Compliance Frameworks
Regulatory Frameworks & Standards
CompliOne supports a wide range of compliance frameworks, privacy regulations, and international standards. Where a reviewed crosswalk links two frameworks, a control you implement once also counts toward the linked one.
Privacy Regulations
GDPR
General Data Protection Regulation
Comprehensive data protection law for EU citizens' personal data
CCPA/CPRA
California Consumer Privacy Act
Consumer privacy rights and business obligations in California
Amendment 13
Israeli Privacy Protection Regulations
Israeli data protection regulations aligned with GDPR standards
LGPD
Lei Geral de Proteção de Dados
Brazil's general data protection law
ISO Standards
ISO 27001:2022
Information Security Management
Requirements for establishing, implementing, and maintaining an ISMS
ISO 27701:2025
Privacy Information Management
Standalone privacy information management system; the 2019 edition remains available for existing programs
ISO 27799:2025
Healthcare Information Security
101 healthcare security controls with assessments, SoA and evidence tracking; the 2016 edition remains available
ISO 27017
Cloud Security Controls
Security controls for cloud services
ISO 27018:2025
Cloud Privacy
2025 cloud processor privacy controls, assessments and policies; the 2019 edition remains available
ISO 42001
AI Management System
Management system for responsible AI development and use
ISO 22301
Business Continuity
Business continuity management systems
Industry Standards
SOC 2 Type II
Service Organization Controls
Trust service criteria for security, availability, and confidentiality
PCI-DSS
Payment Card Industry Data Security
Security standards for organizations handling credit card data
NIST CSF
Cybersecurity Framework
Framework for improving critical infrastructure cybersecurity
HIPAA
Health Insurance Portability and Accountability
Protection of sensitive patient health information
Need another framework?
We're constantly expanding our framework support. Contact us to request a specific framework.