Compliance Frameworks

Compliance Built In.

Map your AI governance to SOC 2, GDPR, HIPAA, EU AI Act, NIST AI RMF, and more. Built-in controls and audit-ready reporting.

Read the Docs

View on GitHub

Your auditor is going to ask about AI

Incoming checklist items

SOC 2 Type IIGDPRHIPAAEU AI ActISO 27001

Auditors are adding AI governance to their checklists. “How do you control AI usage?” is no longer a hypothetical question.

6 frameworks, one platform

Zentinelle maps directly to 6 compliance frameworks. Every policy, every log, every control is tied to specific requirements. When audit season comes, you are ready.

SOC 2 Type IIAccess controls, availability, confidentiality

GDPRData protection, right to erasure, breach notification

HIPAAPHI handling, audit controls, integrity

EU AI ActHigh-risk AI, transparency, human oversight

NIST AI RMFGovern, Map, Measure, Manage

ISO 27001Information security management

Frameworks supported

Audit-ready from day one

Control Mapping

Every Zentinelle policy maps to specific framework controls. Rate limits map to SOC 2 access controls. Content scanning maps to GDPR data protection. Audit logs map to everything.

See exactly which controls are satisfied and which have gaps.

Rate limitsSOC 2 — CC6.1 Access controls

Content scanningGDPR — Art. 25 Data protection

Audit logsHIPAA — §164.312 Audit controls

Model restrictionsEU AI Act — Art. 9 Risk management

Continuous Monitoring

Compliance is not a point-in-time snapshot. Zentinelle continuously monitors policy compliance.

Drift detection. Real-time alerts. Remediation tracking. Your compliance posture is always current.

Audit-Ready Reporting

Generate evidence packages for auditors. Export logs, policies, and control mappings in auditor-friendly formats.

Less scrambling before audits. Less back-and-forth with auditors. Less billable hours.

Do not scramble for AI governance evidence.