iso27701

Open source solutions for SOC2, GDPR, and ISO27001

Claude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, EU AI Act, ISO 42001, ISO 27701, DORA, CSRD, India's DPDPA, CMMC 2.0, NIST AI Risk, SWIFT, CCPA/CPRA, and others. Benchmark 89% (with skills) vs 57% (without skills). Updated Monthly.

Open Source Data Protection/Privacy Regulatory Mapping Project

A practical implementation toolkit for ISO/IEC 27701:2019 PIMS, aligned to ISO 27001:2022, covering the 2019 Annex A and Annex B controls, DPIA, TIA, privacy by default, joint controllers, GDPR and UAE PDPL cross-mapping, and Python GRC automation scripts. Superseded edition: see the notice in the README before use.

AWS AI Governance Framework - Serverless Edition with Lambda, Aurora Serverless v2, and 60% cost savings. Features ISO 27001/27701/42001 compliance, OPA policies, and AWS resource scanners.

GRC, LGPD and Privacy project with practical artifacts for information security and data protection governance.

Sistema agêntico de GRC para ISO 27001/27701 — SoA, riscos, evidências e trilha de auditoria sobre Cloudflare Workers, D1, R2 e Workers AI.

Projeto de implementação de SGSI com base nas normas ISO 27001 e 27701, incluindo análise de riscos e proteção de dados (LGPD).

Política Corporativa de Segurança da Informação (POSIC) aplicada a uma fintech, com base em GRC, LGPD e ISO 27001.

Plaid, onboarded: a GRC Engineering program rendered from one config. Ships the two framework mappings the engine could not render, and the two silent-failure defects that building it surfaced.