Compyl
Request Demo
Start here Platform Overview A guided, top-to-bottom tour of the entire GRC platform, one connected system, not point tools. Take the tour → 125+ connectorsIntegrationsConnect your cloud, identity, ticketing & security tools, evidence flows in automatically.Explore integrations →
Govern
Agent LibraryComing SoonSpecialized GRC agents.Policy ManagementCurrent, control-aligned policiesContract ManagementTrack every obligationAsset ManagementProtect critical assets
Comply & audit
ComplianceTest once, satisfy manyEvidence StudioAutomated, live evidenceTrust CenterShare your security postureUser Access ReviewsFast, accurate access reviews
Risk & third-party
Risk ManagementRisk in dollars, via FAIRThird Party InsightsObjective vendor risk in minutesVendor Risk ManagementManage third-party risk end to end
Compyl AI
Compyl AIAgentic AI across the platformCompyl CopilotAsk your GRC data anythingQuestionnaire AssistAI-drafted questionnaire answers
125+ integrations, connect your stackRequest a demo →
By industryIndustriesGRC tailored to the exact regulators and frameworks your industry answers to, one control library, mapped to all of them.Explore industries →
Financial ServicesSOX, GLBA, PCI, NYDFS, DORAHealthcareHIPAA, HITECH, PHI, BAAsLegalSOC 2, ISO 27001, OCG, privilege
InsuranceNAIC, GLBA, Model Audit RuleEnergy & UtilitiesNERC CIP, IEC 62443, TSAHigher EducationFERPA, GLBA, NIST 800-171
Six industries, mapped to your regulatorsRequest a demo →
One control library Every framework, mapped Map a single control to every framework it satisfies, test once, prove many. See all frameworks →
Popular
SOC 2ISO 27001HIPAAPCI DSS
Standards
GDPRNIST CSFNIST SP 800-53ISO 42001
More
CCPAMASNIS2
Compliance, automated, how Compyl maps controlsRequest a demo →
Latest Inside Compyl 26.2 AI-powered GRC, from risk to audit, what's new in the platform. Read the post →
Learn
All ResourcesBrowse the full GRC libraryGRC Learning CenterThe complete guide to GRCBlogInfoSec & compliance, trendingGuidesStep-by-step playbooksWebinarsLive & on-demand sessions
Watch & grow
Security SessionsOn-demand episodesCase StudiesResults from real teams
Network
Partner ProgramCompyl Accelerate Partner Program
Company Built by CISOs Our mission: make GRC adapt to how you work, not the other way around. About Compyl →
Company
About UsMission & teamCareersJoin the team
Trust
Our SecurityHow we protect youContact UsTalk to us

News

What Is Shadow AI? How to Find and Govern Ungoverned AI

|

Last updated: September 24, 2026 Shadow AI is any AI tool, model, feature, or agent … What Is Shadow AI? How to Find and Govern Ungoverned AI

AI Governance Framework Comparison: ISO 42001, NIST AI RMF, EU AI Act, and More

|

Last updated: September 22, 2026 The main AI governance frameworks in 2026 are ISO/IEC 42001 … AI Governance Framework Comparison: ISO 42001, NIST AI RMF, EU AI Act, and More

AI Acceptable Use Policy Template: Free, Copy-Ready Policy for Employee AI Use

|

Last updated: September 22, 2026 An AI acceptable use policy (AI AUP) is the document … AI Acceptable Use Policy Template: Free, Copy-Ready Policy for Employee AI Use

Vendor AI Questionnaire Template: 40 Questions to Ask Every AI Supplier

|

Last updated: September 17, 2026 A vendor AI questionnaire is a structured set of questions … Vendor AI Questionnaire Template: 40 Questions to Ask Every AI Supplier

AI Risk Assessment Template (Free, ISO 42001 and NIST AI RMF Aligned)

|

Last updated: September 17, 2026 An AI risk assessment template is a structured worksheet for … AI Risk Assessment Template (Free, ISO 42001 and NIST AI RMF Aligned)

AI Governance Policy Template (Free, ISO 42001 and EU AI Act Aligned)

|

Last updated: September 15, 2026 An AI governance policy is the top-level document that states … AI Governance Policy Template (Free, ISO 42001 and EU AI Act Aligned)

What Is an AI System Inventory? How to Build and Maintain One

|

Last updated: September 15, 2026 An AI system inventory is a maintained register of every … What Is an AI System Inventory? How to Build and Maintain One

AI Risk Assessment Guide: How to Assess AI Systems Step by Step

|
AI risk assessment: likelihood and impact matrix

Last updated: September 10, 2026 An AI risk assessment is a structured process for identifying … AI Risk Assessment Guide: How to Assess AI Systems Step by Step

ISO 42001 vs EU AI Act vs NIST AI RMF: How the Three Fit Together

|
ISO 42001 vs EU AI Act vs NIST AI RMF: how the three fit together

Last updated: September 10, 2026 ISO 42001, the EU AI Act, and the NIST AI … ISO 42001 vs EU AI Act vs NIST AI RMF: How the Three Fit Together

NIST AI RMF vs ISO 42001: Which One Do You Actually Need?

|
NIST AI RMF vs ISO 42001 comparison

Last updated: September 3, 2026 The NIST AI RMF and ISO 42001 solve different problems. … NIST AI RMF vs ISO 42001: Which One Do You Actually Need?

By clicking “Accept”, you agree to the use of cookies on your device in accordance with our Privacy and Cookie policies
Accept