Every framework below is composed from the same 58 readymade compliance primitives — running as live control checks, not a PDF checklist. Enable a compliance and the platform assembles, configures and continuously verifies its controls.
General Data Protection Regulation
Composed from 36 primitives
California Consumer Privacy / Privacy Rights Act
Composed from 20 primitives
Personal Information Protection and Electronic Documents Act
Composed from 18 primitives
Lei Geral de Proteção de Dados
Composed from 25 primitives
Digital Personal Data Protection Act 2023 + 2025 Rules
Composed from 24 primitives
Personal Information Protection Law
Composed from 19 primitives
ePrivacy Directive — cookies & electronic communications
Composed from 6 primitives
Family Educational Rights and Privacy Act
Composed from 10 primitives
Children's Online Privacy Protection Act
Composed from 13 primitives
CAN-SPAM Act
Composed from 3 primitives
Two enabled compliances configuring the same primitive differently? The engine flags the conflict and resolves it field-by-field — strictest wins.
Privacy + Security + Breach Notification Rules
Composed from 32 primitives
Health Information Technology for Economic and Clinical Health Act
Composed from 11 primitives
Trust Services Criteria
Composed from 36 primitives
Information Security Management System
Composed from 40 primitives
Privacy Information Management System
Composed from 22 primitives
NIST Cybersecurity Framework
Composed from 24 primitives
Security & Privacy Controls
Composed from 42 primitives
Protecting Controlled Unclassified Information
Composed from 26 primitives
CIS Critical Security Controls v8
Composed from 23 primitives
Payment Card Industry Data Security Standard v4.0
Composed from 30 primitives
Federal Risk and Authorization Management Program
Composed from 37 primitives
State Risk and Authorization Management Program
Composed from 32 primitives
Cybersecurity Maturity Model Certification
Composed from 26 primitives
HITRUST Common Security Framework
Composed from 38 primitives
23 NYCRR 500 Cybersecurity Regulation
Composed from 23 primitives
Sarbanes-Oxley Act
Composed from 17 primitives
Safeguards + Privacy Rule
Composed from 18 primitives
Anti-Money Laundering / Bank Secrecy Act
Composed from 14 primitives
Markets in Financial Instruments Directive
Composed from 11 primitives
Payment Services Directive 2
Composed from 11 primitives
2023 Cybersecurity Disclosure Rules
Composed from 8 primitives
Office of Foreign Assets Control Sanctions
Composed from 11 primitives
FDA Electronic Records & Electronic Signatures
Composed from 20 primitives
FDA Current Good Manufacturing Practice
Composed from 18 primitives
Data integrity / ALCOA+ umbrella
Composed from 21 primitives
Computerized System Validation
Composed from 11 primitives
EU GMP Computerised Systems
Composed from 20 primitives
Good Distribution Practice
Composed from 15 primitives
Good Laboratory Practice (21 CFR 58)
Composed from 14 primitives
Good Clinical Practice
Composed from 19 primitives
Quality System Regulation (21 CFR 820)
Composed from 18 primitives
Medical Devices Quality Management
Composed from 16 primitives
Medical Device Regulation 2017/745
Composed from 18 primitives
Occupational Safety and Health Administration
Composed from 15 primitives
RCRA / Clean Air / Clean Water / TSCA
Composed from 15 primitives
Occupational Health & Safety Management
Composed from 15 primitives
Environmental Management
Composed from 13 primitives
Registration, Evaluation, Authorisation of Chemicals
Composed from 12 primitives
Food Safety Modernization Act — Preventive Controls
Composed from 16 primitives
Hazard Analysis Critical Control Points
Composed from 12 primitives
Food Safety Management
Composed from 15 primitives
Safe Quality Food (GFSI)
Composed from 14 primitives
Brand Reputation Compliance Global Standards
Composed from 15 primitives
Federal Information Security Management Act
Composed from 33 primitives
International Traffic in Arms Regulations
Composed from 16 primitives
Export Administration Regulations
Composed from 16 primitives
252.204-7012 Controlled Unclassified Information
Composed from 27 primitives
Criminal Justice Information Services
Composed from 23 primitives
Critical Infrastructure Protection (Energy)
Composed from 26 primitives
Federal Aviation Administration
Composed from 14 primitives
Motor Carrier & Transport Safety
Composed from 10 primitives
Accessibility Standards
Composed from 5 primitives
Artificial Intelligence Act
Composed from 19 primitives
Quality Management
Composed from 16 primitives
58 reusable controls in 12 categories. Audit trails, e-signatures, retention clocks, CAPA loops — implemented once, reused by every framework above.
A
8 primitives
B
7 primitives
C
5 primitives
D
5 primitives
E
4 primitives
F
3 primitives
G
4 primitives
H
3 primitives
I
4 primitives
J
6 primitives
K
4 primitives
L
5 primitives