Where are your primary customers located?

Customer location is one factor in scope; establishment, activities and sector also matter.

United States

US-based customers, enterprise B2B

European Union

EU-based customers or data subjects

Global / Both

Customers in both US and EU markets

What industry are you in?

Some industries have specific regulatory requirements.

Fintech / Financial Services

Payments, banking, lending, insurance

Healthtech / Digital Health

Health data, telemedicine, medical devices

SaaS / Cloud Software

B2B or B2C software products

Other

Consulting, manufacturing, energy, retail, etc.

What is driving your compliance need?

Understanding the trigger helps prioritize your path.

Customer / Partner Requirement

A prospect or partner is asking for a compliance report

Fundraising / M&A

Investors or acquirers want security assurance

Regulatory Obligation

Legal requirement (GDPR, NIS2, industry regulation)

Proactive / Best Practice

Building a security program before it is demanded

How many employees does your company have?

Company size affects which regulations apply and the effort required.

1-50 employees

Startup or small team

51-250 employees

Growing SMB

250+ employees

Mid-market or enterprise

What type of data do you primarily handle?

The sensitivity of your data affects which frameworks are critical.

Personal / Customer Data

Names, emails, usage data, preferences

Sensitive / Regulated Data

Financial records, health data, government data

Business / B2B Data

Client business data, analytics, configurations

Intellectual Property / Source Code

Proprietary technology, trade secrets, algorithms

Which Compliance Framework Do You Need?

Where are your primary customers located?

What industry are you in?

What is driving your compliance need?

How many employees does your company have?

What type of data do you primarily handle?

Frameworks to explore

Ready to start your assessment?

Assess your compliance posture