The Platform

Compliance
operating system.

One platform. Every framework. SOC 2, ISO 27001, HIPAA, GDPR, NIST, CMMC. Run it yourself. Self-host it. Own your data.

A
B
C

50+ companies run their compliance on ComplianceOS

Supported Frameworks
SOC 2 ISO 27001 HIPAA GDPR PCI-DSS NIST CMMC + More
Features

Everything you need. Nothing you don't.

📋

Policy Library

Pre-built, customizable policy templates mapped to every framework. Edit, version, publish.

🔍

Gap Analysis

Instant posture assessment. Know exactly where you stand against any framework. Visual heatmaps.

📸

Evidence Collection

GitHub & AWS evidence collectors + open-source scanner add-ons (Prowler, Trivy, Wazuh).

⚠️

Risk Register

Identify, assess, and track risks. Quantified scoring. Remediation workflows. Board-ready reports.

🏢

Vendor Risk

Manage third-party risk. Vendor inventory, DPA tracking, continuous monitoring.

🤖

AI Assistant

AI-powered policy drafting, evidence classification, risk analysis. Multi-LLM cost optimization.

🔗

Integrations

Connect your existing tools. AWS, Azure, GCP, GitHub, Jira, Slack, Okta, Azure AD, and more.

📊

Reporting

Auditor-ready reports in one click. Compliance posture, risk summaries, evidence packages.

🐳

Self-Hosted

Docker one-liner deploy. Your data, your cloud, no vendor lock-in. AGPLv3 open core.

Why Us

Built for builders.

01

One Control, Many Frameworks

Map a control once, satisfy SOC 2 + ISO 27001 + GDPR simultaneously. Stop duplicating work across frameworks.

02

Self-Host or Cloud. Your Choice.

Data sovereignty matters. Deploy on your infrastructure with one Docker command, or use our managed cloud.

03

AI That Actually Saves Money

Multi-LLM routing sends each task to the most cost-effective provider. 10x cheaper than locked-in AI.

Fixed scope · 45 days · one framework

Audit Ready Sprint

Want help getting audit-ready? We run a 45-day sprint for one framework (SOC 2, ISO 27001 or HIPAA): gap analysis, policies, evidence mapped in ComplianceOS, an internal audit dry run and remediation. $12,900 service fee, plus a ComplianceOS license.

Sprint + Professional
$14,492
$12,900 sprint + $1,592/yr Professional license (founding price; $1,990/yr regular)
Sprint + Lifetime
$16,892
$12,900 sprint + $3,992 one-time Lifetime license (founding price; $4,990 regular). Lifetime updates and 1 year of email support.
See the Audit Ready Sprint →

The independent audit is billed separately by your auditor.

Pricing

Or start with a monthly plan.

Free 14-day trial. No credit card. Self-hosted option is free forever.

Starter

DIY

For the solo compliance lead
$99 /month
$990/year (save 17%)
  • 1 Framework
  • Policy Library
  • Evidence Collection
  • Basic Risk Register
  • 1 User Seat
  • Email Support
Start Free Trial →
Most Popular
Growth

The Team

For growing startups
$199 /month
$1,990/year (save 17%)
  • 3 Frameworks
  • Everything in Starter
  • Vendor Risk Management
  • AI Assistant
  • Advanced Reporting
  • 5 User Seats
  • Priority Support
Start Free Trial →
Pro

The Platform

For scaling teams
$299 /month
$2,990/year (save 17%)
  • Unlimited Frameworks
  • Everything in Growth
  • Threat Intelligence
  • Custom Workflows
  • API Access
  • Unlimited Users + SSO
Start Free Trial →
🐳 Want to self-host for free? AGPLv3 open core. Docker one-liner. Learn more →

Frequently asked questions.

Is there a free trial?

Yes. 14 days, full access, no credit card required. The self-hosted version is free forever under AGPLv3.

Can I self-host?

Absolutely. Docker one-liner. Your data stays on your infrastructure. The core runtime is AGPLv3 open source.

Can I switch between cloud and self-hosted?

Yes. Your data is portable. Start with cloud, migrate to self-hosted anytime. Or vice versa.

What if I need help setting up?

We offer installation services: Standard Install ($499, no SSO) or Secure Install ($1,490, incl. SSO & hardening). Or check out our Compliance Sprint if you want us to do everything.

Own your compliance.

Start your free trial today. No credit card. No commitment.