Controls
20 controls across SOC 2, GDPR, and HIPAA
10
Satisfied
5
In Progress
3
At Risk
2
Not Started
REFCONTROLDOMAINSTATUSEVIDENCEUPDATED
CC1.1
Control environment commitment to integrityControl EnvironmentSatisfied
4
Jun 5, 2026CC2.1
Information and communication policiesCommunicationSatisfied
3
Jun 3, 2026CC3.1AI
Risk assessment objectivesRisk AssessmentIn Progress
2
Jun 1, 2026CC6.1
Logical access security — user authenticationLogical AccessSatisfied
6
Jun 7, 2026CC6.2
Role-based access controlsLogical AccessSatisfied
5
Jun 6, 2026CC6.3AI
Removal of access upon terminationLogical AccessIn Progress
1
May 28, 2026CC7.1
Vulnerability and infrastructure monitoringSystem OperationsAt Risk
0
May 15, 2026CC7.2AI
Incident detection and response proceduresSystem OperationsIn Progress
2
Jun 2, 2026CC8.1
Change management process and approvalChange ManagementSatisfied
7
Jun 4, 2026A1.1
Availability monitoring and alertingAvailabilityAt Risk
1
May 20, 2026GDPR-6
Lawful basis for processing personal dataData ProcessingSatisfied
4
Jun 1, 2026GDPR-13
Transparency — privacy noticeIndividual RightsSatisfied
3
May 25, 2026GDPR-17
Right to erasure (right to be forgotten)Individual RightsSatisfied
2
Jun 3, 2026GDPR-32
Security of processing — encryption at restData SecuritySatisfied
5
Jun 5, 2026GDPR-33AI
Notification of personal data breachBreach ManagementIn Progress
1
May 28, 2026HIPAA-164.308a1
Security management process — risk analysisAdministrative SafeguardsAt Risk
0
May 10, 2026HIPAA-164.308a3AI
Workforce clearance and access managementAdministrative SafeguardsIn Progress
1
May 29, 2026HIPAA-164.312a1
Access controls — unique user identificationTechnical SafeguardsSatisfied
4
Jun 2, 2026HIPAA-164.312e1
Transmission security — TLS enforcementTechnical SafeguardsNot Started
0
—HIPAA-164.316a1
Documentation and policy review processPolicies and ProceduresNot Started
0
—Showing 20 of 20 controls