Auditors
Check an Auditor
Free instant lookup across audit firms — name, country, framework or accreditation body — plus optional accreditation-change email alerts. Registry-listed firms are labelled.
Tools
Guides and filters over the open dataset (v0.1.27). None of these is a ranking, a score or legal advice. Confirm scope with your counsel or auditor.
EU AI Act
EU AI Act timeline after the Digital Omnibus
Every sourced AI Act date after Regulation (EU) 2026/1744: high-risk 2 Dec 2027 / 2 Aug 2028; new bans 2 Dec 2026. EN 18286 and the 21 Oct 2026 Council mandate.
Calendar
GRC & AI compliance deadlines (2025–2028)
Sourced statutory and standard dates (EU AI Act, DORA, CMMC, PCI DSS, ISO 27001, DPDP) plus a downloadable .ics calendar and 30-day reminders.
Frameworks
Which compliance framework do I need?
Static guide plus a progressive-enhancement picker. Look into — never “you must”. Official sources checked 20 Oct 2026.
Cost
Compliance cost and timeline
Published platform and pentest prices only, plus a client-side sum of the line items you select. Real quotes vary.
Auditors
SOC 2 auditor FAQ
SOC 1/2/3, Type 1 vs Type 2, observation period, pentest as a TSC example, and how to verify a CPA or ISO certificate.
Auditors
Vanta and Drata audit partners
Audit firms listed on Vanta’s and Drata’s partner directories, with each firm’s registry listings. Not an endorsement.
Auditors
CERT-In empanelled auditors
How to check a firm on CERT-In’s official PDF, and empanelled firms by city from this directory. Not a ranking.
Auditors
PCI DSS QSA companies
How PCI SSC qualifies QSA companies, what In Remediation means, and QSA firms by country. Not a ranking.
Auditors
HITRUST External Assessors
How HITRUST’s Authorized External Assessor list works and assessor firms in this directory. Not a ranking.
Auditors
ISO 27001 certification bodies
How to check ISO/IEC 27001 certification-body accreditation and bodies by country. Not a ranking.
Auditors
FedRAMP 3PAOs
How FedRAMP recognizes third-party assessors (A2LA) and how to verify a 3PAO. Not a ranking.
Auditors
GovRAMP 3PAOs
The 32 A2LA-accredited 3PAOs listed by GovRAMP and which are in this directory. Not a ranking.
Auditors
CMMC C3PAOs
What a C3PAO is, what the Cyber AB requires, and C3PAOs in this directory. Not a ranking.
Auditors
ISMAP audit institutions
Registered ISMAP audit institutions from the official ISMAP audit institution list. Not a ranking.
Report
State of AI Compliance & Audit
Cited counts from the open dataset: agents, firms, HQ countries, pricing transparency and accreditation coverage.
Templates
Audit-prep checklists and templates
SOC 2 and ISO/IEC 27001:2022 working aids (Markdown and CSV). Previews on the page; downloads after the newsletter signup.
Templates
GRC Survival Kit
Five printable templates in Markdown, CSV and HTML. One free subscribe unlocks the kit. The open dataset (CC BY 4.0) is free to download with no sign-up.
After the audit
After the audit
Sharing a SOC 2 or SOC 3 report, security questionnaires, and the ISO calendar-year audit rule.
Mapping
SOC 2 to ISO/IEC 27001
Category-level overlap only, plus the official AICPA mapping spreadsheet. Not a control-by-control map.
Directory
Get matched with listed agents
Filter the open dataset by framework, task and constraints. Criteria only — not a ranking.
Directory
Custom comparison
Compare up to four listings in the browser from agents.json.
Auditors
Auditor matching request
Request an introduction to listed directory firms. Stored for review; no automatic emails. Introductions start later.
Directory
Send a request to up to 3 matches
Pick up to three listed tools and/or audit firms, or tick Match me. Stored for review; nothing is sent to any firm from the form.
Get updates by email
Subscribe to the Brief
Weekly, free, unsubscribe anytime.
Check your inbox to confirm your email. We’ll only send the weekly brief after you click the link.
We use your email only to send the newsletter. See our privacy policy.