NIS2
Who is concerned, what the directive requires, and its transposition in Belgium and France.
Read the guideCybersecurity frameworks, managed in a single tool.
A control assessed once covers several requirements: the frameworks of your customers, your authorities and your auditors rely on the same controls, with every mapping kept traceable.
Detailed guides
CyFun NIS2
Basic, Important, Essential: which level to follow, and how to manage it in CompliKey.
Read the guideReCyF NIS2
Essential or important entities: which variant to follow, and how to manage it in CompliKey. Guide in French.
Read the guide (in French)ISO 27001
The ISMS, the 93 Annex A controls, the statement of applicability and the internal audit.
Read the guideAll available frameworks
Plans are cumulative: each tier includes the frameworks of the previous one. Compare plans
From the Freemium plan
Essential cybersecurity baseline
The essential measures from the ANSSI guide “Cybersecurity for SMEs in thirteen questions”. A first baseline to start the approach on one scope.
From the Starter plan
GDPR
The European regulation on the protection of personal data. CompliKey supports you and centralises your evidence for records, processors, DPIAs and data subject rights.
ANSSI
Good practice from ANSSI (the French national cybersecurity agency), adapted to SMEs and mid-sized companies. Start by implementing it to build your foundations, then move to more demanding standards.
AI Act
The European regulation on artificial intelligence, which governs AI systems according to their level of risk. List your uses and track the expected measures.
CIS 18
The 18 priority security controls from the Center for Internet Security, organised by implementation group. A concrete baseline to prioritise your actions.
From the Business plan
NIS2
The European directive strengthening the cybersecurity of essential and important entities. Manage your NIS2 obligations, justify your exclusions and prove your actions.
Read the guideCyFun NIS2
The framework of the Centre for Cybersecurity Belgium, in Basic, Important and Essential levels.
Read the guideReCyF NIS2
The ANSSI framework for essential and important entities, in EE and EI variants.
Read the guide (in French)SOC 2
The international framework based on the Trust Services Criteria (security, availability, confidentiality, processing integrity, privacy). CompliKey turns the criteria into actionable, progressive controls.
DORA
The European regulation on the digital operational resilience of financial services. CompliKey guides you on continuity, testing and incident management, linked to your scopes.
OWASP ASVS level 1
The OWASP Application Security Verification Standard. Level 1 groups the baseline requirements expected of any application.
From the Advanced plan
ISO 27001
The global reference for information security management. Structure your ISMS, generate your statement of applicability and track your evidence without spreadsheets.
Read the guideISO 27701
The international standard for privacy information management, complementing ISO 27001 and useful to demonstrate GDPR compliance.
HDS
The mandatory framework for hosting health data in France. CompliKey helps you document your compliance evidence.
SecNumCloud
The ANSSI framework for trusted cloud services. CompliKey breaks its requirements down into assessable controls.
One control, several requirements
Assess once, cover several frameworks.
Each control describes a security capability; each framework's requirements are attached to it through a traceable mapping. No coverage is claimed without evidence.
Frameworks are versioned: when a standard changes, you choose when to apply the update.
Governance
Human res.
Physical
Network
Compliant
Partial
Insufficient
Not audited
Is your framework covered?
A demo on your framework and your scopes, with the founder.