Questions, answered plainly.

One zip file per product, delivered by email and available again from your Payhip purchase receipt. Inside is a README-FIRST file, then the PDF guides, Excel workbooks and Word documents, arranged in numbered folders for the larger programs so you work through them in order.

Check spam and promotions folders for the email from Payhip. You can also re-download from the link in your receipt. If neither works, send a note through the Contact page with the address you bought with and the file will be resent the same working day.

Yes, for orders over $500 or for multiple licences. Send your organization's details through the Contact page and an invoice will follow.

Payhip calculates and collects VAT or sales tax where it applies, based on your location, and shows it at checkout.

Microsoft Excel 2010 or later and Microsoft Word, or Google Sheets and Google Docs. The workbooks deliberately avoid newer functions such as XLOOKUP, so they work in older Office versions and convert cleanly to Google Sheets. No macros, no add-ins, nothing to install.

The starters can be running in an afternoon or two. The toolkits come with an implementation plan of a few weeks at a few hours a week. The programs take longer because they need approval: plan on a 90-day adoption with leadership sign-off in the first month. Each product's guide lays out the sequence.

Yes, that is the intent. Every document has bracketed fields to replace and thresholds you should tune to your size and risk tolerance. The guides tell you which defaults are safe to keep and which you should decide deliberately.

The toolkits ship with realistic sample data so you can see every calculation working. Clear the sample entries from the input columns before you enter your own; the calculated columns empty themselves when their row is blank.

Yes. When a product is revised you receive the new version through Payhip at no charge. Version numbers are in every file name, so you can always tell which one you have.

No product can do that, and any template seller who says otherwise is overclaiming. These programs give you a working program aligned to the frameworks your customers, auditors and insurers cite, and the evidence to show it operates. Each product states exactly which requirements it supports. The compliance judgment belongs to your auditor.

Depending on the series: NIST CSF 2.0, CIS Controls v8.1, ISO/IEC 27001:2022, NIST SP 800-30, NIST IR 8286, NIST SP 800-161 and the NIST AI RMF, with the AI series informed by ISO/IEC 42001 management-system concepts. The collection pages list the alignment for each series.

No. The contract language and policies are starting points. Have qualified counsel review anything that will bind your organization or go to a vendor or customer.

The standard licence covers one organization, including sharing completed questionnaires and contract exhibits with that organization's own vendors. Consultants, vCISOs and managed service providers using the materials across client organizations need a practitioner licence. See the Licensing page.

Yes. Fixed-fee implementation sessions and ongoing advisory are available through the practice. Send the product name and what you want to achieve through the Contact page.

See Refunds and Terms. In short: if a file is faulty or the product is materially not as described, it gets fixed or refunded.