16 compliance frameworks,
one control library.
Security, privacy, AI governance and the EU digital stack, all on one shared evidence layer.
ComplyEasyAI has 16 in-depth framework guides: SOC 2, ISO 27001, NIST CSF, PCI DSS, GDPR, HIPAA, CCPA, India DPDPA, EU AI Act, NIST AI RMF, ISO 42001, AIUC-1, DORA, DMA, DSA and CSRD. Its in-app catalogue covers 150+ frameworks and standards, and shared controls are mapped once, so each new framework mostly reuses evidence you already collect.
- Security · 4
- Privacy · 4
- AI Governance · 4
- EU Digital · 4
TL;DR
- 16 in-depth framework guides across security, privacy, AI governance and EU digital regulation.
- 150+ frameworks and standards in the in-app catalogue; Growth and Visionary plans can build custom frameworks.
- Shared controls are mapped once, so each new framework mostly reuses evidence you already collect.
- We track regulatory changes and update the shared control library once for every framework that uses it.
Reviewed by the ComplyEasyAI compliance teamLast reviewed
Which frameworks does ComplyEasyAI cover?
ISO 27001
ISO/IEC 27001:2022 (+Amd 1:2024): Annex A mapping and Statement of Applicability.
ExploreCCPA
CCPA/CPRA consumer rights, sensitive-data limits and automated decision-making opt-outs.
ExploreIndia DPDPA
DPDP Act 2023 and Rules 2025 — consent, Data Fiduciary duties and Data Principal rights.
ExploreEU AI Act
Risk classification, GPAI and transparency duties, and the 2027–2028 high-risk deadlines.
ExploreAIUC-1
Six-pillar certification for AI agents — data, security, safety, reliability, accountability, society.
ExploreDORA
ICT risk, incident reporting and resilience testing, applying since 17 January 2025.
ExploreCSRD
ESRS reporting for companies above 1,000 employees and €450M turnover (Omnibus I).
ExploreHow does mapping once reduce the work?
Map once, reuse everywhere. Most frameworks share the majority of their controls. ComplyEasyAI maps shared controls a single time, so each new framework mostly reuses evidence you already have.
ONE EVIDENCE LAYER
Framework FAQ
Which compliance framework should I start with?
Start with the one your customers or regulators ask for. B2B SaaS teams usually start with SOC 2 for US buyers or ISO 27001 for international buyers. Teams handling EU personal data add GDPR, and teams building AI add the EU AI Act, ISO 42001 or AIUC-1.
Can one control satisfy several frameworks?
Yes. Access reviews, encryption, change management and logging appear in almost every framework. ComplyEasyAI maps each control to every requirement it satisfies, so one piece of evidence counts across SOC 2, ISO 27001, GDPR, HIPAA and the rest.
What if my framework isn't listed?
The in-app catalogue covers 150+ frameworks and standards, including ISO 27701, CIS Controls, FedRAMP, HITRUST, PIPEDA and LGPD, and Growth and Visionary plans can build custom frameworks.
Which frameworks are you chasing?
We’ll map them in one platform. Book a 30-minute walkthrough.