Know what is ready before an auditor asks.
Controls, evidence, policies, and remediation in one workspace. An Authio product, used first on Authio’s own companies — not sold as a certificate.
Used first on
- Authio
- Jockbroker
- InsightHire
- MentorHQ
Platform
It’s all here.
Each module is its own page. This is the workspace today — not a feature list pretending to be a suite.
Controls
Scope SOC 2, ISO 27001, HIPAA, and GDPR families to each system. Track status, owner, and why something is out of scope.
Evidence
File what you have against a control. Manual upload or a read-only connector.
Policies
Versioned drafts next to the controls they support. Know which text is current.
Remediation
Turn gaps into owned work with a due date. Who closed what is part of the record.
Audit trail
Every change on the register is logged. Who did what, and when.
Connectors
Read-only pulls from Authio, GitHub, Railway, AWS, GCP, and Azure. They file evidence. They do not pass controls.
Coming
Labeled Next. Not sold as done.
Frameworks
SOC 2, ISO 27001, HIPAA, and GDPR.
SOC 2
Trust Services Criteria as a readiness register. The report is still a CPA firm.
ISO 27001
ISMS clauses and Annex A themes. Certification is a body, not this product.
HIPAA
Security Rule safeguard families. A BAA and an OCR review are still yours.
GDPR
Accountability articles for a SaaS register. Not a supervisory-authority opinion.
Resources
Read before you buy a story.
FAQ
Straight answers.
Is this a SOC 2, ISO 27001, HIPAA, or GDPR certification?
No. ReadyComply is software for audit readiness. It does not issue a SOC 2 report, an ISO certificate, a HIPAA authorization, or a GDPR adequacy decision. Licensed firms, certification bodies, and regulators do that.
Which catalogs ship in the workspace today?
Starter families for SOC 2 Trust Services Criteria, ISO 27001:2022 ISMS clauses and Annex A themes, HIPAA Security Rule safeguards, and GDPR accountability articles. You record status and evidence. The product does not auto-pass a control.
What can we do in the workspace today?
Connect your organization, name systems, instantiate those starter families, write implementation statements, file manual evidence or collect from Authio, GitHub, Railway, AWS, GCP, and Azure, draft versioned policies, and open remediation tasks. Every change is logged. Connectors do not mark a control implemented.
Who is it for right now?
Authio and the companies around it — Jockbroker, InsightHire, MentorHQ, and the rest of the portfolio. External customers come after the workflows survive real evidence collection.
Open the workspace. Keep the register current.
Sign in. Create the first system. Start with what you can already prove.
Sign in