Frameworks

Every framework.
One platform.

Security, privacy, AI governance and the full EU digital stack — 16 frameworks, mapped once and kept continuously audit-ready.

Security

SOC 2

Type I & II readiness with continuous control monitoring.

Explore
Security

ISO 27001

Annex A control mapping and Statement of Applicability support.

Explore
Security

NIST CSF

Identify, Protect, Detect, Respond and Recover coverage.

Explore
Security

PCI DSS

Cardholder-data controls with compensating-control worksheets.

Explore
Privacy

GDPR

RoPA, DPIAs and data-subject request workflows.

Explore
Privacy

HIPAA

Administrative, physical and technical safeguard tracking.

Explore
Privacy

CCPA

US state privacy obligations and consumer-rights handling.

Explore
Privacy

India DPDPA

DPDP Act 2023 and Rules 2025 — consent, Data Fiduciary duties and Data Principal rights.

Explore
AI Governance

EU AI Act

Risk classification, technical documentation and transparency.

Explore
AI Governance

NIST AI RMF

GOVERN, MAP, MEASURE and MANAGE for AI systems.

Explore
AI Governance

ISO 42001

AI management system certification support.

Explore
AI Governance

AIUC-1

Six-pillar certification for AI agents — data, security, safety, reliability, accountability, society.

Explore
EU Digital

DORA

Operational-resilience controls for financial entities.

Explore
EU Digital

DMA

Gatekeeper obligations and core platform services.

Explore
EU Digital

DSA

Content-moderation tracking and VLOP/VLOSE controls.

Explore
EU Digital

CSRD

Sustainability reporting for in-scope groups.

Explore
The multiplier

Map once. Reuse everywhere.

Most frameworks share the majority of their controls. ComplyEasyAI maps shared controls a single time, so each new framework mostly reuses evidence you already have.

ONE EVIDENCE LAYER

Your connected evidence
maps to ↓
SOC 2 · CC6.1
ISO 27001 · A.9
GDPR · Art. 32
HIPAA · §164.312
Connect your stack once
Read-only integrations feed evidence continuously — no repeated screenshotting per framework.
Add frameworks with less effort each time
Overlapping controls are already satisfied, so each new certification mostly reuses existing evidence.
Stay current automatically
When a regulation changes, the affected controls update — across every framework that shares them.

Which frameworks are you chasing?

We’ll map them in one platform. Book a 30-minute walkthrough.