Framework hubs
Not sure which hub to open? Look into which framework may apply (general information, not legal advice). For EU AI Act dates after the Digital Omnibus, see the EU AI Act timeline.
DPDP Act (India)
India's DPDP Act 2023 and DPDP Rules 2025 (GSR 846(E)): Rule 4 (Consent Manager registration) is in force from 13 November 2026. Most remaining notice, security, breach and retenti…
CERT-In Directions (2022)
Indian Computer Emergency Response Team directions dated 28 April 2022 require reporting of listed incidents within 6 hours and retention of ICT system logs for 180 days within Ind…
SOC 2
AICPA System and Organization Controls 2 reports on security, availability, processing integrity, confidentiality and/or privacy trust services criteria — widely requested in B2B S…
ISO/IEC 27001
International standard for information security management systems (ISMS), commonly required by global enterprise customers.…
HIPAA (United States)
The US Health Insurance Portability and Accountability Act of 1996 and its HHS rules: the Privacy Rule (uses and disclosures of protected health information), the Security Rule (ad…
FedRAMP (United States)
The US Federal Risk and Authorization Management Program is the government-wide program that provides a standardized approach to security assessment, authorization and continuous m…
CMMC (US Department of War / DoD)
The Cybersecurity Maturity Model Certification program verifies that defense contractors and subcontractors protect Federal Contract Information (FCI) and Controlled Unclassified I…
GovRAMP (formerly StateRAMP)
GovRAMP is a nonprofit membership organization with a standardized, NIST-aligned framework for verifying the security of cloud services and third-party technology used by governmen…
TX-RAMP (Texas)
TX-RAMP is run by the Texas Department of Information Resources (DIR): a standardized approach for security assessment, certification and continuous monitoring of cloud computing s…
DORA (EU Digital Operational Resilience Act)
Regulation (EU) 2022/2554 on digital operational resilience for the financial sector. It entered into force on 16 January 2023 and applies from 17 January 2025 to more than 20 type…