ComplyEncrypt
ISO & GDPR frameworks
Find the right pathway for your organization, from today's available products to the next frameworks on our roadmap.
Choose your compliance framework.
Current pricing is a one-time purchase per framework. ISO 27001, EU GDPR and ISO 9001 are available today. Explore the dedicated pages below for our coming-soon and roadmap pathways.
AI-automated ISMS aligned to ISO 27001:2022 — your workspace runs the entire program for you.
- AI-driven gap analysis & roadmap
- Auto-generated Statement of Applicability
- AI-drafted policies (40+) tailored to you
- Continuous evidence collection & audit pack
AI-automated privacy workflows for EU & UK data protection compliance.
- AI-assisted DPIA workflows
- Automated consent & ROPA management
- Guided DSAR workflow
- Live privacy posture dashboard
AI-automated QMS aligned to ISO 9001:2026 — consistent processes, satisfied customers.
- QMS documentation
- Process mapping
- Internal audit toolkit
- Continual improvement
Environmental management systems — measure, manage, and reduce impact.
- Environmental aspects register
- Compliance obligations
- Objectives & targets
- EMS audit pack
Occupational health & safety — protect your workforce, prevent incidents.
- Hazard identification
- Risk & opportunity register
- Incident reporting
- Worker consultation
Planned pathways
Not available to buy yet and no prices announced. Express purchase interest to help us decide what we build next.
Privacy information management
Privacy information management — a planned pathway for controllers and processors.
AI management
AI management — a planned pathway for responsible AI governance.
Medical-device quality management
Medical-device quality management — a planned pathway for regulated product teams.
Energy management
Energy management — a planned pathway to track and improve energy performance.
Digital operational resilience
Digital operational resilience for EU financial entities and their ICT providers — planned resilience workflows.
EU cybersecurity for essential and important entities
EU cybersecurity for critical and digital providers — planned Article 20/21 documentation and training.
Business continuity management
Business continuity management, integrated with cyber incident response and disaster recovery.
IT service management
IT service management — structured, secure handling of infrastructure, changes and access.
Cybersecurity Framework 2.0
NIST CSF 2.0 — planned guides aligning the six Core Functions with ISO 27001 controls.
AICPA Trust Services Criteria
AICPA Trust Services Criteria — planned mapping to an ISO 27001-based ISMS.
Need multiple frameworks? Talk to sales for bundle pricing.
Pricing note: The framework license is a one-time purchase. A small retainer fee applies for each user of the system, covering platform hosting, AI usage, and ongoing support.