Start from the standard your customers ask for.
Each framework arrives as requirements, controls, policies and evidence tasks. Shared controls mean work done for one framework counts toward the others. RelayComply prepares you for the audit; an independent auditor or certification body still issues the report or certificate.
SOC 2
United StatesThe AICPA's Trust Services Criteria for security, availability, confidentiality, processing integrity and privacy.
An independent CPA firm issues a Type I or Type II report.
ISO 27001
InternationalThe 2022 standard for an information security management system, with its Annex A controls.
An accredited certification body audits and certifies the ISMS.
ISO 42001
InternationalThe management system standard for organisations that build or use artificial intelligence.
Certification by an accredited body, structured like ISO 27001.
ISO 9001
InternationalThe quality management standard: documented processes, measured and improved.
Certification by an accredited body.
GDPR
European UnionThe EU General Data Protection Regulation: lawful processing, data subject rights and accountability.
No certificate; you demonstrate compliance to customers and regulators.
HIPAA
United StatesThe Privacy, Security and Breach Notification Rules for protected health information.
No official certificate; assessed by customers, partners and regulators.
PCI DSS
GlobalThe Payment Card Industry Data Security Standard for anyone who stores, processes or transmits card data.
A self-assessment questionnaire or an assessment by a Qualified Security Assessor.
NEN 7510
NetherlandsThe Dutch standard for information security in healthcare, built on ISO 27001.
Certification by an accredited body.
CCPA
CaliforniaThe California Consumer Privacy Act: notice, access, deletion and opt-out rights for consumers.
No certificate; enforced by the California regulator.
Your own framework
Internal standards, customer security requirements or a regulation we don't ship yet: add the requirements and link them to existing controls.
Take the baton.
Start with the framework your customers ask for. RelayComply builds the policies, controls and evidence tasks around it in minutes.