Compliance
Continuous evidence, not point-in-time audits.
Automated compliance checks run on schedule, generate hash-chained evidence, and produce regulator-ready exports on demand.
| Framework | Scope | Coverage |
|---|---|---|
| EU AI Act | High-risk AI systems, transparency, human oversight | Native |
| GDPR | Data subject rights, DPIA evidence, lawful basis logs | Native |
| HIPAA | PHI handling, access controls, audit trail | Native |
| PCI-DSS | Cardholder-data isolation, key management | Aligned |
| NIS2 | Incident reporting, risk management | Native |
| FedRAMP | Public-sector control baseline | Aligned |
| ISO 27001 | ISMS controls, continuous evidence | Aligned |
| SOC 2 | Trust services criteria | Aligned |