Compliance Frameworks

ComplyForm supports 53 compliance frameworks across 7 regions. Assessment is free at every tier — remediation tiers vary by framework.

Tier coverage: Community: 4 · Pro: 11 · Team: 24 · Agency: 36 · Enterprise: 53

Global

Internationally recognized frameworks applicable worldwide.

• SOC 2 Type II — Community
• CIS GCP v2.0 — Community
• CIS Azure v2.0 — Community
• CIS AWS v3.0 — Community
• ISO/IEC 27001 (2022) — Pro
• PCI DSS v4.0 — Pro
• NIST CSF 2.0 — Pro
• CSA CCM v4 — Team
• HITRUST CSF v11.7 — Agency

North America

United States and Canada.

• HIPAA — Pro
• NIST 800-53 Rev. 5 — Pro
• CCPA / CPRA — Pro
• PHIPA — Team
• SOX IT Controls — Agency
• FedRAMP — Agency
• CMMC — Agency
• CJIS — Agency
• FISMA — Agency
• NERC CIP — Agency
• TX-RAMP — Agency
• StateRAMP — Agency
• GLBA — Agency
• FERPA — Agency
• ITAR — Agency

Europe

European Union and European national frameworks.

• GDPR — Pro
• NIS2 Directive — Team
• DORA — Team
• BSI C5 — Team
• ENS — Team

Asia-Pacific

Asia-Pacific region including Australia, Japan, Korea, Singapore.

• IRAP — Team
• K-ISMS-P — Team
• MTCS SS — Team
• OSPAR — Team
• ISMAP — Team

Middle East

Gulf Cooperation Council and wider Middle East.

• NCA ECC — Enterprise
• NCA DCC — Enterprise
• NCA TCC — Enterprise
• NCA CSCC — Enterprise
• NCA OSMACC — Enterprise
• NCA CGIoT — Enterprise
• NCA OTCC — Enterprise
• NCA Telework — Enterprise
• SAMA CSF — Enterprise
• UAE IA — Enterprise
• NCA CCC — Enterprise
• DESC CSP — Enterprise
• CBB Cloud — Enterprise
• CBK CORF Kuwait — Enterprise
• NIA Qatar — Enterprise
• CITRA Kuwait — Enterprise
• MTCIT Oman — Enterprise

South America

• LGPD — Team

Africa

• POPIA — Team