Stuck on something?

Use the "Forgot password" link on the sign-in page first. If that does not arrive within a few minutes, check spam, then send us a request below with the email address on the account — do not include your password in the form.

Frameworks are switched on per organisation from the Compliance area. If the one you need is not listed, tell us which it is: adding a framework is a data change on our side, not a code change, so it is usually quick.

A unified control only closes a framework requirement where the mapping is recorded as full. Where it is partial, the requirement stays open until the remaining controls are done. Send us the control reference and we will confirm how it is mapped.

Reports generate an examination package covering the frameworks you select. If a document is missing from it, that usually means the evidence is not linked to a control or has passed its validity date.

Yes, and it is the normal starting point. Your existing baseline is exactly what gets loaded in the first week. Ask below and we will walk through the format we need.

Please email our security address directly rather than using this form, so it reaches the right people immediately and is not sitting in a general queue. We acknowledge within two business days and will not pursue good-faith researchers.