One platform,
every framework you need

MVSP

Minimum Viable Secure Product

Baseline security checklist for B2B software. Defines the minimum security posture expected from enterprise-ready products.

GDPR

General Data Protection Regulation

EU regulation for personal data protection and privacy. Covers data processing, consent management, and cross-border transfers.

ISO/IEC 27001

Information Security Management Systems (2013 & 2022)

International standard for establishing, implementing, and maintaining an information security management system (ISMS).

EU NIS2

Directive (EU) 2022/2555 NIS 2

EU directive on cybersecurity measures for essential and important entities across critical sectors.

EU NIS2 IR

Commission Implementing Regulation (EU) 2024/2690 with ENISA Technical Implementation Guidance

Detailed technical and methodological requirements for NIS2 digital infrastructure and ICT service providers, with ENISA's implementation guidance and evidence examples for every control.

CyFun®

CCB CyberFundamentals Framework (2023-03-01)

Belgian Centre for Cybersecurity framework with Basic, Important, and Essential assurance levels, aligned to NIS2 and used for self-assessment and conformity assessment.

CIS Controls

CIS Critical Security Controls Version 8.1

Prioritized set of actions to protect organizations and data from known cyber-attack vectors.

C5

Cloud Computing Compliance Controls Catalogue (C5:2020)

German BSI standard for cloud computing compliance, covering security controls for cloud service providers.

OWASP ASVS

OWASP Application Security Verification Standard v5

Framework for testing technical security controls of web applications and APIs with three verification levels.

ISO/IEC 42001

AI Management System Standard

The world's first international standard for AI Management Systems (AIMS), providing a framework for responsible AI governance, risk, and regulatory readiness.

NIST CSF 2.0

NIST Cybersecurity Framework 2.0

Comprehensive cybersecurity framework organized around Govern, Identify, Protect, Detect, Respond, and Recover functions.

SOC 2

SOC 2 Type II

Trust service criteria for security, availability, processing integrity, confidentiality, and privacy of customer data.

PCI DSS

Payment Card Industry Data Security Standard v4.0.1

Global security standard for organizations that store, process, or transmit payment card data. Defines 12 requirements for continuous cardholder data protection.