Frameworks

Every framework. One control library.

Compyl cross-maps a single control library to 70+ compliance frameworks, regulations, and standards. Collect your evidence once, satisfy every framework it applies to, and keep them all continuously audit-ready, instead of running a separate project for each.

Request a Demo → See the frameworks

70+

Frameworks

Control library

125+

Integrations

EVIDENCE

MFA enforced · Okta

Collected

SATISFIES ACROSS FRAMEWORKS

SOC 2CC6.1

ISO 27001A.8.5

NIST 800-53IA-2

PCI DSS8.4.2

+ 56 more controls60

Coverage

The frameworks we automate, all from one library

SOC 2ISO 27001ISO 27017ISO 27701ISO 42001HIPAAGDPRCCPAPCI DSSNIST CSFNIST 800-53NIST 800-171CIS v8SOXGLBADORANYDFS 500FedRAMPCMMC 2.0CSA STAR+50 more

Map once

One piece of evidence, every framework it satisfies

Collect a control’s evidence once and Compyl proves it across every framework it maps to, no duplicate work per audit.

Always current

Built so every framework takes less time than the last

Add a new framework and Compyl reuses the controls and evidence you already have, so each new standard is mostly already done.

1 → 60

controls satisfied

70+ frameworks, regulations & standards, and growing, all maintained from a single control library.

Questions about framework coverage

How many frameworks does Compyl support?+

70+ frameworks, regulations, and standards, including SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, NIST CSF, NIST 800-53, ISO 42001, SOX, DORA, FedRAMP, CMMC, and more, with new ones added regularly.

How does one control satisfy multiple frameworks?+

You maintain a single control library. Each control cross-maps to every framework requirement it satisfies, so one piece of evidence proves the same control everywhere it applies.

What if I adopt a new framework later?+

Compyl reuses the controls and evidence you already maintain and maps them to the new framework, so most of the work is already done, and you only close the genuine gaps.

See your frameworks, cross-mapped to your stack.

Collect evidence once, satisfy every framework it applies to, and stay continuously audit-ready.

Request a Demo →

Ready to see GRC YOUR WAY?

One platform for the whole GRC lifecycle — with agentic AI that removes the busywork.

Request a Demo →