Compliance + Standards
The security controls behind the frameworks.
Almost every compliance framework shares a common core: encryption, access control, logging and monitoring, vulnerability management, and regular testing. That technical core is what we build and test. This is the list of frameworks whose security requirements our work maps to - not a list of certifications we hold or full programs we run. We are not a certification body, we do not issue attestations, and the audit, policy, and legal work stays with your auditor and counsel.
India + South Asia
Frameworks whose technical security requirements our controls help you meet. The legal and reporting obligations are for your counsel.
USA
For US clients and Indian clients selling into the US - the security-controls side of each.
EU + global
The security-of-processing and ISMS-controls side. Consent, transfers, and DPO duties sit with privacy counsel.
Security testing standards we follow
The public methodologies our penetration testing and assessments are run against.
Cloud + infra stacks we work with
Vendor-neutral, with no resale or referral arrangement with any of these. We pick what fits your team, geography, and posture - not what pays us a commission.
Free compliance tools
Free tools to size up the frameworks
SOC 2 Cost & Timeline Estimator
Estimate the audit fees, tooling spend, internal effort, and timeline for SOC 2 Type I or II.
Run it freeISO/IEC 27001:2022ISO 27001 Cost & Timeline Estimator
Estimate certification-audit fees, internal ISMS effort, and a realistic timeline for ISO 27001.
Run it freeGDPR · DPDP · CCPA · LGPDWhich Privacy Laws Apply to My Business?
Answer five questions and get a list of the privacy regimes that likely apply to you - and why.
Run it freeWorking toward a framework not listed here?
Tell us the framework, your business, and your timeline. We will be honest about which parts we can do (the technical security controls) and which parts need an auditor or a lawyer.