How many frameworks does Compyl support?
70+ frameworks out of the box, including SOC 2, ISO 27001, ISO 42001, HIPAA, GDPR, CCPA, PCI DSS, NIST CSF, NIST SP 800-53, MAS, and NIS2, plus custom frameworks you define. One control library is cross-mapped to all of them.
Can one control satisfy multiple frameworks?
Yes. Compyl maps each control and its evidence across every framework it satisfies. Evidence of enforced MFA, for example, can satisfy SOC 2 CC6.1, ISO 27001 A.8.5, PCI DSS 8.4, and NIST 800-53 IA-2 at once, collected one time.
How fast can I add a new framework?
Because your evidence is mapped to a single control library, adding the next framework mostly reuses what you already have. Compyl shows coverage instantly, so only the net-new requirements need attention, making the second and third framework far faster than the first.
Can I add a custom or industry-specific framework?
Yes. Beyond the prebuilt catalog, you can define custom frameworks and internal control sets, then cross-map them to your existing controls and evidence so they stay continuously monitored alongside everything else.
How does Compyl keep framework evidence audit-ready?
Compyl collects evidence automatically and continuously scores every artifact on relevance, freshness, and completeness with Evidence Health. Gaps and drift surface weeks before an audit, so each framework stays in a live, audit-ready state.
