Industrialise your method.
- Import your internal framework and reuse it from one client to the next
- Audit on evidence with a consistent scale
- Keep the history for the next review
Governance for your engagements, structured and deliverable.
GRC consultant, auditor, virtual CISO or technical consultant: ready-to-use frameworks, one workspace per client, and deliverables that come straight out of the platform. You keep your time for the substance, whether method or implementation.
Consultant plan from €4,500/year excl. VAT: 3 clients included, each on the Business plan.
CompliKey
Company
Client A
Scope
Internal IS
Home
Dashboard
SoA
Compliance
Audit
Tasks
Documents
Risks
Firm's logo
Client's logo
Statement of applicability
Client A · Internal IS · version 2.0
Access controlIncluded
Secure developmentExcluded, justified
Supplier managementIncluded
In preparation
Consolidated portfolio view of all your clients
You secure. CompliKey structures the governance.
- NIS2, CyFun or ReCyF ready to use: no framework to build
- Your technical artefacts (configuration, ticket, report) referenced as evidence, without copying
- Statement of applicability and management report generated from your assessments
Your engagement, before and after
Less rebuilding, more billable time on the substance.
| Step | With Excel, Word and Drive | With CompliKey |
|---|---|---|
| Client's framework | Copied into a new workbook for every engagement | Imported once, reused and shared |
| Audit | Scattered notes, home-made grid | Control-by-control scoring on evidence, history kept |
| Findings | Frozen in the Word report | Linked to controls and turned into tracked remediation |
| SoA | Rebuilt and reformatted by hand | Generated from the same data, versioned, exported to PDF |
| After the engagement | Follow-up stops with the invoice | The client keeps a living action plan; you keep the relationship |
A typical engagement
From framing to the next review, in the same client workspace.
-
Week 1
1Frame
Create the client workspace, choose frameworks and scopes, import the internal framework if needed.
Structured scope -
Weeks 2 to 3
2Audit
Score each control on evidence, qualify gaps and nonconformities.
Audit report -
Debrief
3Present
Present maturity, priorities and the justified statement of applicability.
Versioned SoA -
Your expertise
4Implement
You implement the controls; each action becomes a tracked task, each result referenced evidence.
Tasks and evidence -
After the engagement
5Follow up
Prepare the next review from the history, without starting from scratch.
Living action plan
MCP server · Included
Discover the MCP server
Prepare your client reviews from your AI assistant.
Ask Claude, ChatGPT or Copilot for a client's overdue remediation items or compliance summary, then have the tasks created. The assistant acts with your permissions and publishes no audit without your approval.
Built to run several clients, not a single organisation.
One workspace per client
Each client has its own workspace, scopes and users, with logical separation of data.
Your internal frameworks
Import your method; if a control already exists, choose to share it or duplicate it.
Precise roles
Administrator, contributor, reader, consultant: the client sees what they need to see.
Evidence-based internal audit
A score per control, backed by evidence, in an evidence-based audit approach.
Exported deliverables
Audit report and justified, versioned statement of applicability exported to PDF; data to CSV.
Your own compliance
Run your firm's own compliance in the same tool.
“At last an affordable platform to frame my engagements.”
Quote translated from French.
Consultant plan
From €4,500/year excl. VAT
- 3 clients included, each on the Business plan: their users count towards that plan, not yours
- 1 user for you, the consultant
- Internal audit, statement of applicability, treatment plan, remediation
- Import of your internal frameworks
- Additional client or moving a client to Advanced: options you activate directly in the platform
Only one client? A Business plan is enough (€1,990/year excl. VAT). From the second client, the Consultant plan pays off: each of your clients gets the Business plan, included in your subscription, and you adjust your portfolio with options, directly in the platform (additional client, moving a client to Advanced).
Client case · NIS2 · Waste sorting and recovery A technical consultant structures NIS2 governance for a sorting centre, without leaving implementation work. CyFun NIS2 framework · versioned SoA · 2 scopes · Business plan, chosen independently Read the client case (in French)Questions from consultants
Do my clients need an account?
No. You can work alone, or invite the client's contacts as contributors or readers. They use the Business plan included for that client in your subscription: their accounts count towards that plan, not yours.
Can I use my own framework?
Yes. Importing internal frameworks lets you keep your method and reuse it from one engagement to the next.
I am more technical than GRC: is it for me?
Yes. The NIS2, CyFun and ReCyF frameworks are ready to use; you assess, link your technical evidence and generate the governance deliverables.
Is my clients' data kept separate?
Each client has its own workspace, with logical separation of data. Everything is hosted by OVHcloud in France.
What happens beyond 3 clients?
Each additional client is added as an option, directly from the platform, and also gets the Business plan. If a client needs the Advanced frameworks (ISO 27001, ISO 27701, HDS, SecNumCloud), you move them to Advanced, also as an option.
Can I try before committing?
Yes, the free plan lets you test one scope; a demo on your own case is also possible.
45 minutes on a real engagement.
Bring your framework or your latest audit report: we replay it in CompliKey, with the founder.