Frameworks & certification

International standard for information security management systems (ISMS). Manage clauses, Annex A controls across four domains, compliance status, and Statement of Applicability reporting.

• Clauses, domains, and 93 Annex A controls
• Control ownership and applicability tracking
• SOA report generation

Available in workspace

International standard for AI management systems (AIMS). Manage main clauses, Annex A controls across nine AI objectives, compliance status, evidence, and applicability for responsible AI programs.

• Clauses 4–10 and 38 Annex A controls
• Nine AI objective domains (policies, lifecycle, data, third parties, and more)
• Completion guidance, evidence, and SOA-style N/A tracking

Available in workspace

Service Organization Control 2 reporting against AICPA Trust Services Criteria. Track common criteria and category-specific requirements with evidence linked to controls.

• Trust Services Criteria structure
• Requirement and sub-requirement tracking
• Audit-ready evidence collection

Available in workspace

ISO 9001

Quality management

ISO 9001

Quality management system standard for organizations that need structured process control alongside security and compliance programs in a unified workspace.

• Process and quality requirement mapping
• Documentation and evidence workflows
• Multi-framework workspace support

Available in workspace

EU General Data Protection Regulation — map privacy obligations, document processing activities, and maintain evidence for data protection compliance.

• Privacy control mapping
• Policy and documentation alignment
• Evidence for regulatory review

Available in workspace

Health Insurance Portability and Accountability Act safeguards for covered entities and business associates managing protected health information.

• Administrative, physical, and technical safeguards
• Risk and control tracking
• Audit documentation support

Available in workspace

NIST Cybersecurity Framework for identifying, protecting, detecting, responding, and recovering — structured for continuous improvement and executive reporting.

• Core functions and categories
• Maturity and implementation tracking
• Cross-mapping to other frameworks

Available in workspace

Security and privacy controls catalog for federal systems and organizations adopting NIST control baselines for risk management programs.

• Control family structure
• Implementation status tracking
• Evidence and assessment support

Available in workspace

Center for Internet Security prioritized safeguards — practical, actionable controls for improving cyber hygiene and measurable security outcomes.

• Implementation group alignment
• Safeguard tracking
• Operational security mapping

Available in workspace

Payment Card Industry Data Security Standard for organizations that store, process, or transmit cardholder data and need structured compliance evidence.

• Requirement-level tracking
• Evidence for QSA assessments
• Vendor and scope documentation

Available in workspace