Compliance standards explained
Learn what ISO 27001, GDPR, SOC 2, NIS2 and DORA mean, who they affect and what evidence teams prepare.
Explore
- What is ISO 27001? A practical guide for SaaS teams — Learn what ISO 27001 is, how an ISMS, risk assessment and certification work, and how SaaS teams prepare controls and audit evidence.
- What is GDPR? A practical evidence guide for SaaS teams — Learn what GDPR is, who it applies to, its core data-protection principles, and which privacy and security records SaaS teams should maintain.
- What is SOC 2? Reports, criteria and readiness explained — Learn what SOC 2 is, how Type I and Type II reports differ, what the Trust Services Criteria cover, and how SaaS teams prepare audit evidence.
- What is NIS2? Scope and readiness explained — Learn what the NIS2 Directive is, which sectors it covers, and how to prepare governance, cyber-risk, supply-chain and incident evidence.
- What is DORA? ICT risk and resilience explained — Learn what the EU Digital Operational Resilience Act covers and how financial teams prepare ICT-risk, incident, testing and supplier evidence.
- Custom controls with clear labels — Model internal controls, customer commitments and auditor requests with owners, evidence and scope labels.