Compliance system of record

Every control has an owner. Every claim has a file behind it.

ComplianceDesk replaces the shared spreadsheet with one place to assign controls, collect evidence as work happens, and hand an auditor a record instead of a scramble.

No credit card required · Live in under a day

POPIAGDPRISO 27001HIPAASOC 2+126 more
COMPLIANCEDESK · VERIFIED RECORD · COMPLIANCEDESK · VERIFIED RECORD ·
Control record — Acme Holdings
Information officer appointed
POPIA-1.1 · owner: T. Nkosi
Implemented
Encryption at rest for evidence storage
ISO27001-A.10.1 · owner: M. Diaz
Implemented
Quarterly access review
SOC2-CC6.1 · owner: R. Singh
In progress
Vendor risk assessment — Q3
GDPR-Art.28 · owner: J. Park
Not started
131Frameworks mapped
1,593Pre-built controls
602Control categories
26Countries covered

Platform

Everything an audit-ready program needs, nothing it doesn't

One system connecting controls, ownership, evidence, and reporting — so nothing lives in someone's personal spreadsheet.

01

Controls library

Pre-built controls for every major framework, cross-mapped so one piece of evidence can satisfy several regulators at once.

02

Ownership & deadlines

Every control has a named owner, a cadence, and a due date — nothing is nobody's job.

03

Evidence, current

Attach files as the work happens. Evidence is timestamped and versioned, not gathered the week before an audit.

04

Reports auditors can use

A live compliance score per framework, and an exportable report your auditor can open directly.

How it works

From control to audit report, in four steps

§1

Activate a framework

Choose from 116 pre-mapped frameworks, or build your own from scratch.

§2

Assign ownership

Every control gets an owner and a review cadence the moment it's activated.

§3

Attach evidence

Upload proof as work happens — screenshots, documents, sign-offs.

§4

Report with confidence

A live compliance score and an export your auditor can check anytime.

Coverage

131 frameworks, mapped across 26 countries

A representative sample of what's in the library today — browse the full catalogue below.

South Africa
POPIA · B-BBEE · King IV · FICA · Companies Act and more
European Union
GDPR
United States
HIPAA · SOX · CCPA · NIST SP 800-53
India
DPDP Act · IT Act (SPDI) · RBI Cybersecurity and more
Australia & New Zealand
Privacy Act 1988 · APRA CPS 234 · Essential Eight · Privacy Act 2020 and more
International standards
ISO 27001 · PCI DSS · SOC 2 · NIST CSF
More African markets
Nigeria · Kenya · Egypt · Ghana · Tanzania · Uganda · Rwanda · Morocco · Cameroon · Mauritius · Botswana · Zambia · Eswatini · Senegal
Browse the full catalogue
All 131 frameworks across 26 countries →

Pricing

One plan per organisation. No per-control fees.

Starter

For your first framework

Up to 3 frameworks, up to 5 team members.

R499/mo
  • 3 active frameworks
  • 5 team members
  • Evidence vault
  • Email support
Start free trial
Enterprise

For multi-entity groups

Unlimited frameworks and members, reseller access.

R3,999/mo
  • Everything in Growth
  • Unlimited team members
  • Manage client organisations
  • Dedicated support
Start free trial

Questions

Before you start

What frameworks does ComplianceDesk support?+

131 frameworks across 26 countries today, including GDPR, HIPAA, SOC 2, ISO 27001, PCI DSS, and POPIA. Frameworks are pre-mapped with cross-referenced controls, and new ones are added regularly.

How long does setup take?+

Most teams activate their first framework and assign owners within a day. Activating a framework instantly seeds its full control library, ready to assign.

Can I bring my own frameworks or controls?+

Yes — alongside the built-in library, you can define custom controls mapped to your own internal policies.

What happens to our data if we leave?+

You can export your full audit log and evidence at any time. Nothing is locked behind a proprietary format.

How does billing work?+

One flat monthly rate per organisation, based on the tier you choose — no per-control or per-framework surcharges.

How do you keep our data secure?+

Every account can turn on two-factor authentication, every action is written to an exportable audit log, and the database is backed up daily with 90 days of retention. Full details at compliance-desk.com/security.

Affiliate Program

Know someone who needs this? Get paid for the referral.

Share your link. When someone signs up through it and their organisation converts to a paid plan, you earn a one-time 30% commission on that first payment — no cap.

Walk into your next audit with a record, not a reconstruction.

Set up your first control in minutes. No credit card required.

Start free trial

We use a strictly-necessary cookie to keep you signed in, and — only if you accept — Google Analytics to understand site usage. See our Privacy Policy for details.