Authio
Uses the signed-in session. Org policy, membership roles, and SSO inventory.
Platform · Connectors
Collect from the stack. Leave the grade to a human.
Connectors are read-only. They attach a dated snapshot to a control. They do not mark that control implemented. Open the workspace, connect a provider, and collect.
What ships
Six collectors. One rule.
If the pull cannot produce an artifact a practitioner can re-read, it does not run. A green check that is only an API ping is not in this product.
Providers
What each one files.
GitHub
Org 2FA requirement, default permissions, and branch protection on recent repos.
Railway
Projects, services, and environments. Variables stay out of evidence.
AWS
STS caller identity, IAM password policy, and account summary.
GCP
Project metadata and IAM bindings from a service account.
Azure
Subscription metadata and a resource inventory from a service principal.
Also in ReadyComply
Evidence still has to agree with the register.
Controls
Scope SOC 2, ISO 27001, HIPAA, and GDPR families to each system. Track status, owner, and why something is out of scope.
Evidence
File what you have against a control. Manual upload or a read-only connector.
Policies
Versioned drafts next to the controls they support. Know which text is current.
Connect one provider. Collect once.
Sign in. The Authio connector uses this session. The others take a read-scoped credential you paste in the workspace.
Sign in