Supported IT Compliance & Regulatory Frameworks
Our AI engine uses Retrieval-Augmented Generation (RAG) across the world's leading IT Governance, Security, and Privacy frameworks to ground answers and auto-map security controls.
Security & Audit Frameworks
- SOC 2 (Type I & II) →View GuideAICPA Trust Services Criteria (Security, Availability, Processing Integrity, Confidentiality, Privacy).
- ISO/IEC 27001:2022 →View GuideInformation Security Management Systems (ISMS) and 93 Annex A controls.
- NIST CSF 2.0 →View GuideIdentify, Protect, Detect, Respond, Recover, and Govern.
- CIS Controls v8Center for Internet Security prioritized defensive actions across Implementation Groups 1–3.
IT Operations & Supply Chain
- Third-Party Risk Management (TPRM) →View GuideVendor due diligence, questionnaire analysis, and continuous supply-chain risk monitoring.
- ITIL v4IT Service Management practices including Incident, Problem, and Change Management.
- COBIT 2019Enterprise Governance of Information and Technology (EGIT).
- NIST SP 800-53 Rev. 5Security and Privacy Controls for Federal Information Systems and Organizations.
Privacy & Regional Regulatory Compliance
HIPAA Security & Privacy →US Health Insurance Portability and Accountability Act safeguarding ePHI.
GDPR & CCPAEuropean and Californian data protection and consumer privacy standards.
DORA & NIS2European Digital Operational Resilience Act and Network Security Directives.