Compliance Tracker · Compliance management software

Compliance tracking for ISO 27001, SOC 2, GDPR and the rest of your obligations

Pick the standards you answer to, give every control an owner, and record the evidence cycle by cycle until the report is ready for the auditor.

Start free See pricing

Included in Every plan

What Compliance Tracker does

Set up

  • Adopt controls from the Compliance Library — ISO 27001, SOC 2, GDPR, Sri Lanka PDPA and more — as your own editable copies
  • Write custom controls alongside the library ones
  • Track at organization level or per unit of your hierarchy, each with its own administrators
  • Filter controls by standard and status, and assign or remove many at once

Run

  • Cycles and assessments whose scope is fixed the moment they open
  • Owners and contributors per control, with optional owner approval before a record counts
  • Step-by-step evidence recording against what each control asks for
  • My Tasks: every control waiting for you, across open cycles

Report

  • Coverage and maturity scoring, withheld below a coverage floor you set
  • A compliance report and a graphic executive report, both ready to print to PDF
  • CSV export of any cycle
  • Knowledge Base: guidance and templates for the evidence each control asks for

Compliance Tracker: questions and answers

What does compliance tracking software do?
It keeps the controls a standard or law asks of you, the person who owns each one, and the evidence that shows each is met. In AI Pazz Govnex you adopt controls from the Compliance Library, run them in cycles, record a verdict and evidence for every control, and the compliance and executive reports are produced from those records.
Can we track more than one standard at once?
Yes. Adopt controls from as many standards as your organization answers to — ISO 27001, SOC 2, GDPR, Sri Lanka PDPA and the rest of the Compliance Library — and write your own controls for contractual or internal obligations. They run side by side in the same cycles.
How is the compliance score calculated?
From the evidence recorded against each control, never typed in. Coverage is tracked beside it, and the score is withheld below a coverage floor you set, so a result over half a standard never passes for a whole one.

Works with

Small business and up

Internal audit management software

Audit Management

Run internal audit programmes: the scopes audited in each, tests with their samples, findings answered by management, issued reports, and every finding handed over to Issue & Remediation for tracking.

  • The year's audits in one plan, approved by an audit lead — anything added afterwards is marked unplanned until the plan is approved again
  • A work programme generated from the controls you track for the standards in scope — with each control's latest recorded verdict and evidence beside the auditor's own conclusion, never written back
  • Findings written as condition, criteria, cause, effect and recommendation, rated on your own scale, with a link to the earlier finding they repeat
More about Audit Management
Small business and up

Regulatory change management software

Regulatory Change

The regulations, standards and frameworks that apply to you — who owns each, whether it is still applicable, and the work to comply with it tracked in its own issue register.

  • Add a regulation from the Compliance Library — its issuer, jurisdiction and editions come with it — or type in one the library does not carry
  • An owner, a status and a rationale for every entry, with the units and jurisdictions it applies to
  • Create an implementation register in Issue & Remediation from the regulation in one click, or link one you already run
More about Regulatory Change
Small business and up

Compliance gap assessment service

Gap Assessments

A consultancy service delivered by the AI Pazz team: they assess your maturity against a framework, you supply the evidence, and you receive the reports.

  • An engagement agreement to approve, with scope, deliverables, payment terms and your DACI matrix
  • Maturity scored by AI Pazz assessors on every process and dimension
More about Gap Assessments

Every module