Sign in for live data — showing sample data in the meantime.
Showing sample data — no live connection
Compliance Readiness
Overall
72%
Access Control
85%
Data Security
68%
Vendor Management
60%
Incident Response
75%
Evidence Items
scan_hint
| Evidence Items | Framework | By Domain | Regulation | Status | Owner | |
|---|---|---|---|---|---|---|
| Access Review Policy | soc2 | Access Control | SOC2 | Collected | Security Team | |
| MFA Configuration Audit | soc2 | Access Control | SOC2 | Pending Review | IT Admin | |
| Data Encryption at Rest | iso27001 | Data Security | ISO27001 | Collected | DevOps | |
| Vendor Risk Assessment Q3 | soc2 | Vendor Management | SOC2 | Overdue | Procurement | |
| Incident Response Drill Report | iso27001 | Incident Response | ISO27001 | Collected | Security Team | |
| Password Policy Documentation | soc2 | Access Control | SOC2 | Collected | IT Admin | |
| Network Segmentation Audit | iso27001 | Data Security | ISO27001 | Pending Review | DevOps | |
| SOC 2 Type II Report | soc2 | Vendor Management | SOC2 | Collected | Compliance | |
| Business Continuity Plan | iso27001 | Incident Response | ISO27001 | Overdue | Operations | |
| Data Retention Policy | soc2 | Data Security | SOC2 | Collected | Legal |
Policy Gaps
Vendor Risk
AWSStrong
Last Assessed: 2026-08-01
SlackStrong
Last Assessed: 2026-07-20
NotionModerate
Last Assessed: 2026-07-15
GitHubStrong
Last Assessed: 2026-08-10
ZapierWeak
Last Assessed: 2026-06-01