---
title: Compliance Frameworks
description: "53 compliance frameworks across 7 regions — assess any framework for free with ComplyForm"
---

import { Card, CardGrid } from '@astrojs/starlight/components';

ComplyForm supports **53 compliance frameworks** across 7 regions. Assessment is free at every tier — remediation tiers vary by framework.

**Tier coverage:** Community: 4 · Pro: 11 · Team: 24 · Agency: 36 · Enterprise: 53

## Global

Internationally recognized frameworks applicable worldwide.

- [SOC 2 Type II](/frameworks/soc2) — Community
- [CIS GCP v2.0](/frameworks/cis_gcp) — Community
- [CIS Azure v2.0](/frameworks/cis_azure) — Community
- [CIS AWS v3.0](/frameworks/cis_aws) — Community
- [ISO/IEC 27001 (2022)](/frameworks/iso27001) — Pro
- [PCI DSS v4.0](/frameworks/pci_dss) — Pro
- [NIST CSF 2.0](/frameworks/nist_csf_2) — Pro
- [CSA CCM v4](/frameworks/csa_ccm) — Team
- [HITRUST CSF v11.7](/frameworks/hitrust) — Agency

## North America

United States and Canada.

- [HIPAA](/frameworks/hipaa) — Pro
- [NIST 800-53 Rev. 5](/frameworks/nist_800_53) — Pro
- [CCPA / CPRA](/frameworks/ccpa) — Pro
- [PHIPA](/frameworks/phipa) — Team
- [SOX IT Controls](/frameworks/sox_it) — Agency
- [FedRAMP](/frameworks/fedramp) — Agency
- [CMMC](/frameworks/cmmc) — Agency
- [CJIS](/frameworks/cjis) — Agency
- [FISMA](/frameworks/fisma) — Agency
- [NERC CIP](/frameworks/nerc_cip) — Agency
- [TX-RAMP](/frameworks/tx_ramp) — Agency
- [StateRAMP](/frameworks/stateramp) — Agency
- [GLBA](/frameworks/glba) — Agency
- [FERPA](/frameworks/ferpa) — Agency
- [ITAR](/frameworks/itar) — Agency

## Europe

European Union and European national frameworks.

- [GDPR](/frameworks/gdpr) — Pro
- [NIS2 Directive](/frameworks/nis2) — Team
- [DORA](/frameworks/dora) — Team
- [BSI C5](/frameworks/bsi_c5) — Team
- [ENS](/frameworks/ens) — Team

## Asia-Pacific

Asia-Pacific region including Australia, Japan, Korea, Singapore.

- [IRAP](/frameworks/irap) — Team
- [K-ISMS-P](/frameworks/k_isms_p) — Team
- [MTCS SS](/frameworks/mtcs) — Team
- [OSPAR](/frameworks/ospar) — Team
- [ISMAP](/frameworks/ismap) — Team

## Middle East

Gulf Cooperation Council and wider Middle East.

- [NCA ECC](/frameworks/nca_ecc) — Enterprise
- [NCA DCC](/frameworks/nca_dcc) — Enterprise
- [NCA TCC](/frameworks/nca_tcc) — Enterprise
- [NCA CSCC](/frameworks/nca_cscc) — Enterprise
- [NCA OSMACC](/frameworks/nca_osmacc) — Enterprise
- [NCA CGIoT](/frameworks/nca_cgiot) — Enterprise
- [NCA OTCC](/frameworks/nca_otcc) — Enterprise
- [NCA Telework](/frameworks/nca_telework) — Enterprise
- [SAMA CSF](/frameworks/sama_csf) — Enterprise
- [UAE IA](/frameworks/uae_ia) — Enterprise
- [NCA CCC](/frameworks/nca_ccc) — Enterprise
- [DESC CSP](/frameworks/desc_csp) — Enterprise
- [CBB Cloud](/frameworks/cbb_cloud) — Enterprise
- [CBK CORF Kuwait](/frameworks/cbk_corf) — Enterprise
- [NIA Qatar](/frameworks/nia_qatar) — Enterprise
- [CITRA Kuwait](/frameworks/citra_kuwait) — Enterprise
- [MTCIT Oman](/frameworks/mtcit_oman) — Enterprise

## South America

- [LGPD](/frameworks/lgpd) — Team

## Africa

- [POPIA](/frameworks/popia) — Team
