ISO 27001
Information security management
93
controls
Six frameworks · Built from 300+ technology audits
Know where you stand before your auditor does
Run a guided self-assessment for ISO 27001, SOC 2, GDPR, NIS2, Tech DD, or EU sanctions. See your gaps, priorities, and a practical report before the real audit starts.
Start without an account · Every framework included · No credit card
Choose your framework
Start the assessment that matters now. All six frameworks are included, and every one opens without an account.
SOC 2
Trust services criteria
61
controls
GDPR
EU data protection
50
controls
NIS2
EU cybersecurity directive
46
controls
Tech DD
Technology due diligence
40
controls
EU Sanctions DD
Sanctions red-flag screening
25
controls
See a sample readiness report →
In preparation for 2026
NIST CSF 2.0EU AI ActDORACIS Controls v8.1CCPA/CPRAISO 27701Cyber Resilience ActISO 42001PCI DSS 4.0HIPAATISAXISO 22301Vendor RiskSBOM AuditEN 50600EU Data Centre EED
Three steps, no onboarding project
1
Pick your framework
Start the full ISO 27001, SOC 2, GDPR, NIS2, Tech DD or EU sanctions checklist. Every plan includes all of them.
2
Work through the questions
Each control asks what an auditor would ask, explains why it matters, and tells you what evidence counts.
3
Fix what the report flags
Generate a scored report with gaps ranked by severity and a remediation list you can hand to the team.
Out of the spreadsheet, into a system
A compliance spreadsheet is fine until someone asks "is this current?" and nobody knows. AuditFront keeps the answer attached to the control.
Questions, not checkboxes
Every control carries the question behind it: what gets checked, where companies trip up, and which evidence passes. Written from real engagements, not generated.
Cross-framework mapping
ISO 27001 A.5.1 is SOC 2 CC1.1 is GDPR Article 24. Do the work once and see where it counts again.
Reports your board can read
Scored domains, ranked findings, remediation phases. A document you can send upward without rewriting it first.
Excel in, structure out
Already half-done in a spreadsheet? Import it and keep going with status tracking and progress scoring instead of cell colors.
RK
Written from the auditor's side of the table
AuditFront is built by Radoslaw Korbecki, a lead auditor with 300+ technology due diligence engagements for European VC and PE funds. The advisory text in every checklist is the guidance he gives clients: what gets checked, what fails, and what to do about it before it costs you the deal or the certificate.
Meet the auditor300+
due diligence engagements behind the advisory
6
frameworks, all included on the free plan
315
documented controls with implementation guides
Start free, upgrade for depth
Every plan includes every framework. Paid plans buy more concurrent audits, full advisory, and the complete narrative report.
Free
€0
1 active audit
All six frameworks, partial advisory, summary PDF
Pro
€49/mo
5 active audits
Full advisory, narrative report, 10 GB evidence
Agency
€399/mo
Unlimited audits
Unlimited repeated assessments and full reports
Frequently Asked Questions
What is AuditFront?
AuditFront is a self-assessment platform for compliance frameworks: ISO 27001, SOC 2, GDPR, NIS2, Technology Due Diligence, and EU sanctions screening. You work through guided checklists, attach evidence, and generate a scored gap report. The advisory text in each checklist comes from 300+ real technology audits.
How is AuditFront different from a GRC tool?
GRC platforms are built for enterprises with compliance teams and procurement cycles. AuditFront is built for the company being audited: you open a checklist and start answering immediately, then create an account only if you want to keep the work. No implementation project, no sales call.
Do I need to hire an auditor to use AuditFront?
No. The advisory text tells you what an auditor would look for at each control, so you can run an honest self-assessment internally. When you do bring in an external auditor, you arrive with organised evidence and a known gap list instead of a blank page.
Which compliance frameworks does AuditFront support?
Six today: ISO 27001 (93 controls), SOC 2 (61), GDPR (50), NIS2 (46), Technology Due Diligence (40), and EU Sanctions Due Diligence (25). Cross-framework mappings show where one control satisfies another. More frameworks are in preparation for 2026.
Can I import my existing compliance spreadsheets?
Yes. Excel (.xlsx), Word (.docx), and JSON imports are supported on every plan, including Free. If you have been tracking controls in a spreadsheet, you can carry that work over instead of starting again.
What does the free plan actually include?
One active audit with the full checklist for any framework - all six are included, none are gated. Advisory guidance is shown for the first items of each section, reports come as a basic summary PDF, and evidence is tracked as external links. Pro adds full advisory on every control, the complete narrative report, five concurrent audits, and 10 GB of evidence storage.
Start with the framework that matters now
Choose ISO 27001, SOC 2, GDPR, NIS2, Tech DD, or EU sanctions and turn the first answers into a practical gap list.
Choose your frameworkStarts without an account · Every framework included · No credit card