Stop Preparing for Audits. Stay Compliant, Year-Round.

34 frameworks across 9 region directories and 6 categories: Information Security (ISO 27001, SOC 2, NIST CSF 2.0, Essential Eight, IRAP, CSA STAR, Cyber Essentials), Data Privacy (GDPR, UK GDPR, HIPAA, CCPA/CPRA, LGPD, PDPA, FERPA, GLBA, NIST Privacy), Financial & Infrastructure (PCI DSS v4.0, SOX IT, DORA, MAS TRM, APRA CPS 234, IEC 62443, ICIF/COSO), Government & Defence (FedRAMP, CMMC 2.0, NIST 800-171), AI Governance (EU AI Act, ISO 42001, NIST AI RMF, UK AI Regulation), and Business Continuity (ISO 22301, TISAX, NIS2). Custom frameworks are also supported.

Yes. AssureCore is built for multi-framework programmes. Manage ISO 27001 and PCI DSS side-by-side, share evidence across frameworks, and get a unified posture view. When you activate two or more frameworks in the same category (e.g. ISO 27001 + SOC 2 in Information Security), AssureCore automatically creates a Category Core workspace that aggregates controls, evidence, and risks across both — eliminating duplicate work.

When you first log in, you select your operating region(s) — US, EU, UK, Australia, Singapore/APAC, Government, or Global. AssureCore then filters the framework library to show only the standards applicable to your geography and sector. Australian teams see Essential Eight and IRAP. EU teams see GDPR and DORA. US teams see HIPAA, FedRAMP, and CCPA. You can activate as many regions as your organisation operates in.

Six specialist agents are pre-loaded with your live compliance data: controls, evidence, risks, incidents, and framework context. You ask a question in plain English and get a context-aware expert answer. Each agent is focused on a specific domain: Compliance (gap analysis), Evidence (health monitoring), Risk (scoring and remediation), Release (change governance), RCA (root cause analysis), and Communication (auditor responses and reports). Responses can be exported as branded PDFs.

AssureCore supports OpenAI (GPT-4o), Anthropic Claude, Google Gemini, Ollama (local/on-premises), OpenRouter (100+ models), and Bring Your Own Key for any compatible provider. You can switch providers at any time in Settings without reconfiguring your workspace. Ollama lets you run models on infrastructure you control. Bring Your Own Key lets you connect custom endpoints, including Azure OpenAI, AWS Bedrock, or any OpenAI-compatible provider.

The AssureCore Import Wizard accepts CSV, Excel (.xlsx and .xls), Word (.docx), and plain text files. You can import controls, policies, risks, evidence records, findings, and action plans. When you upload a file, the wizard reads the columns/content, shows you a preview with validation, and lets you map source fields to AssureCore fields before importing. For unstructured formats like Word or PDF, AI-assisted mapping helps identify the right destination fields.

No. AssureCore never uses your compliance data to train AI models. When you use a cloud AI provider, the relevant data is sent to that provider under its API terms. For maximum privacy, connect Ollama to run models on infrastructure you control.

Yes. AssureCore is manual-first. Add controls, evidence, risks, policies, findings, and checklists from scratch — or import from CSV or Excel. You are always in complete control of what enters your workspace. AI suggestions are optional and always reviewable before saving.

Every piece of evidence has an optional expiry date. AssureCore tracks all expiry dates and sends alerts 30, 14, and 7 days before an item expires. Expired evidence shows a red status badge on the controls and framework dashboards, so you always know what needs renewal before an auditor asks. You can set bulk expiry dates and filter by expiry status across your entire evidence library.

Yes. Every report, agent response, evidence set, and audit pack can be exported as a PDF or CSV. Evidence packs bundle all documents linked to a framework or control cluster into a single downloadable zip file — formatted for external auditor review. Reports are branded with your organisation's name and include executive summaries, control status tables, and evidence linkage matrices.

Yes. Every plan includes a 30-day free trial with no credit card required. You get full access to the platform including all AI agents, the framework library, and all reporting tools during the trial.

Your compliance data is stored in a dedicated AssureCore database. Each organization's data is isolated from every other organization's, and access within your organization is restricted by role (admin, contributor or viewer). When you use AI features, the relevant data is sent only to the AI provider your organization has configured. Your data is never shared with other third parties without your explicit consent. For enterprise deployments, custom hosting arrangements are available.

Available today: an HTTP API with an OpenAPI specification, evidence file uploads, CSV and Excel import, and bring-your-own AI provider, including Azure OpenAI. Coming soon: single sign-on (SSO) via SAML 2.0 and OpenID Connect, SCIM user provisioning, GitHub, Jira, Microsoft integrations (such as Microsoft 365 and Entra ID), cloud storage import, MCP (Model Context Protocol) integration, and custom integrations on Enterprise plans.

When you activate two or more frameworks in the same compliance category (e.g. ISO 27001 + SOC 2 + NIST CSF under Information Security), AssureCore creates a Category Core workspace. This consolidated view shows all controls across both frameworks in one table, highlights evidence that satisfies multiple standards simultaneously, and tracks your combined posture score — eliminating the need to manage each framework in isolation.