Scale compliance across 200+ frameworks, seamlessly with Sprinto AI
Sprinto helps fast-growing teams get certified faster and stay continuously compliant without rebuilding controls as they grow.
Build once. Reuse everywhere.
Framework directory
Sprinto supports standard and custom frameworks. New frameworks plug into what’s already set up — showing only what’s new, not what you’ve already done.
Categories
-
SOC 2 Compliance Platform | Evidence, Audit Prep & Autonomous Monitoring | SprintoSOC 2 helps SaaS and cloud companies prove their security, availability, and confidentiality to customers—often becoming a requirement for mid-market and enterprise deals.
-
ISO 27001 for Startups & SMBs | Automated Certification, No Manual Work | SprintoISO 27001 provides a structured, risk-based ISMS that helps organizations standardize security practices and demonstrate compliance across regions and industries.
-
Secure cardholder data and meet payment security standards.PCI DSS ensures organizations that store, process, or transmit payment card data follow strict controls to reduce fraud and protect sensitive financial information.
-
GDPR – Meet EU data protection requirements with ongoing privacy controls.GDPR helps organizations protect personal data, manage consent, and demonstrate accountability when handling data of EU residents—reducing regulatory risk and building customer trust.
-
Protect healthcare data and meet U.S. regulatory requirements.HIPAA sets standards for safeguarding protected health information (PHI) and is essential for healthcare providers, health tech companies, and partners handling sensitive patient data.
-
NIST – A flexible framework for managing cybersecurity risk.The NIST Cybersecurity Framework helps organizations identify, protect, detect, respond to, and recover from security risks
-
ISO 42001 – A standard for responsible AI management systems.ISO 42001 helps organizations govern AI systems responsibly by defining controls for risk management, transparency, accountability, and continuous improvement.
-
TISAX – An information security assessment framework for the automotive industry.TISAX standardizes how automotive companies and suppliers assess and demonstrate information security across complex supply chains.
-
CIS – A prioritized set of cybersecurity best practices.The CIS Controls help organizations strengthen security hygiene by focusing on the most effective actions to prevent, detect, and respond to common cyber threats.
-
Demonstrate cloud security maturity and transparency.CSA STAR helps cloud service providers assess, document, and communicate their security posture using the Cloud Controls Matrix and recognized assurance practices.
-
A U.S. regulation governing consumer credit information.FCRA defines requirements for collecting, using, and protecting consumer credit data, commonly impacting financial services and background screening organizations.
-
A data security standard for regulated environments.OFDSS focuses on safeguarding sensitive operational and financial data, typically required in region-specific or sector-specific regulatory contexts.
-
Protect consumer privacy rights under California law.CCPA gives California residents rights over their personal information and requires businesses to manage data collection, sharing, and disclosure practices responsibly.
-
Protect defense information with cybersecurity maturity controls.CMMC helps organizations in the defense supply chain implement cybersecurity practices to safeguard controlled unclassified information and meet U.S. defense requirements.
-
Meet Microsoft supplier privacy and security requirements.MSFT SSPA helps Microsoft suppliers demonstrate that they follow required privacy, security, and data protection practices when handling Microsoft data.
Get structured guidance, tools, templates, and practical workflows to formalize, automate, and grow your GRC practice.
A curated guide to the framework, requirements, audit readiness, and foundational resources to help you achieve and manage ISO 27001.
Guides and resources covering everything from controls and criteria to monitoring and auditor readiness, designed to simplify the SOC 2 journey.
The ultimate starter’s guide to the foundations of ISO 42001, industry best practices, and curated resources, all in one place.
A practical reference for understanding HIPAA, figuring out what applies to you, and building compliance that holds up in real audits.
Start with what you need. Scale without friction.
