FAQ

What data do I receive with the purchase?

We have added additional information to each of the vendors above that includes which compliance requirements they handle. These compliance requirements include:

• HIPAA / HITECH
• PCI
• SOC 1
• SOC 2
• SOC 3
• HITRUST
• EI3PA
• ISO 27001, 2700
• MS SSPA
• SEC
• FISMA
• FedRAMP
• CJIS
• NERC
• NIST
• SOX ITGC
• COBIT
• SSAE
• SAS 70
• ASC 606
• NSA IAM, IEM
• PCAOB
• FFIEC
• ISEA 3402
• COSO
• GLBA
• PA-DSS
• FTC
• GDPR
• CFPB
• ePHI
• SANS
• FACTA
• FERPA
• P2PE
• STAR

Why do I need an compliance auditor?

A compliance auditor is the one that signs off on your compliance. You may use something like DRATA or Vanta for staying in compliance but an auditor is needed to sign-off on the audit.