BUILD
Get compliant with anything
Build a full compliance program for any certification or regulation: complete with controls, documentation and evidence collection all the way through to audit preparation. Each program is fully bespoke, taking into account your unique business, risk, and previous work.
BUILD
Get compliant with anything
Build a full compliance program for any certification or regulation: complete with controls, documentation and evidence collection all the way through to audit preparation. Each program is fully bespoke, taking into account your unique business, risk, and previous work.
BUILD
Get compliant with anything
Build a full compliance program for any certification or regulation: complete with controls, documentation and evidence collection all the way through to audit preparation. Each program is fully bespoke, taking into account your unique business, risk, and previous work.
Pick your frameworkThousands to choose from, ranging from global security standards to local regulations. Pick one or many, start fresh or bring an existing program.
Uncover gapsFreda maps your status quo against every obligation in the framework. See what is covered and where there are gaps.
Generate the programControls, policies, registries and evidence. Not a generic program, but generated from the accumulated knowledge in your Company Graph, taking into account your unique operations and risk.
Manage end to endThe program keeps running after it is built. Through to external certification, internal audit, or ongoing second-line work, with evidence gathered as you go.
GDPR
NIS2
DORA
CSRD
MDR
MiFID II
ePrivacy
ISO 27701
GDPR
NIS2
DORA
CSRD
MDR
MiFID II
ePrivacy
ISO 27701
GDPR
NIS2
DORA
CSRD
MDR
MiFID II
ePrivacy
ISO 27701
UK GDPR
EU AI Act
PSD2
CBAM
DSA
EED
SOC 2
Sapin II
UK GDPR
EU AI Act
PSD2
CBAM
DSA
EED
SOC 2
Sapin II
UK GDPR
EU AI Act
PSD2
CBAM
DSA
EED
SOC 2
Sapin II
ISO 27001
CRA
MiCA
IVDR
EU Taxonomy
Trade Secrets
EMIR
HinSchG
ISO 27001
CRA
MiCA
IVDR
EU Taxonomy
Trade Secrets
EMIR
HinSchG
ISO 27001
CRA
MiCA
IVDR
EU Taxonomy
Trade Secrets
EMIR
HinSchG
eIDAS
Solvency II
CSDDD
EHDS
ISO 13485
EU Copyright
EU ETS
UK Bribery Act
eIDAS
Solvency II
CSDDD
EHDS
ISO 13485
EU Copyright
EU ETS
UK Bribery Act
eIDAS
Solvency II
CSDDD
EHDS
ISO 13485
EU Copyright
EU ETS
UK Bribery Act
ISO 42001
AMLR
EU Data Act
REMIT
Consumer Duty
CER Directive
PCI DSS
D.Lgs 231
ISO 42001
AMLR
EU Data Act
REMIT
Consumer Duty
CER Directive
PCI DSS
D.Lgs 231
ISO 42001
AMLR
EU Data Act
REMIT
Consumer Duty
CER Directive
PCI DSS
D.Lgs 231
ISO 27001
Framework setupISO 27001
0of your existing controls already map to this standard
✓Control generation
Corporate Email Address Enforcement
Access review cadence
Encryption at Rest
Incident Response Runbook
Vendor DPA Verification
Asset Inventory Sync
Change Approval Workflow
Backup Restore Testing
Least Privilege Review
Secure Development Training
Log Retention Policy
Business Continuity Plan
Data Classification Scheme
Endpoint Hardening Baseline
Removable Media Controls
Physical Access Register
Supplier Security Review
Malware Protection Baseline
Secure Disposal of Media
Privileged Access Monitoring
Threat Intelligence Review
Data Masking in Test
Web Filtering Policy
Cryptographic Key Rotation
Scope & governance
Risk assessment
Objectives & Applicability
Control generation
Implementation
Prepare for audit
A closer look at what powers it
A closer look at what powers it
A closer look at what powers it
GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin II
Extensive coverageFreda's Regulatory Engine covers thousands of frameworks, headline regulations, local ordinances and international standards.
ObligationMiFIRReport complete and accurate details of transactions to the competent authority no later than the close of the following working day.ControlDaily transaction report reconciliationEach business day the owner reconciles OMS transactions against the file sent to the ARM, and resubmits any rejects.In progressFFrank DSet due date
Bespoke controlsGenerated based on existing operations, or to fill gaps. Always adjusted to your unique set-up, always cross-referenced to the frameworks they help fulfill.
Company contextDORA10 obligations4 controls6 policiesPolicyv4Access Control PolicyRegenerateEdit
Policy managementBring your own or draft with Freda. Full traceability, version control and approvals.
ProjectNIS215%Current phase: Risk AssessmentIdentify and score the risks your business carries. The output is a prioritized risk register with mitigating actions to track.TaskAssigneesDue dateAssess risk and update registryAAnna SSet due dateReview risk treatmentsPPeter OSet due date
Project managementTailored, agentic setup flows that guide your whole team through the process. Like having your own compliance consultants.
AgentRuns daily at 09:00Evidence CollectionEvery quarter the owner reviews access to production AWS accounts and Okta groups, and revokes anything no longer required for the role.Pulled 42 access review recordsChecked 18 connected systemsChasing 3 outstanding vendor DPAs…
Agentic evidence collectionAgents gather evidence, check systems and chase what is missing. Each one grounded in your program.
Yasmin HaddadYHCan you help me prep for my upcoming audit?I noticed your Information Security Policy needs updating to reflect the recent changes in Access Control Policy.I also found that your Asset Registry lacked some details on a few new vendors.Do you want me to implement suggested fixes?Yes please, go ahead.
Always audit readyEverything the auditor needs is one click away. No last-minute scramble. Run a simulated audit any time to know exactly where you stand.
GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin II
Extensive coverageFreda's Regulatory Engine covers thousands of frameworks, headline regulations, local ordinances and international standards.
ObligationMiFIRReport complete and accurate details of transactions to the competent authority no later than the close of the following working day.ControlDaily transaction report reconciliationEach business day the owner reconciles OMS transactions against the file sent to the ARM, and resubmits any rejects.In progressFFrank DSet due date
Bespoke controlsGenerated based on existing operations, or to fill gaps. Always adjusted to your unique set-up, always cross-referenced to the frameworks they help fulfill.
Company contextDORA10 obligations4 controls6 policiesPolicyv4Access Control PolicyRegenerateEdit
Policy managementBring your own or draft with Freda. Full traceability, version control and approvals.
ProjectNIS215%Current phase: Risk AssessmentIdentify and score the risks your business carries. The output is a prioritized risk register with mitigating actions to track.TaskAssigneesDue dateAssess risk and update registryAAnna SSet due dateReview risk treatmentsPPeter OSet due date
Project managementTailored, agentic setup flows that guide your whole team through the process. Like having your own compliance consultants.
AgentRuns daily at 09:00Evidence CollectionEvery quarter the owner reviews access to production AWS accounts and Okta groups, and revokes anything no longer required for the role.Pulled 42 access review recordsChecked 18 connected systemsChasing 3 outstanding vendor DPAs…
Agentic evidence collectionAgents gather evidence, check systems and chase what is missing. Each one grounded in your program.
Yasmin HaddadYHCan you help me prep for my upcoming audit?I noticed your Information Security Policy needs updating to reflect the recent changes in Access Control Policy.I also found that your Asset Registry lacked some details on a few new vendors.Do you want me to implement suggested fixes?Yes please, go ahead.
Always audit readyEverything the auditor needs is one click away. No last-minute scramble. Run a simulated audit any time to know exactly where you stand.
GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin IIISO 27001CRAMiCAIVDREU TaxonomyTrade SecretsEMIRHinSchGeIDASSolvency IICSDDDEHDSISO 13485EU CopyrightEU ETSUK Bribery ActISO 42001CSRDEU Data ActREMITConsumer DutyCER DirectivePCI DSSD.Lgs 231GDPRNIS2DORAAMLRMDRMiFID IIePrivacyISO 27701UK GDPREU AI ActPSD2CBAMDSAEEDSOC 2Sapin II
Extensive coverageFreda's Regulatory Engine covers thousands of frameworks, headline regulations, local ordinances and international standards.
ObligationMiFIRReport complete and accurate details of transactions to the competent authority no later than the close of the following working day.ControlDaily transaction report reconciliationEach business day the owner reconciles OMS transactions against the file sent to the ARM, and resubmits any rejects.In progressFFrank DSet due date
Bespoke controlsGenerated based on existing operations, or to fill gaps. Always adjusted to your unique set-up, always cross-referenced to the frameworks they help fulfill.
Company contextDORA10 obligations4 controls6 policiesPolicyv4Access Control PolicyRegenerateEdit
Policy managementBring your own or draft with Freda. Full traceability, version control and approvals.
ProjectNIS215%Current phase: Risk AssessmentIdentify and score the risks your business carries. The output is a prioritized risk register with mitigating actions to track.TaskAssigneesDue dateAssess risk and update registryAAnna SSet due dateReview risk treatmentsPPeter OSet due date
Project managementTailored, agentic setup flows that guide your whole team through the process. Like having your own compliance consultants.
AgentRuns daily at 09:00Evidence CollectionEvery quarter the owner reviews access to production AWS accounts and Okta groups, and revokes anything no longer required for the role.Pulled 42 access review recordsChecked 18 connected systemsChasing 3 outstanding vendor DPAs…
Agentic evidence collectionAgents gather evidence, check systems and chase what is missing. Each one grounded in your program.
Yasmin HaddadYHCan you help me prep for my upcoming audit?I noticed your Information Security Policy needs updating to reflect the recent changes in Access Control Policy.I also found that your Asset Registry lacked some details on a few new vendors.Do you want me to implement suggested fixes?Yes please, go ahead.
Always audit readyEverything the auditor needs is one click away. No last-minute scramble. Run a simulated audit any time to know exactly where you stand.
Choose from
100,000+ frameworks
Or bring your own internal program.
100,000+ more
SOLUTIONS
Explore more solutions
SOLUTIONS
Explore more solutions
SOLUTIONS