Home / Frameworks

Every framework your customers ask about

Twelve security attestations, certifications and regulations across Europe and the United States. What each one is, who needs it, and what usually triggers it.

Core

Where most startups start

SOC 2 The security report US enterprise buyers ask for first. United StatesGlobal ISO 27001 The international security certificate European buyers recognize. EuropeGlobal GDPR The EU’s data protection law, for companies based in the EU or serving people there. EuropeGlobal

AI

For companies building with AI

ISO 42001 A certifiable management system for responsible AI. Global EU AI Act The EU’s risk-based law for AI systems. EuropeGlobal

Germany and DACH

For German enterprise and regulated buyers

C5 The German cloud security attestation for public and regulated buyers. Europe TISAX The security assessment the automotive supply chain expects. EuropeGlobal

EU regulation

Rules that reach your customers and your product

NIS2 EU cybersecurity rules for critical sectors and their suppliers. Europe DORA Digital resilience rules for EU finance and its tech suppliers. Europe CRA Security requirements for software and connected products sold in the EU. EuropeGlobal

Sector

Health and payments

HIPAA May apply to companies handling protected health information for HIPAA-regulated organizations. United States PCI DSS The card industry’s security standard for anyone touching card data. Global