One scan, multiple frameworks

Sub-processor obligations, Data Processing Agreements, international transfers, and EU-US Data Privacy Framework. The foundation of vendor due diligence.

EU directive for network and information security. Supply chain security, incident reporting, and risk management for essential and important entities.

Implementation guidance for ISO 27001 controls. 93 controls across organizational, people, physical, and technological domains.

Trust Service Criteria for SaaS. Continuous evidence collection for Type II audits across security, availability, processing integrity, confidentiality, and privacy.

Information security management system. Supplier relationships (A.5.19 to A.5.23), risk-based approach, and continuous ISMS monitoring.

Configuration compliance for cloud and SaaS platforms. Automated scanning against CIS standards, mapped to ISO 27001, NIS2, and DORA.

Digital Operational Resilience Act. ICT third-party risk management, concentration risk, and sub-outsourcing chains for financial entities.

European Accessibility Act. Economic operator obligations (manufacturer, importer, distributor) for accessible digital products and services.

EU regulation on artificial intelligence. Risk-based classification with mandatory requirements for high-risk AI systems.