Evidence · Compliance Mapping

Controls mapped to ISO/IEC 42001, UK GDPR, DUAA, SOC 2, Cyber Essentials.

Compliance Mapping maps your controls to ISO/IEC 42001, UK GDPR and DUAA, SOC 2 and Cyber Essentials, with gaps named. We prepare the evidence; certification is issued by accredited bodies.

Book the Evidence demo Find the right product for you

The problem

Regulation and standards are multiplying and each asks about AI in its own way.

Gaps are found by someone else, at the least convenient moment.

31%

of employers have an AI policy at all

CIPD, 2026

What you get

The benefits of Compliance Mapping.

Controls mapped to the standards that matter

Gaps named, so you know where to act

Evidence prepared; certification stays with accredited bodies

Who it is designed for

The people who feel the problem first.

Compliance, risk and DPO

See coverage across frameworks at a glance.

CEO and board

Know where you stand.

Regulated firms

Show alignment to the standards your regulators expect.

Where it is used

Three ways teams use Compliance Mapping.

Readiness check

See gaps against ISO/IEC 42001 before an assessment.

Client due diligence

Respond to security and AI questionnaires.

Planning

Prioritise the controls to build next.

Part of Evidence

Works best alongside.

Evidence Packs

See Evidence Packs Control Matrix

Which controls apply, where, and whether they are working.

See Control Matrix Rules

Policy as enforced rules: approved models by task, data type and risk.

See Rules All of Evidence

A record of what AI saw, produced and who approved it, with reports against the regulations and your policies. Used with Guard.

See the Evidence module

Prices are indicative ranges, confirmed in writing before you commit. Estimates are replaced by your own figures once your health check runs.

See Compliance Mapping working on your business.