SOC 2
SOC 2
Connect Trust Services Criteria to the controls, evidence, and owners that keep your program moving.
Global & Regional Framework Coverage
One platform. 100+ frameworks.
Manage cybersecurity, privacy and AI governance across global standards and regional regulations in one connected system. Controllo links frameworks with structured controls, applicable risks, policies, procedures and evidence, reducing repetitive work while keeping every requirement traceable.
100+ frameworks.7,000+ controls.200,000+ connected relationships.
Find the Framework That Matters to You
Global standards. Regional requirements. All in one place.
Search or filter Controllo's framework library by governance domain or region to quickly find the standards and regulations relevant to your organization.
Showing 33 of 33 frameworks
Explore SOC 2
ISO27001
ISO/IEC 27001
Keep risks, controls, evidence, and improvement activity connected throughout the certification lifecycle.
EUGDPR
EU GDPR
Keep accountability, controls, evidence, and risk decisions visible across the privacy program.
HIPAA
HIPAA
Organize administrative, physical, and technical safeguard work with clear ownership and evidence.
PCI DSS4.0.1
PCI DSS 4.0.1
Organize cardholder data controls, evidence, responsibilities, and remediation across the PCI DSS lifecycle.
NISTCSF 2.0
NIST CSF 2.0
Structure governance, identification, protection, detection, response, and recovery work around the NIST CSF.
CMMC
CMMC
Coordinate CMMC practices, ownership, evidence, and assessment readiness across the defense supply chain.
FedRAMP800-53
FedRAMP / NIST SP 800-53
Connect FedRAMP baselines derived from NIST SP 800-53 to implementation evidence, ownership, and assessment work.
ISO27701
ISO/IEC 27701
Connect privacy controls, controller and processor responsibilities, evidence, and improvement activity.
California CCPA / CPRA
California CCPA / CPRA
Keep consumer rights, data practices, controls, requests, and evidence connected across the program.
EU AIAct
EU AI Act
Connect AI system classification, accountable owners, risk controls, documentation, and evidence.
ISO42001
ISO/IEC 42001
Structure AI governance responsibilities, risks, controls, and evidence across the management system.
TexasTRAIGA
Texas TRAIGA
Organize prohibited-use safeguards, disclosure duties, governance decisions, and supporting evidence.
K-AI
South Korea AI Basic Act
Connect AI governance duties, risk measures, transparency work, and supporting documentation.
CSASTAR for AI
CSA STAR for AI
Organize AI security and governance controls, assessment responses, evidence, and assurance activity.
ColoradoADMT Act
Colorado ADMT Act
Connect technical documentation, consumer notices, human review, ownership, and evidence for Colorado AI requirements.
NIS 2
NIS 2
Connect NIS 2 governance, risk management, incident response, and supply-chain requirements to accountable work.
DORA
DORA
Bring ICT risk, incident, resilience testing, and third-party oversight into one connected operating view.
CSACCM 4.1
CSA CCM 4.1
Map cloud security requirements to controls, implementation context, evidence, and accountable owners.
ISO20000-1
ISO/IEC 20000-1
Coordinate service management requirements, accountable owners, operating records, and improvement activity.
ISO22301
ISO 22301
Connect continuity requirements, risks, recovery plans, tests, and evidence in one reviewable program.
SEBICSCRF
SEBI CSCRF
Structure SEBI CSCRF requirements, ownership, evidence, and resilience activities in one governed program.
IRDAI
IRDAI Cyber Security Guidelines
Connect the IRDAI guidelines to controls, responsible teams, supporting evidence, and review activity.
SBOM
CERT-In SBOM Guidelines
Structure software bill-of-material requirements, ownership, supporting records, and technical review work.
RBI
RBI IT Governance Directions
Connect RBI technology governance, risk, control, assurance, and resilience requirements to operating work.
ISR
Dubai Government ISR
Organize ISR requirements, implementation ownership, evidence, and corrective work in one connected view.
BSIC5:2020
BSI C5:2020
Connect cloud control criteria, system context, evidence, and attestation preparation across the program.
CyberEssentials
Cyber Essentials
Track the five Cyber Essentials control areas, implementation work, evidence, and assessment readiness.
DPDPAct 2023
DPDP Act, 2023
Connect personal data responsibilities, consent, safeguards, rights, and supporting evidence to accountable work.
UKGDPR
UK GDPR
Connect UK privacy obligations to processing records, controls, risk decisions, and supporting evidence.
UAEPDPL
UAE PDPL
Coordinate privacy obligations, accountable owners, safeguards, rights requests, and program evidence.
CanadaPIPEDA
Canada PIPEDA
Connect fair information principles, safeguards, consent, access, and supporting records to operating work.
SingaporePDPA
Singapore PDPA
Organize consent, purpose, safeguards, access, correction, breach, and accountability work in one view.
Connected Compliance
Work across frameworks without starting over.
Controllo connects similar controls, applicable risks, policies, procedures and evidence across frameworks, so teams can see where existing compliance work supports another requirement.
Implement once. Reuse where relevant. Keep the audit trail clear.
Control sourceAccess review
Owner, risk, policy reference and evidence packet stay linked.
- SOC 2CC6.2
- ISO 27001A.5.18
- GDPRArt. 32
- HIPAA164.308
- NIST CSFPR.AA
Reused evidencePolicy, access export, reviewer sign-off
- Structured ControlsWork through clearly organized controls instead of static framework documents.
- Connected MappingsSee relationships between similar requirements across multiple frameworks.
- Policies & EvidenceKeep supporting documentation connected to the controls it helps demonstrate.
- Secura AIAnalyze implementation and supporting documents to identify gaps and recommendations at the control level.
Build a Connected Compliance Program
Start with one framework. Scale to many.
Whether you are preparing for SOC 2, ISO 27001, GDPR, the DPDP Act, ISO 42001 or another global or regional requirement, Controllo gives your team one consistent way to manage the work behind compliance.
One connected GRC platform for cybersecurity, privacy and AI governance.