Compliance Tools
Frameworks, mappings, and checklists for compliance and audit work.
13 tools
Assess & find gaps5
Compliance Readiness Checklist
Score your SOC 2, HIPAA, PCI-DSS, ISO 27001 or CMMC readiness in minutes. Weighted gap analysis, ranked remediation plan and exportable PDF report.
GDPR Checker
Scan any website for GDPR issues in under a minute. Grades cookie consent, third-party trackers, privacy policy coverage and controller contact details.
HIPAA Quick Assessment
Answer 10 questions and get a scored HIPAA Security Rule readiness result with specific fixes for risk analysis, BAAs, encryption, audit logs and training.
SOC 2 Gap Analysis
Assess SOC 2 Type II readiness across all 5 Trust Service Criteria: Security (CC1-CC9), Availability, Processing Integrity, Confidentiality, Privacy. Free.
VRM Breach-Proof Scorecard
Score your vendor risk management maturity across four pillars in two minutes and see the modelled annual loss expectancy a stronger programme removes.
Policies & documents4
NDA Generator
Generate a customizable Non-Disclosure Agreement free. Choose mutual or one-way, set jurisdiction and confidentiality terms, and export a ready-to-use NDA.
Privacy Policy Generator
Build a privacy policy from your actual data practices. Adds GDPR, CCPA/CPRA, CalOPPA, COPPA and PIPEDA sections only for the regimes that apply to you.
Security Policy Generator
Generate Acceptable Use, Password, Incident Response, Access Control, Remote Work and Data Classification policies tailored to your org and frameworks.
SOW Generator
Generate a detailed Statement of Work free — deliverables, milestones, payment schedules, and acceptance criteria in a ready-to-use SOW document.
Data & vendor governance4
Data Classification Policy Architect
Build a full data classification policy: commercial or government schema, per-level handling rules for storage, transit, access, disposal and labelling.
GDPR Role & Retention Mapper
Determine controller vs processor role, log processing activities, set retention periods, pick an Article 6 basis and export an Article 30 record.
Security Program Workspace
Track 12 baseline controls with status, owner, target date and evidence. Ranked remediation queue, weighted coverage, NIST, ISO, SOC 2 and CIS refs.
Supply Chain Risk Assessor
Score vendors across eight security domains, weight by tier, data access and geography, surface concentration risk and export a NIST 800-161 report.