Track, analyze, and manage your organization's compliance posture across all regulatory frameworks from a single dashboard.
Fully Compliant
Partially Compliant
Non-Compliant
Overall Compliance
| Regulation / Framework | Category | Region | Status | Compliance Score | Last Audit | Next Review | |
|---|---|---|---|---|---|---|---|
GDPRGeneral Data Protection Regulation |
Data Privacy | European Union | Compliant |
94%
|
2025-01-15 | 2025-07-15 | |
📋 Key RequirementsData Subject Rights✓ Met
Lawful Basis Processing✓ Met
DPO Appointed✓ Met
Data Breach Notification✓ Met
Privacy by Design⚠ Partial
DPIA Completed✓ Met
📊 Compliance DetailsTotal Requirements54
Fully Met51
Partially Met3
Not Met0
Responsible TeamLegal & IT
Assigned OfficerMaria Santos
⚠️ Identified Gaps• Privacy by Design — documentation incomplete for 2 systems
• Cookie consent banner — updated (resolved 2025-01-10)
• Data retention schedule — finalized (resolved 2024-12-20)
|
|||||||
HIPAAHealth Insurance Portability & Accountability Act |
Healthcare | United States | Compliant |
91%
|
2025-02-01 | 2025-08-01 | |
📋 Key RequirementsPrivacy Rule✓ Met
Security Rule✓ Met
Breach Notification✓ Met
BAAs in Place✓ Met
Risk Assessment✓ Met
📊 Compliance DetailsTotal Requirements42
Fully Met38
Partially Met4
Not Met0
Assigned OfficerDr. Alan Park
⚠️ Identified Gaps• Workforce training — 3 employees pending recertification
• Incident response plan — updated (resolved 2025-01-28)
|
|||||||
SOXSarbanes-Oxley Act |
Financial | United States | Compliant |
88%
|
2025-01-20 | 2025-07-20 | |
📋 Key RequirementsSection 302 — Certifications✓ Met
Section 404 — Internal Controls✓ Met
Section 409 — Disclosures✓ Met
Section 802 — Record Retention✓ Met
📊 Compliance DetailsTotal Requirements36
Fully Met32
Partially Met4
Responsible TeamFinance & Audit
⚠️ Identified Gaps• Access controls — review pending for 2 legacy systems
• Change management log — updated (resolved 2025-01-22)
|
|||||||
CCPA / CPRACalifornia Consumer Privacy Act |
Data Privacy | United States (CA) | Partial |
72%
|
2025-02-10 | 2025-05-10 | |
📋 Key RequirementsRight to Know✓ Met
Right to Delete✓ Met
Right to Opt-Out⚠ Partial
Service Agreement Updates✗ Not Met
Privacy Notice Updates✓ Met
📊 Compliance DetailsTotal Requirements48
Fully Met30
Partially Met12
Not Met6
Assigned OfficerJames Carter
⚠️ Identified Gaps• Opt-out mechanism — needs global coverage implementation
• Service agreements — 4 vendor contracts need CPRA addenda
• Privacy notice — updated for CPRA (resolved 2025-01-15)
|
|||||||
ISO 27001Information Security Management System |
Info Security | Global | Compliant |
96%
|
2025-01-08 | 2025-07-08 | |
📋 Key RequirementsRisk Assessment Process✓ Met
Access Control Policy✓ Met
Incident Management✓ Met
Business Continuity✓ Met
Supplier Security✓ Met
📊 Compliance DetailsTotal Controls93
Implemented89
Partially4
Certification Valid Until2026-03-15
⚠️ Identified Gaps• Cryptographic key management — review needed
• Physical security — updated after office move (resolved 2024-12-10)
|
|||||||
PCI DSSPayment Card Industry Data Security Standard |
Info Security | Global | In Progress |
65%
|
2025-02-20 | 2025-06-20 | |
📋 Key RequirementsNetwork Security✓ Met
Data Protection⚠ Partial
Vulnerability Mgmt✓ Met
Access Control⚠ Partial
Monitoring & Testing✓ Met
📊 Compliance DetailsTotal Requirements12
Fully Met7
In Progress5
Target Completion2025-06-20
⚠️ Identified Gaps• Cardholder data encryption — key rotation needed
• Access control — least privilege review pending
• Network segmentation — implemented (resolved 2025-02-01)
|
|||||||
OCC / EEOCEmployment & Anti-Discrimination Guidelines |
Employment | United States | Non-Compliant |
45%
|
2025-02-05 | 2025-04-05 | |
📋 Key RequirementsAnti-Discrimination Policy✗ Not Met
Harassment Prevention✗ Not Met
Reasonable Accommodation✓ Met
Pay Equity Analysis⚠ Partial
Complaint Procedures✗ Not Met
📊 Compliance DetailsTotal Requirements30
Fully Met10
Partially Met4
Not Met16
Urgency🔴 Critical
⚠️ Identified Gaps• Anti-discrimination policy — not yet drafted
• Harassment prevention — training program missing
• Complaint procedures — formal process needed
• Pay equity — annual analysis overdue
|
|||||||
UK ICO / UK-GDPRUK Information Commissioner's Office Guidelines |
Data Privacy | United Kingdom | Compliant |
87%
|
2025-01-25 | 2025-07-25 | |
📋 Key RequirementsUK-GDPR Registration✓ Met
Data Protection Policy✓ Met
ICO Fee Payment✓ Met
7 Principles Alignment✓ Met
📊 Compliance DetailsTotal Requirements46
Fully Met40
Partially Met6
Assigned OfficerEmily Watson
⚠️ Identified Gaps• International transfers — adequacy decision review needed
• ICO registration — renewed (resolved 2025-01-20)
|
|||||||
See how different frameworks overlap and share common requirements.
European Union — Data Protection
United States — Healthcare Privacy
United States — Corporate Finance
See which of your policies satisfy requirements across multiple frameworks.
| Policy Name | Frameworks | Status |
|---|---|---|
| Data Retention Policy | GDPR, CCPA, UK-GDPR | ✓ Active |
| Privacy Notice | GDPR, CCPA, UK-GDPR, HIPAA | ✓ Active |
| Data Breach Response Plan | GDPR, HIPAA, PCI DSS | ✓ Active |
| Vendor Assessment Policy | GDPR, ISO 27001, PCI DSS | ✓ Active |
| Consent Management | GDPR, CCPA, UK-GDPR | ⚠ Review |
| Policy Name | Frameworks | Status |
|---|---|---|
| Access Control Policy | SOX, ISO 27001, PCI DSS, HIPAA | ✓ Active |
| Incident Response Plan | ISO 27001, PCI DSS, HIPAA, SOX | ✓ Active |
| Business Continuity Plan | ISO 27001, SOX, PCI DSS | ✓ Active |
| Encryption Standards | PCI DSS, HIPAA, ISO 27001 | ⚠ Review |
| Anti-Discrimination Policy | OCC / EEOC | ✗ Missing |