testing; ask us for the release date.
What happens to our data if we leave?
You get a full export in standard formats such as CSV or JSON, including audit logs. Data is then deleted under the retention terms of your data processing agreement.
Do you use our data to train models?
No. Customer data is never used to train models.
How does ScheduleAI sit under the EU AI Act?
ScheduleAI proposes allocations and a planner approves them. Auditors are matched on qualifications, availability, rotation, impartiality, workload and travel, and are not scored on behaviour or performance. Every decision is logged with its reason. We will walk your legal team through how this maps to the Act's rules on AI used to allocate work.
What does IT need to do for the demo?
Nothing. The custom demo runs on an extract of your data. Integration starts in the scoping phase.
Is there API documentation?
Yes. API documentation is shared with your technical team once an NDA is in place.
How is ScheduleAI priced?
An annual licence priced per scheduled day, plus an annual platform fee. A scheduled day is one calendar day on which an auditor has at least one confirmed appointment, however many appointments fall on it. Scoping and integration is a fixed fee agreed in writing.
Watch: the security review in 38 seconds
The evidence is already published. REST API and webhooks. A planner approves every change.
Prefer to click through it yourself? Take the product tourStart with the demo. IT joins at scoping.
The free two-week custom demo runs on an extract of your data, with no integration. Integration work starts in the fixed-fee scoping phase.