Frameworks

Compliance frameworks explained

Here we explain the most important standards and how to get started.

SOC 2

SOC 2 — Trust Services Criteria

SOC 2 is the standard for SaaS and service companies handling customer data.

GDPR — General Data Protection Regulation

GDPR sets high requirements for personal data handling.

AI Act — The EU framework for artificial intelligence

The AI Act introduces requirements for risk management, transparency and follow-up for AI systems in the EU.

NIS2 — Network and Information Security Directive

NIS2 raises cybersecurity requirements for critical infrastructure in the EU.

Start by understanding which requirements apply to your organization.

Identify relevant frameworks and run a gap analysis of your current state.

With Tellus, the work can be managed in one flow with support for assessments, evidence and follow-up.

Book a demo and let us discuss your specific needs.