All tools
Operations
Compliance & Risk Assistant
Pro tier and above
AI-drafted policies, a live risk register, framework checklists (SOC 2-lite, HIPAA-lite, GDPR, PCI SAQ-A, CCPA), and an incident + attestation log — all in one workspace.
What you can do
- Generate a starter policy from a business profile
- Add and score risks with mitigation and residual scores
- Log incidents with severity and corrective action
- Track framework controls with evidence notes
- Capture yearly staff attestations against a policy
Use it when you want to
- Standing up a first-pass security program before customer or investor diligence
- Preparing for a SOC 2 readiness assessment
- Documenting HIPAA/GDPR handling for a small ops team
- Keeping a living risk register with quarterly reviews
Tour
1. Compliance workspace
Policies, risks, controls, incidents, and attestations — one page, entity-aware.
2. Five tabs
Switch between Policies, Risks, Controls, Incidents, and Attestations.
3. AI policy drafts
Describe your business once and generate ready-to-adopt policies you can edit and mark active.