Skip to main content
Tier 2 EngineBETA

Compliance Wizard Engine

Interactive evidence collection for SOC2, GDPR, HIPAA, and ISO27001. Generate audit-ready artifacts in 30 minutes instead of 6 weeks.

4
Frameworks Supported
30 min
Time to Complete
100%
Evidence Coverage
Signed
Cryptographic Artifacts

What It Does

Interactive Questionnaires

Guided questions for SOC2, GDPR, HIPAA, ISO27001. Smart branching based on your answers. No compliance expertise required.

Evidence Mapping

Automatically maps your answers to framework controls. Shows coverage gaps and completion percentage in real-time.

Artifact Generation

Generates cryptographically signed COMPLIANCE_EVIDENCE_MARK artifacts. Includes SHA-256 fingerprint for tamper detection.

Gap Analysis

Identifies missing evidence and provides actionable recommendations. Prioritizes gaps by audit impact.

Supported Frameworks

SOC 2 Type II

Controls:5 Trust Service Criteria
Questions:45 evidence points
Time:30 minutes
CC6.1, CC6.6, CC7.1, CC7.2, CC8.1
View Guide

GDPR

Controls:Article 32 (Security)
Questions:38 evidence points
Time:25 minutes
Technical & organizational measures
View Guide

HIPAA

Controls:Security Rule
Questions:42 evidence points
Time:30 minutes
Administrative, physical, technical safeguards
View Guide

ISO 27001

Controls:14 control domains
Questions:52 evidence points
Time:35 minutes
A.9, A.12, A.14 (AI-specific)
View Guide

Quick Start (30 minutes)

1

Choose Framework

Navigate to Dashboard → Compliance Wizard and select your target framework (SOC2, GDPR, HIPAA, or ISO27001).

2

Answer Questions

Complete the interactive questionnaire. Progress bar shows completion percentage. Save and resume anytime.

3

Generate Artifact

Click "Generate Evidence" to create cryptographically signed artifact. Download JSON or share via badge URL.

What It Doesn't Do

No Certification

Provides evidence for auditors. Does not certify compliance.

No Legal Advice

Informational guidance only. Consult legal counsel for compliance decisions.

No Audit Guarantee

Evidence collection does not guarantee audit passage. Auditor discretion applies.

No Continuous Monitoring

Point-in-time evidence collection. Re-run wizard for updated evidence.