Resources · FAQ
Straight answers. Updated when the product moves.
Do not leave marketing ahead of the workspace. If a sentence here is newer than the dashboard, the sentence is wrong.
Is this a SOC 2, ISO 27001, HIPAA, or GDPR certification?
No. ReadyComply is software for audit readiness. It does not issue a SOC 2 report, an ISO certificate, a HIPAA authorization, or a GDPR adequacy decision. Licensed firms, certification bodies, and regulators do that.
Which catalogs ship in the workspace today?
Starter families for SOC 2 Trust Services Criteria, ISO 27001:2022 ISMS clauses and Annex A themes, HIPAA Security Rule safeguards, and GDPR accountability articles. You record status and evidence. The product does not auto-pass a control.
What can we do in the workspace today?
Connect your organization, name systems, instantiate those starter families, write implementation statements, file manual evidence or collect from Authio, GitHub, Railway, AWS, GCP, and Azure, draft versioned policies, and open remediation tasks. Every change is logged. Connectors do not mark a control implemented.
Who is it for right now?
Authio and the companies around it — Jockbroker, InsightHire, MentorHQ, and the rest of the portfolio. External customers come after the workflows survive real evidence collection.
How does Authio fit in?
Authio is the identity platform underneath ReadyComply — a PaaS, not a social login. People sign in to ReadyComply at auth.readycomply.com. Impersonated sessions cannot open compliance evidence.
What is next, and what is not promised?
Next: grounded copilots for scoping, policy, evidence, questionnaires, and audit prep. Connectors for Authio, GitHub, Railway, AWS, GCP, and Azure ship as read-only collectors. Not promised as certified. Not sold as an auditor.
Also in ReadyComply
Longer pages behind the short answers.
SOC 2 guide
What the work actually is, and what a platform can and cannot do.
ISO 27001 guide
An ISMS you can operate, versus a certificate you can buy.
HIPAA guide
Security Rule readiness for teams that may touch ePHI.
GDPR guide
Accountability in the register, not a privacy badge.
SOC 2 checklist
The readiness loop, in order, mapped to the workspace.
ISO 27001 checklist
Scope, ISMS clauses, Annex A themes, then a certification body.
HIPAA checklist
Safeguards, BAAs, and evaluation — not an OCR stamp.
GDPR checklist
Purposes, RoPA, rights, processors, transfers.
What this is not
ReadyComply is software. It is not an auditor, a report, or an attestation.
Open the workspace. Keep the register current.
Sign in. Create the first system. Start with what you can already prove.
Sign in