Structured audits
Plan activities, timeframe, scope and requirements for GDPR, NIS2, DORA, ISO 27001, AI Act or Model 231.
Operational loop
Audits and controls with a clear chain of responsibility.
Define scope, objectives, standards and deadlines. Connect controls, systems, assets, policies and evidence without reconstructing the context for every review.
Control ownership matrix
Every control shows its standard, category and assigned owners, with quick actions to assign or remove owners.
What it includes
Control library
Map controls to frameworks, owners, policies, systems, assets, requests and evidence.
Gaps and ownership
Use Gap Snapshot and the ownership matrix to see what is missing and who needs to act.
Capability-based permissions
Roles and permissions are built around capabilities and can be enabled or restricted per module and framework, per tenant.
How it works
Define the scope
Create the audit with standards, timeframe and a responsible owner.
Connect the controls
Map library controls to policies, systems, assets and evidence requests.
Assign owners and check the gaps
Use the ownership matrix and Gap Snapshot to see what is missing.
Prepare the review
Request missing evidence and include the audit in the Audit Day Pack when it is ready.
Connects with
Evidence that retains context, integrity and review status.
An operational repository for documents and proof: not an isolated archive, but the connection point between a control, policy, supplier, audit and register.
ExploreTurn a finding into verifiable remediation.
Centralise findings from audits, incidents, tests, privacy or manual entry and keep severity, owner, deadline, action and closure proof together.
ExplorePrepare review material without chasing attachments.
Audit Day Pack 2.0 gathers the audit scope into a background-generated ZIP, structured for reviewers and readable by external systems.
ExploreFrequently asked questions
Can I manage several frameworks in the same audit?
Yes, an audit can reference several standards (GDPR, NIS2, DORA, ISO 27001, AI Act, Model 231), and controls stay mapped to the relevant frameworks.
How do I see what is missing before a review?
Gap Snapshot freezes the state of your controls at a point in time, highlighting what lacks evidence or an owner.
Who can edit audits and controls?
Access is governed by roles and capability-based permissions, which can be enabled per module and framework at the tenant level.