Compliance Center
A compliance workspace in your browser: track every control of seven frameworks with owners, due dates and encrypted evidence, map work across frameworks, keep a risk register and vendor reviews, draft and approve policies with your own AI, and export a readiness report or ISO 27001 Statement of Applicability.
Included from the Pro plan · runs on your own AI key
How to use Compliance Center
- 1
Describe your organisation and choose the frameworks in scope — ISO 27001, SOC 2, NIST CSF 2.0, PCI DSS v4, HIPAA, GDPR or Indonesia's UU PDP.
- 2
Work through the controls: status, owner, due date, notes and evidence files; copy finished work to the equivalent controls of your other frameworks.
- 3
Add risks, policies and vendors, ask your AI advisor for gaps and plans, then export the readiness report, SoA and CSVs.
- ISO 27001 certification
- SOC 2 readiness
- GDPR and UU PDP programmes
- Vendor security reviews
- Policy writing
- Audit preparation
342 real controls, 7 frameworks
ISO/IEC 27001:2022 Annex A (93), SOC 2 TSC, NIST CSF 2.0 (22 categories), PCI DSS v4.0.1, the HIPAA Security Rule, GDPR and UU PDP — with status, owner, due date, notes and N/A justification.
Evidence and cross-framework mapping
Attach evidence files, stored encrypted in your account; controls are mapped across frameworks so finished work can be copied to its equivalents for review.
Risks, policies and vendors
Risk register with a 5×5 inherent / residual heat map, 26 policy templates with AI drafts, versions and approvals, and a weighted vendor questionnaire with risk tiers.
Readiness reports and exports
Readiness per framework and domain, overdue controls, a readiness report (Markdown, Word, PDF), an ISO 27001 Statement of Applicability, and CSV / JSON exports.
AI advisor on your keys
Gap analysis, remediation plans, control implementation, risk and vendor reviews and questionnaire answers from a programme briefing built on your device.
Compliance AI is the self-hosted counterpart — Docker and Windows, included with Business and Enterprise.