Compliance guides and checklists for SaaS teams

Explore

• ISO 27001 checklist: scope, risk and evidence — A practical ISO 27001 checklist covering scope, assets, risk assessment, SoA decisions, policies, evidence and audit preparation.
• GDPR checklist for maintainable evidence — A GDPR evidence checklist for SaaS teams covering processor records, vendors, DSARs, DPIAs, breach response and security controls.
• Audit preparation checklist: what to review first — A review-week preparation checklist for evidence freshness, owners, policies, vendors, access reviews and audit packs.
• Vendor security review template — A vendor security review template for supplier intake, evidence requests, risk scoring, approval and reassessment.
• Vendor risk management without a procurement team — A lightweight vendor risk process for startups that need supplier oversight without a procurement team.
• Security questionnaire automation starts with reviewed answers — How to automate questionnaire responses from approved answers, evidence links, policy records and owner review.
• Trust center software: what to publish and what to gate — A guide to public, gated and private trust centre content for buyer security reviews.
• ISO 27001 risk assessment: make decisions reviewable — A practical ISO 27001 risk assessment guide covering criteria, owners, likelihood, impact, treatment and residual risk.