Compliance Frameworks

The international standard for information security management systems (ISMS). AUDT ships with 93 ISO 27001 controls pre-mapped across Evidence Vault™, Control Center™, and Audit Management.

• Full control library with effectiveness scoring
• Evidence mapping and gap analysis
• Audit program generation from control catalogue
• Continuous readiness score per framework

Service Organization Control 2 — Trust Services Criteria covering security, availability, processing integrity, confidentiality, and privacy. AUDT maps 33 SOC 2 controls and supports auditor collaboration via Auditor Collaboration™.

• Trust Services Criteria mapping
• Auditor Collaboration™ — secure audit rooms for external auditors
• Evidence exchange and evidence request workflow
• Control test records and pass/fail history

India’s Digital Personal Data Protection Act 2023. AUDT’s DPDP Privacy™ module tracks data assets, consent records, data subject requests, retention policies, privacy assessments, and cross-border data transfers.

• Data inventory and classification
• Consent management and audit trail
• Data Subject Request (DSR) workflow
• Retention policy enforcement
• Privacy Impact Assessments

Payment Card Industry Data Security Standard. AUDT maps 12 PCI DSS controls and supports cardholder data environment scoping, control testing, and audit evidence collection.

• Cardholder data environment scoping
• Control effectiveness testing
• Evidence collection and storage
• Gap analysis against 12 requirements

Health Insurance Portability and Accountability Act — Administrative, Physical, and Technical Safeguards. AUDT maps 18 HIPAA controls spanning the Security Rule and Privacy Rule.

• Administrative and technical safeguard controls
• Risk analysis and risk management
• Breach notification workflow via Issue Hub™
• BAA-ready audit trail

General Data Protection Regulation — EU data protection law. AUDT’s Privacy module, data subject request workflow, consent management, and data transfer tracking are designed to support GDPR Article 30 Records of Processing Activities (ROPA) and Chapter III data subject rights.

• Data processing register
• Data subject rights fulfilment
• Cross-border transfer documentation
• DPO-ready reporting

The EU Artificial Intelligence Act — risk-based AI governance framework. AUDT’s AI Governance™ module classifies AI systems by risk level, tracks controls, incidents, and compliance records against ISO 42001 and NIST AI RMF alongside EU AI Act requirements.

• AI system risk classification
• AI control library and testing
• Incident tracking and root cause
• ISO 42001 and NIST AI RMF alignment

AUDT ships with 18 built-in regulations including GDPR, DPDP, HIPAA, PCI DSS, RBI CSF, SEBI CSCRF, IRDAI ICS, DORA, NIS2, SOX, and more. Regulatory Intelligence™ monitors changes, extracts obligations, and auto-generates compliance alerts.

• 18 global regulations pre-loaded
• Regulatory change monitor with severity classification
• Obligation extraction and tracking
• AI-powered Compliance Horizon™ forecast