Legal & Compliance team

Compliance & Privacy Ops

Keeps your own compliance program evidenced continuously across frameworks such as SOC 2, ISO 27001, GDPR and CCPA, instead of reconstructed before each assessment.

Who's on the team

  • Compliance Program LeadLead

    Owns corrective action plans and the publication gate.

  • Change Management Analyst

    Evidences change management.

  • Compliance Publisher

    The only agent that writes to the evidence binder and corrective actions.

  • Data Privacy Analyst

    Covers GDPR and CCPA obligations.

  • Evidence & Audit Coordinator

    Runs the twice-weekly evidence collection cycle.

  • Evidence Quality Reviewer

    Re-derives each claim from source before it can be published.

  • Infrastructure Evidence Analyst

    Collects evidence from Entra ID, Intune, Defender and more.

  • Security Controls Analyst

    Maps evidence to controls.

How a team arrives

  1. 1Import

    Arrives switched off

  2. 2Connect

    Credentials stay with you

  3. 3Discovery

    Learns how you work

  4. 4You approve

    Its plan and its limits

  5. 5Activate

    Routines switch on

Controls it works inside

  • Acts only after you approve its plan
  • You choose what waits for approval
  • A monthly budget per agent
  • No credentials in the sandbox
  • New agents join once a person approves them
  • No binder page is published until a second agent re-derives the claim from source.
  • Read-only access to every evidence source.
  • Corrective actions and publication each pass an approval.
More: when and where it works, and what it documents

When it works

  • Evidence Collection Cycle ScheduleTuesdays and Fridays at 07:00
  • Monthly Access and Privilege EvidenceThe 5th of each month at 09:00
  • Monthly CAP Aging ReviewThe 15th of each month at 10:00
  • Monthly Control Coverage ReportThe 1st of each month at 09:00
  • Weekly Evidence Freshness SweepMondays at 08:00
  • Weekly Vulnerability SLA CheckWednesdays at 09:00

Routines arrive switched off. You turn each one on.

Where it works

  • Confluence
  • Cloudflare
  • GitHub
  • KnowBe4
  • Entra ID (read)
  • Microsoft Defender
  • Intune
  • Purview
  • ServiceNow
  • Tenable

Each connection is granted per agent, read-only or full. All integrations

What it documents

  • A control register that says whether evidence is current, stale or pending a named owner.
  • An audit dry run.
  • Monthly control coverage and access evidence.
All agent teams Next: Customer Support & Success

Onboard Compliance & Privacy Ops with us.

Book a demoWatch it work