All standards, laws and kits. At a glance.

No. 1 · Top 10 Information security Grundschutz++ BSI IT-Grundschutz++ View details

Top 10

01 · Information security Grundschutz++ Software tool for IT-Grundschutz++, the successor to the IT-Grundschutz compendium. Complaica imports the BSI user catalogue as an OSCAL catalogue and keeps it current when new versions appear. Requirements are assigned to the target objects in scope, with measures and evidence tracked against them. Internal audits under PERF.3 and an AI assistant over MCP are part of the standard scope.
02 · Information security Migration to GS++ Service for moving from IT-Grundschutz to IT-Grundschutz++. We transfer the information domain, target objects, protection requirements and implemented measures from the existing model into the new user catalogue. Requirements the new catalogue adds show up as open tasks. The result is a complete GS++ baseline your team can continue working on straight away. Service
03 · Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
04 · Information security CRA Software tool for the Cyber Resilience Act. The essential cybersecurity requirements of Annex I are assigned to products with digital elements and tracked across their lifecycle. Vulnerabilities, security incidents and their notifications are recorded per product, together with technical documentation and evidence of conformity. Data from development and ticketing systems can be brought in through the REST API.
05 · Finance DORA Software tool for the Digital Operational Resilience Act. ICT risk management, ICT third-party providers and critical or important functions share one model, from which the register of information follows. ICT incidents with their reports, resilience tests and the measures that follow from them are documented traceably. Dashboards give the management body the status of each requirement.
06 · AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
07 · AI & data EU Data Act Software tool for the EU Data Act. Connected products and related services are captured with the data they generate. Obligations on data access, contract terms and switching between cloud services are tracked as requirements.
08 · Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
09 · Data protection GDPR Software tool for the General Data Protection Regulation. Every record the GDPR calls for is kept in the system: records of processing activities, data protection impact assessments, data subject requests, complaints and personal data breaches. Processing activities, processors and systems are linked to the technical and organisational measures. Existing records can be imported and exported again at any time.
10 · Automotive VDA TISAX® Software tool for preparing TISAX assessments under the VDA ISA. The questionnaire is rated per site with maturity levels, with prototype protection and data protection added as further chapters. Security incidents, deviations and corrective actions from the assessment are recorded and followed through to closure.

New 5

Information security Grundschutz++ Software tool for IT-Grundschutz++, the successor to the IT-Grundschutz compendium. Complaica imports the BSI user catalogue as an OSCAL catalogue and keeps it current when new versions appear. Requirements are assigned to the target objects in scope, with measures and evidence tracked against them. Internal audits under PERF.3 and an AI assistant over MCP are part of the standard scope.
Information security Migration to GS++ Service for moving from IT-Grundschutz to IT-Grundschutz++. We transfer the information domain, target objects, protection requirements and implemented measures from the existing model into the new user catalogue. Requirements the new catalogue adds show up as open tasks. The result is a complete GS++ baseline your team can continue working on straight away. Service
Information security CRA Software tool for the Cyber Resilience Act. The essential cybersecurity requirements of Annex I are assigned to products with digital elements and tracked across their lifecycle. Vulnerabilities, security incidents and their notifications are recorded per product, together with technical documentation and evidence of conformity. Data from development and ticketing systems can be brought in through the REST API.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
AI & data EU Data Act Software tool for the EU Data Act. Connected products and related services are captured with the data they generate. Obligations on data access, contract terms and switching between cloud services are tracked as requirements.

Germany 16

Information security IT-Grundschutz Software tool for IT-Grundschutz under BSI standards 200-1, 200-2 and 200-3. Complaica models the information domain (Informationsverbund) with business processes, applications, IT systems and rooms, and derives the protection requirements from their dependencies. The modules of the compendium are assigned to the target objects, and the implementation status of every requirement stays visible. The risk analysis under 200-3 builds on the same model.
Information security Grundschutz++ Software tool for IT-Grundschutz++, the successor to the IT-Grundschutz compendium. Complaica imports the BSI user catalogue as an OSCAL catalogue and keeps it current when new versions appear. Requirements are assigned to the target objects in scope, with measures and evidence tracked against them. Internal audits under PERF.3 and an AI assistant over MCP are part of the standard scope.
Information security Migration to GS++ Service for moving from IT-Grundschutz to IT-Grundschutz++. We transfer the information domain, target objects, protection requirements and implemented measures from the existing model into the new user catalogue. Requirements the new catalogue adds show up as open tasks. The result is a complete GS++ baseline your team can continue working on straight away. Service
Finance Kit DORAGDPRBDSG Bank & Finance Kit (DE)
Information security B3S Wasser/Abwasser Software tool for the industry-specific security standard (B3S) for water and wastewater. Plants, control systems and the processes of the critical service are modelled as scope and linked to the requirements of the B3S. Risk analysis and measure planning prepare the evidence for the BSI.
Information security B3S Krankenhäuser Software tool for the industry-specific security standard (B3S) for hospitals. The hospital information system, medical technology and care processes are captured with their dependencies, showing which systems patient care relies on. Measures, internal audits and evidence follow the requirements of the B3S.
Information security CISIS12 Software tool for CISIS12, the twelve-step ISMS for small and medium-sized enterprises and municipalities. The steps are planned as tasks with owners and deadlines. Policy, risk analysis and measures are produced in the system, and the documents for certification along with them.
Data protection GDPR Software tool for the General Data Protection Regulation. Every record the GDPR calls for is kept in the system: records of processing activities, data protection impact assessments, data subject requests, complaints and personal data breaches. Processing activities, processors and systems are linked to the technical and organisational measures. Existing records can be imported and exported again at any time.
Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
Information security CRA Software tool for the Cyber Resilience Act. The essential cybersecurity requirements of Annex I are assigned to products with digital elements and tracked across their lifecycle. Vulnerabilities, security incidents and their notifications are recorded per product, together with technical documentation and evidence of conformity. Data from development and ticketing systems can be brought in through the REST API.
Finance DORA Software tool for the Digital Operational Resilience Act. ICT risk management, ICT third-party providers and critical or important functions share one model, from which the register of information follows. ICT incidents with their reports, resilience tests and the measures that follow from them are documented traceably. Dashboards give the management body the status of each requirement.
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Information security ISO/IEC 27019 Software tool for ISO/IEC 27019, the energy-sector supplement to ISO/IEC 27002. Control and process technology is kept as its own part of the scope and linked to the additional controls of the standard. This extends an ISO 27001 ISMS by what, for example, the IT security catalogue of the German Federal Network Agency requires.
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.

Austria 14

Information security SFB 2.0 Software tool for the Security Framework Bund (SFB 2.0), the framework for information security in the Austrian federal administration. The requirements are kept as a catalogue and linked to scope, risks, measures and evidence. Security incidents and deviations are recorded, and the implementation status is available on the dashboard.
Data protection DSG (AT) Software tool for the Austrian Data Protection Act alongside the GDPR. Records of processing, data protection impact assessments, data subject requests and personal data breaches are kept together. Particulars of the DSG, such as data secrecy (Datengeheimnis), are mapped as requirements of their own.
Data protection Kit SFB 2.0Data Protection Act (AT) SFB 2.0 + DSG Kit
Finance Kit DORADSG Bank & Finance Kit (AT)
Information security IT-Grundschutz Software tool for IT-Grundschutz under BSI standards 200-1, 200-2 and 200-3. Complaica models the information domain (Informationsverbund) with business processes, applications, IT systems and rooms, and derives the protection requirements from their dependencies. The modules of the compendium are assigned to the target objects, and the implementation status of every requirement stays visible. The risk analysis under 200-3 builds on the same model.
Information security Grundschutz++ Software tool for IT-Grundschutz++, the successor to the IT-Grundschutz compendium. Complaica imports the BSI user catalogue as an OSCAL catalogue and keeps it current when new versions appear. Requirements are assigned to the target objects in scope, with measures and evidence tracked against them. Internal audits under PERF.3 and an AI assistant over MCP are part of the standard scope.
Information security Migration to GS++ Service for moving from IT-Grundschutz to IT-Grundschutz++. We transfer the information domain, target objects, protection requirements and implemented measures from the existing model into the new user catalogue. Requirements the new catalogue adds show up as open tasks. The result is a complete GS++ baseline your team can continue working on straight away. Service
Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
Information security CRA Software tool for the Cyber Resilience Act. The essential cybersecurity requirements of Annex I are assigned to products with digital elements and tracked across their lifecycle. Vulnerabilities, security incidents and their notifications are recorded per product, together with technical documentation and evidence of conformity. Data from development and ticketing systems can be brought in through the REST API.
Finance DORA Software tool for the Digital Operational Resilience Act. ICT risk management, ICT third-party providers and critical or important functions share one model, from which the register of information follows. ICT incidents with their reports, resilience tests and the measures that follow from them are documented traceably. Dashboards give the management body the status of each requirement.
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.

Switzerland 12

Data protection DSG/DSV (CH) Software tool for the revised Swiss Data Protection Act and the Data Protection Ordinance. The record of processing activities, data protection impact assessments, access requests and notifications of data security breaches to the FDPIC are kept in the system. The data security measures of the DSV are stored as requirements.
Finance Kit DORADSG/DSV Bank & Finance Kit (CH)
Information security IT-Grundschutz Software tool for IT-Grundschutz under BSI standards 200-1, 200-2 and 200-3. Complaica models the information domain (Informationsverbund) with business processes, applications, IT systems and rooms, and derives the protection requirements from their dependencies. The modules of the compendium are assigned to the target objects, and the implementation status of every requirement stays visible. The risk analysis under 200-3 builds on the same model.
Information security Grundschutz++ Software tool for IT-Grundschutz++, the successor to the IT-Grundschutz compendium. Complaica imports the BSI user catalogue as an OSCAL catalogue and keeps it current when new versions appear. Requirements are assigned to the target objects in scope, with measures and evidence tracked against them. Internal audits under PERF.3 and an AI assistant over MCP are part of the standard scope.
Information security Migration to GS++ Service for moving from IT-Grundschutz to IT-Grundschutz++. We transfer the information domain, target objects, protection requirements and implemented measures from the existing model into the new user catalogue. Requirements the new catalogue adds show up as open tasks. The result is a complete GS++ baseline your team can continue working on straight away. Service
Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
Information security CRA Software tool for the Cyber Resilience Act. The essential cybersecurity requirements of Annex I are assigned to products with digital elements and tracked across their lifecycle. Vulnerabilities, security incidents and their notifications are recorded per product, together with technical documentation and evidence of conformity. Data from development and ticketing systems can be brought in through the REST API.
Finance DORA Software tool for the Digital Operational Resilience Act. ICT risk management, ICT third-party providers and critical or important functions share one model, from which the register of information follows. ICT incidents with their reports, resilience tests and the measures that follow from them are documented traceably. Dashboards give the management body the status of each requirement.
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.

Spain 11

Data protection Kit RGPDLOPDGDD (LO 3/2018)LSSI-CE (Ley 34/2002) RGPD + LOPDGDD + LSSI-CE
Information security RDL 12/2018 + RD 43/2021 Software tool for the Spanish rules on the security of network and information systems, RDL 12/2018 with RD 43/2021. Essential services and digital services are captured with their systems and linked to the security measures. Incidents and notifications to the competent CSIRT are documented traceably.
Information security Ley 8/2011 + RD 704/2011 Software tool for critical infrastructure protection in Spain under Ley 8/2011 and RD 704/2011. The operator security plan and the specific protection plans for each infrastructure are built on the modelled scope. Risk analysis and measures connect physical and logical security.
Information security ENS Software tool for the Esquema Nacional de Seguridad in Spain. Complaica will classify systems into the BÁSICA, MEDIA and ALTA categories and derive the measures of Annex II from them. Statement of applicability, security incidents and evidence will prepare the certification of conformity. Coming soon
Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
Information security CRA Software tool for the Cyber Resilience Act. The essential cybersecurity requirements of Annex I are assigned to products with digital elements and tracked across their lifecycle. Vulnerabilities, security incidents and their notifications are recorded per product, together with technical documentation and evidence of conformity. Data from development and ticketing systems can be brought in through the REST API.
Finance DORA Software tool for the Digital Operational Resilience Act. ICT risk management, ICT third-party providers and critical or important functions share one model, from which the register of information follows. ICT incidents with their reports, resilience tests and the measures that follow from them are documented traceably. Dashboards give the management body the status of each requirement.
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.

France 12

Information security SecNumCloud Software tool for ANSSI's SecNumCloud qualification. Complaica will track the requirements of the framework, including protection against non-European law, per cloud service. Evidence for the qualification is prepared in one place. Coming soon
Data protection HDS Software tool for the HDS certification of health data hosts in France. Complaica will build the requirements on an ISO 27001 ISMS and assign them per hosting activity. Contracts, incidents and evidence will sit in one place. Coming soon
Information security LPM / OIV Software tool for the obligations of operators of vital importance under the Loi de programmation militaire. Complaica will capture the information systems of vital importance and link them to ANSSI's security rules. Incidents and their notifications are documented traceably. Coming soon
Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
Data protection GDPR Software tool for the General Data Protection Regulation. Every record the GDPR calls for is kept in the system: records of processing activities, data protection impact assessments, data subject requests, complaints and personal data breaches. Processing activities, processors and systems are linked to the technical and organisational measures. Existing records can be imported and exported again at any time.
Information security CRA Software tool for the Cyber Resilience Act. The essential cybersecurity requirements of Annex I are assigned to products with digital elements and tracked across their lifecycle. Vulnerabilities, security incidents and their notifications are recorded per product, together with technical documentation and evidence of conformity. Data from development and ticketing systems can be brought in through the REST API.
Finance DORA Software tool for the Digital Operational Resilience Act. ICT risk management, ICT third-party providers and critical or important functions share one model, from which the register of information follows. ICT incidents with their reports, resilience tests and the measures that follow from them are documented traceably. Dashboards give the management body the status of each requirement.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.

Canada 9

Data protection PIPEDA Software tool for PIPEDA, the Canadian privacy law for the private sector. Complaica will keep the ten fair information principles as requirements. Access requests, complaints and breaches of security safeguards are documented in the required record. Coming soon
Data protection Loi 25 (Québec) Software tool for Law 25, the modernisation of privacy protection in Québec. Complaica will keep the person in charge, privacy impact assessments and the register of incidents. Consent, requests and transparency obligations will be stored as requirements. Coming soon
Finance OSFI B-13 Software tool for OSFI Guideline B-13 on technology and cyber risk management. Complaica will link governance, technology operations and cyber resilience to the financial institution's systems. Incidents and a dashboard per area will show management the status. Coming soon
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Information security SOC 2 Software tool for SOC 2 under the AICPA Trust Services Criteria. Complaica will map controls to the criteria and collect evidence across the whole audit period. Evidence from operating systems and tools will be able to come in automatically through the REST API. Coming soon
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.
Business continuity ISO 22301 Software tool for business continuity management under ISO 22301. The business impact analysis works with the processes in scope and their dependencies. Incidents, exercises and their evaluations are recorded, and internal audits keep the BCMS in the PDCA cycle.

Mexico 8

Data protection LFPDPPP Software tool for the Mexican Federal Law on the Protection of Personal Data Held by Private Parties. Complaica will keep privacy notices and processing activities together. Requests for access, rectification, cancellation and opposition are handled against their deadlines. Coming soon
Data protection NOM-151-SCFI-2016 Software tool for NOM-151-SCFI-2016 on the retention of electronic data messages in Mexico. Complaica will capture the documents subject to retention and their systems. The requirements on integrity and time stamps are linked to measures and evidence. Coming soon
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Information security SOC 2 Software tool for SOC 2 under the AICPA Trust Services Criteria. Complaica will map controls to the criteria and collect evidence across the whole audit period. Evidence from operating systems and tools will be able to come in automatically through the REST API. Coming soon
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.
Business continuity ISO 22301 Software tool for business continuity management under ISO 22301. The business impact analysis works with the processes in scope and their dependencies. Incidents, exercises and their evaluations are recorded, and internal audits keep the BCMS in the PDCA cycle.

Argentina 8

Data protection Ley 25.326 Software tool for Argentina's data protection law, Ley 25.326. Complaica will capture databases holding personal data and prepare them for registration with the supervisory authority. Security measures and data subject requests are tracked as requirements and records. Coming soon
Finance BCRA Com. „A“ 7724 Software tool for Communication A 7724 of the Central Bank of Argentina. Complaica will link the requirements for managing technology and information security risks to the institution's systems and providers. Incidents and a dashboard will show the status towards the supervisor. Coming soon
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Information security SOC 2 Software tool for SOC 2 under the AICPA Trust Services Criteria. Complaica will map controls to the criteria and collect evidence across the whole audit period. Evidence from operating systems and tools will be able to come in automatically through the REST API. Coming soon
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.
Business continuity ISO 22301 Software tool for business continuity management under ISO 22301. The business impact analysis works with the processes in scope and their dependencies. Incidents, exercises and their evaluations are recorded, and internal audits keep the BCMS in the PDCA cycle.

Portugal 11

Information security QNRCS Software tool for the National Cybersecurity Reference Framework of the CNCS in Portugal. Complaica will link the framework's objectives to scope, measures and evidence. Maturity will be assessed per area and tracked over time. Coming soon
Data protection Lei 58/2019 Software tool for Lei 58/2019, the Portuguese act implementing the GDPR. Complaica will keep the national particulars as requirements of their own beside the obligations of the GDPR. Records of processing, data subject requests and personal data breaches will serve both. Coming soon
Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
Data protection GDPR Software tool for the General Data Protection Regulation. Every record the GDPR calls for is kept in the system: records of processing activities, data protection impact assessments, data subject requests, complaints and personal data breaches. Processing activities, processors and systems are linked to the technical and organisational measures. Existing records can be imported and exported again at any time.
Information security CRA Software tool for the Cyber Resilience Act. The essential cybersecurity requirements of Annex I are assigned to products with digital elements and tracked across their lifecycle. Vulnerabilities, security incidents and their notifications are recorded per product, together with technical documentation and evidence of conformity. Data from development and ticketing systems can be brought in through the REST API.
Finance DORA Software tool for the Digital Operational Resilience Act. ICT risk management, ICT third-party providers and critical or important functions share one model, from which the register of information follows. ICT incidents with their reports, resilience tests and the measures that follow from them are documented traceably. Dashboards give the management body the status of each requirement.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.

Czechia 11

Information security ZoKB (CZ) Software tool for the Czech Cybersecurity Act transposing NIS2. Depending on the regime of higher or lower obligations, Complaica will map the security measures of the implementing decrees. Incidents and their notifications to NÚKIB are documented. Coming soon
Data protection Zákon 110/2019 Sb. Software tool for the Czech Act on the Processing of Personal Data. Complaica will keep the national rules in the same record of processing alongside the GDPR obligations. Data subject requests, personal data breaches and evidence are gathered for inspections by the supervisory authority. Coming soon
Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
Data protection GDPR Software tool for the General Data Protection Regulation. Every record the GDPR calls for is kept in the system: records of processing activities, data protection impact assessments, data subject requests, complaints and personal data breaches. Processing activities, processors and systems are linked to the technical and organisational measures. Existing records can be imported and exported again at any time.
Information security CRA Software tool for the Cyber Resilience Act. The essential cybersecurity requirements of Annex I are assigned to products with digital elements and tracked across their lifecycle. Vulnerabilities, security incidents and their notifications are recorded per product, together with technical documentation and evidence of conformity. Data from development and ticketing systems can be brought in through the REST API.
Finance DORA Software tool for the Digital Operational Resilience Act. ICT risk management, ICT third-party providers and critical or important functions share one model, from which the register of information follows. ICT incidents with their reports, resilience tests and the measures that follow from them are documented traceably. Dashboards give the management body the status of each requirement.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.

Poland 12

Information security KSC (PL) Software tool for the Polish Act on the National Cybersecurity System. Complaica will keep the obligations of essential and important entities as requirements. Incidents and notifications to the competent CSIRT are documented traceably. Coming soon
Data protection UODO Act (PL) Software tool for the Polish Data Protection Act of 2018. Complaica will keep the national rules alongside the GDPR, including the notification of the data protection officer to UODO. Records of processing, data subject requests and personal data breaches are kept together. Coming soon
Finance KNF Rekomendacja D Software tool for Recommendation D of the Polish Financial Supervision Authority (KNF). Complaica will link the recommendations on IT management and IT security in banks to systems and providers. A dashboard will show the implementation status per recommendation. Coming soon
Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
Data protection GDPR Software tool for the General Data Protection Regulation. Every record the GDPR calls for is kept in the system: records of processing activities, data protection impact assessments, data subject requests, complaints and personal data breaches. Processing activities, processors and systems are linked to the technical and organisational measures. Existing records can be imported and exported again at any time.
Information security CRA Software tool for the Cyber Resilience Act. The essential cybersecurity requirements of Annex I are assigned to products with digital elements and tracked across their lifecycle. Vulnerabilities, security incidents and their notifications are recorded per product, together with technical documentation and evidence of conformity. Data from development and ticketing systems can be brought in through the REST API.
Finance DORA Software tool for the Digital Operational Resilience Act. ICT risk management, ICT third-party providers and critical or important functions share one model, from which the register of information follows. ICT incidents with their reports, resilience tests and the measures that follow from them are documented traceably. Dashboards give the management body the status of each requirement.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.

Banking & finance 7

Finance BAIT / KAIT Software tool for the supervisory requirements for IT in banks and asset management companies (BAIT and KAIT). BaFin repealed the KAIT in January 2025, and the BAIT are being phased out until the end of 2026 in favour of DORA. Information risk management, access management, IT projects and outsourcing are linked to their requirements, and institutions in transition keep both catalogues side by side until their measures have moved to DORA.
Finance MaRisk Software tool for BaFin's Minimum Requirements for Risk Management. Complaica will link the risk inventory, risk-bearing capacity and outsourcing to the modules of MaRisk. Internal audit will be able to use the same data for its reviews. Coming soon
Finance DORA Software tool for the Digital Operational Resilience Act. ICT risk management, ICT third-party providers and critical or important functions share one model, from which the register of information follows. ICT incidents with their reports, resilience tests and the measures that follow from them are documented traceably. Dashboards give the management body the status of each requirement.
Data protection GDPR Software tool for the General Data Protection Regulation. Every record the GDPR calls for is kept in the system: records of processing activities, data protection impact assessments, data subject requests, complaints and personal data breaches. Processing activities, processors and systems are linked to the technical and organisational measures. Existing records can be imported and exported again at any time.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Business continuity ISO 22301 Software tool for business continuity management under ISO 22301. The business impact analysis works with the processes in scope and their dependencies. Incidents, exercises and their evaluations are recorded, and internal audits keep the BCMS in the PDCA cycle.

Automotive 14

Automotive KGAS Software tool for the Group basic requirements for software (KGAS). The requirements are tracked per project and scope of delivery, with evidence filed directly against each requirement. Status from the development process can be brought in and passed back out through the REST API.
ESG & supply chain LkSG Software tool for the German Supply Chain Due Diligence Act. Suppliers are kept as assets with a risk analysis of human rights and environmental risks. Preventive and remedial measures are documented, and reports from the complaints procedure are kept as records with their handling status.
Information security CRA Software tool for the Cyber Resilience Act. The essential cybersecurity requirements of Annex I are assigned to products with digital elements and tracked across their lifecycle. Vulnerabilities, security incidents and their notifications are recorded per product, together with technical documentation and evidence of conformity. Data from development and ticketing systems can be brought in through the REST API.
ESG & supply chain CSRD Software tool for sustainability reporting under the CSRD. The materiality assessment determines which ESRS disclosures are reported, and owners and data sources are set per disclosure. Evidence for the assurance of the report sits in one place.
AI & data EU Data Act Software tool for the EU Data Act. Connected products and related services are captured with the data they generate. Obligations on data access, contract terms and switching between cloud services are tracked as requirements.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
Automotive VDA TISAX® Software tool for preparing TISAX assessments under the VDA ISA. The questionnaire is rated per site with maturity levels, with prototype protection and data protection added as further chapters. Security incidents, deviations and corrective actions from the assessment are recorded and followed through to closure.
Automotive ISO/SAE 21434 Software tool for cybersecurity engineering under ISO/SAE 21434. Threat analysis and risk assessment (TARA) builds on the vehicle components and their interfaces. Cybersecurity goals and requirements are tracked across the lifecycle into post-development.
Quality & processes Automotive SPICE Software tool for Automotive SPICE. Base practices and work products are assigned to the processes per project and rated by capability level. Findings from assessments become improvement actions with owners and deadlines.
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.
Quality & processes ISO/IEC 33000 Software tool for process assessments under the ISO/IEC 330xx series. Process models, assessment indicators and capability levels are rated per organisational unit. Assessments are planned, findings turned into actions and followed to closure.
Automotive UNECE R155 / R156 Software tool for UN Regulations R155 and R156. Complaica will link the cyber security management system and the software update management system to the vehicle types. Security incidents and evidence for type approval will be kept per vehicle type. Coming soon

Energy 10

Information security B3S Wasser/Abwasser Software tool for the industry-specific security standard (B3S) for water and wastewater. Plants, control systems and the processes of the critical service are modelled as scope and linked to the requirements of the B3S. Risk analysis and measure planning prepare the evidence for the BSI.
ESG & supply chain LkSG Software tool for the German Supply Chain Due Diligence Act. Suppliers are kept as assets with a risk analysis of human rights and environmental risks. Preventive and remedial measures are documented, and reports from the complaints procedure are kept as records with their handling status.
Business continuity BSI-Standard 200-4 Software tool for business continuity management under BSI standard 200-4. The system grows with you from the reactive through the build-up to the standard BCMS. Business impact analysis and business continuity plans use the information domain from IT-Grundschutz.
Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
ESG & supply chain CSRD Software tool for sustainability reporting under the CSRD. The materiality assessment determines which ESRS disclosures are reported, and owners and data sources are set per disclosure. Evidence for the assurance of the report sits in one place.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
Information security ISO/IEC 27019 Software tool for ISO/IEC 27019, the energy-sector supplement to ISO/IEC 27002. Control and process technology is kept as its own part of the scope and linked to the additional controls of the standard. This extends an ISO 27001 ISMS by what, for example, the IT security catalogue of the German Federal Network Agency requires.
Business continuity ISO 22301 Software tool for business continuity management under ISO 22301. The business impact analysis works with the processes in scope and their dependencies. Incidents, exercises and their evaluations are recorded, and internal audits keep the BCMS in the PDCA cycle.
Information security IEC 62443 Software tool for IEC 62443 in operational technology. Complaica will divide plants into zones and conduits and give them target security levels. Requirements for asset owners, integrators and component manufacturers will be tracked separately. Coming soon
Quality & processes ISO 50001 Software tool for energy management under ISO 50001. Complaica will keep the energy review, energy baseline and energy performance indicators per site. Significant energy uses, actions and corrective actions will be visible on the dashboard. Coming soon

Cloud service providers & data centres 9

Information security BSI C5 Software tool for the BSI C5 criteria catalogue. Basic and additional criteria are assessed per cloud service and linked to the provider's controls. The system description and evidence for the audit are prepared in the system.
Business continuity BSI-Standard 200-4 Software tool for business continuity management under BSI standard 200-4. The system grows with you from the reactive through the build-up to the standard BCMS. Business impact analysis and business continuity plans use the information domain from IT-Grundschutz.
Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
Data protection GDPR Software tool for the General Data Protection Regulation. Every record the GDPR calls for is kept in the system: records of processing activities, data protection impact assessments, data subject requests, complaints and personal data breaches. Processing activities, processors and systems are linked to the technical and organisational measures. Existing records can be imported and exported again at any time.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Information security ISO/IEC 27017 Software tool for ISO/IEC 27017, the cloud controls for ISO/IEC 27002. For each cloud service it is recorded which responsibility lies with the provider and which with the customer. The additional controls extend an existing ISO 27001 ISMS.
Data protection ISO/IEC 27018 Software tool for ISO/IEC 27018 on protecting personal data in the public cloud. The controls for providers acting as processors are tracked alongside the obligations of the GDPR. Processing activities and sub-processors sit in the same register.
Business continuity ISO 22301 Software tool for business continuity management under ISO 22301. The business impact analysis works with the processes in scope and their dependencies. Incidents, exercises and their evaluations are recorded, and internal audits keep the BCMS in the PDCA cycle.

Healthcare 10

Information security B3S Krankenhäuser Software tool for the industry-specific security standard (B3S) for hospitals. The hospital information system, medical technology and care processes are captured with their dependencies, showing which systems patient care relies on. Measures, internal audits and evidence follow the requirements of the B3S.
Business continuity BSI-Standard 200-4 Software tool for business continuity management under BSI standard 200-4. The system grows with you from the reactive through the build-up to the standard BCMS. Business impact analysis and business continuity plans use the information domain from IT-Grundschutz.
Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
Data protection GDPR Software tool for the General Data Protection Regulation. Every record the GDPR calls for is kept in the system: records of processing activities, data protection impact assessments, data subject requests, complaints and personal data breaches. Processing activities, processors and systems are linked to the technical and organisational measures. Existing records can be imported and exported again at any time.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Information security ISO 27799 Software tool for ISO 27799, information security in health. Complaica will extend the controls of ISO/IEC 27002 with the requirements for health data. Systems that process patient data will be marked separately in scope, with security incidents linked to them. Coming soon
Business continuity ISO 22301 Software tool for business continuity management under ISO 22301. The business impact analysis works with the processes in scope and their dependencies. Incidents, exercises and their evaluations are recorded, and internal audits keep the BCMS in the PDCA cycle.
Quality & processes ISO 13485 Software tool for quality management of medical devices under ISO 13485. Design controls and risk management are assigned to the products. Complaints, incidents and corrective and preventive actions are kept as records, and documented procedures are always at hand for audits.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.

Education 6

Information security Kit IT-GrundschutzIT-Grundschutz profile for universities IT-Grundschutz + University Profile
Information security Grundschutz++ Software tool for IT-Grundschutz++, the successor to the IT-Grundschutz compendium. Complaica imports the BSI user catalogue as an OSCAL catalogue and keeps it current when new versions appear. Requirements are assigned to the target objects in scope, with measures and evidence tracked against them. Internal audits under PERF.3 and an AI assistant over MCP are part of the standard scope.
Business continuity BSI-Standard 200-4 Software tool for business continuity management under BSI standard 200-4. The system grows with you from the reactive through the build-up to the standard BCMS. Business impact analysis and business continuity plans use the information domain from IT-Grundschutz.
Data protection GDPR Software tool for the General Data Protection Regulation. Every record the GDPR calls for is kept in the system: records of processing activities, data protection impact assessments, data subject requests, complaints and personal data breaches. Processing activities, processors and systems are linked to the technical and organisational measures. Existing records can be imported and exported again at any time.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit

Industry 10

ESG & supply chain LkSG Software tool for the German Supply Chain Due Diligence Act. Suppliers are kept as assets with a risk analysis of human rights and environmental risks. Preventive and remedial measures are documented, and reports from the complaints procedure are kept as records with their handling status.
Information security CRA Software tool for the Cyber Resilience Act. The essential cybersecurity requirements of Annex I are assigned to products with digital elements and tracked across their lifecycle. Vulnerabilities, security incidents and their notifications are recorded per product, together with technical documentation and evidence of conformity. Data from development and ticketing systems can be brought in through the REST API.
Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
ESG & supply chain CSRD Software tool for sustainability reporting under the CSRD. The materiality assessment determines which ESRS disclosures are reported, and owners and data sources are set per disclosure. Evidence for the assurance of the report sits in one place.
AI & data EU Data Act Software tool for the EU Data Act. Connected products and related services are captured with the data they generate. Obligations on data access, contract terms and switching between cloud services are tracked as requirements.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.
Information security IEC 62443 Software tool for IEC 62443 in operational technology. Complaica will divide plants into zones and conduits and give them target security levels. Requirements for asset owners, integrators and component manufacturers will be tracked separately. Coming soon

Food & beverages 12

ESG & supply chain LkSG Software tool for the German Supply Chain Due Diligence Act. Suppliers are kept as assets with a risk analysis of human rights and environmental risks. Preventive and remedial measures are documented, and reports from the complaints procedure are kept as records with their handling status.
Business continuity BSI-Standard 200-4 Software tool for business continuity management under BSI standard 200-4. The system grows with you from the reactive through the build-up to the standard BCMS. Business impact analysis and business continuity plans use the information domain from IT-Grundschutz.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
Quality & processes ISO 22000 Software tool for food safety management systems under ISO 22000. Hazard analysis, prerequisite programmes and HACCP plans are assigned to the production processes. Deviations, recalls and corrective actions are recorded, and verification and internal audits run in the PDCA cycle.
Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.
Business continuity ISO 22301 Software tool for business continuity management under ISO 22301. The business impact analysis works with the processes in scope and their dependencies. Incidents, exercises and their evaluations are recorded, and internal audits keep the BCMS in the PDCA cycle.
Quality & processes IFS Food Software tool for preparing IFS Food audits. Complaica will rate the requirements of the standard, including the KO criteria, per site. Deviations from the audit become corrective actions with deadlines. Coming soon
Quality & processes BRCGS Food Safety Software tool for the BRCGS Global Standard Food Safety. Complaica will keep senior management commitment, the HACCP plan and site standards as requirements. Complaints and corrective actions are recorded, and evidence is kept ready for unannounced audits too. Coming soon
Quality & processes FSSC 22000 Software tool for FSSC 22000 certification. Complaica will bring ISO 22000, the prerequisite programmes under ISO/TS 22002 and the additional FSSC requirements together in one catalogue. Internal audits and management review will cover all three parts. Coming soon
Quality & processes HACCP Software tool for HACCP. Complaica will map the seven principles per process, from hazard analysis through the critical control points to verification. Monitoring results and corrective actions are documented without gaps. Coming soon

Public sector 12

Information security Kit IT-Grundschutzmunicipal administration profile IT-Grundschutz + Municipal Profile
ESG & supply chain LkSG Software tool for the German Supply Chain Due Diligence Act. Suppliers are kept as assets with a risk analysis of human rights and environmental risks. Preventive and remedial measures are documented, and reports from the complaints procedure are kept as records with their handling status.
Information security BSI TR-03138 RESISCAN Software tool for replacement scanning under BSI TR-03138 (RESISCAN). The scanning process and the protection requirements of the documents are captured and linked to the measures of the guideline. This produces the procedural documentation for the audit.
Business continuity BSI-Standard 200-4 Software tool for business continuity management under BSI standard 200-4. The system grows with you from the reactive through the build-up to the standard BCMS. Business impact analysis and business continuity plans use the information domain from IT-Grundschutz.
Information security DIN SPEC 27076 Software tool for IT security consulting under DIN SPEC 27076 for small and micro enterprises. The requirements catalogue is worked through and rated during the interview. The results report with prioritised measures is produced directly in the system.
Information security CISIS12 Software tool for CISIS12, the twelve-step ISMS for small and medium-sized enterprises and municipalities. The steps are planned as tasks with owners and deadlines. Policy, risk analysis and measures are produced in the system, and the documents for certification along with them.
Data protection GDPR Software tool for the General Data Protection Regulation. Every record the GDPR calls for is kept in the system: records of processing activities, data protection impact assessments, data subject requests, complaints and personal data breaches. Processing activities, processors and systems are linked to the technical and organisational measures. Existing records can be imported and exported again at any time.
AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
Quality & processes ISO 31000 Software tool for risk management under ISO 31000. Risk criteria, assessment and treatment apply across the organisation, not only to information security. Risk reports for management come straight from the dashboard.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.
Quality & processes ISO 37000 Software tool for the governance of organizations under ISO 37000. Governance principles are linked to the responsibilities of the governing bodies, policies and oversight tasks. Evidence of how oversight is exercised sits in one place.
Business continuity ISO 22301 Software tool for business continuity management under ISO 22301. The business impact analysis works with the processes in scope and their dependencies. Incidents, exercises and their evaluations are recorded, and internal audits keep the BCMS in the PDCA cycle.

Information security 28

Information security IT-Grundschutz Software tool for IT-Grundschutz under BSI standards 200-1, 200-2 and 200-3. Complaica models the information domain (Informationsverbund) with business processes, applications, IT systems and rooms, and derives the protection requirements from their dependencies. The modules of the compendium are assigned to the target objects, and the implementation status of every requirement stays visible. The risk analysis under 200-3 builds on the same model.
Information security Grundschutz++ Software tool for IT-Grundschutz++, the successor to the IT-Grundschutz compendium. Complaica imports the BSI user catalogue as an OSCAL catalogue and keeps it current when new versions appear. Requirements are assigned to the target objects in scope, with measures and evidence tracked against them. Internal audits under PERF.3 and an AI assistant over MCP are part of the standard scope.
Information security Migration to GS++ Service for moving from IT-Grundschutz to IT-Grundschutz++. We transfer the information domain, target objects, protection requirements and implemented measures from the existing model into the new user catalogue. Requirements the new catalogue adds show up as open tasks. The result is a complete GS++ baseline your team can continue working on straight away. Service
Information security B3S Wasser/Abwasser Software tool for the industry-specific security standard (B3S) for water and wastewater. Plants, control systems and the processes of the critical service are modelled as scope and linked to the requirements of the B3S. Risk analysis and measure planning prepare the evidence for the BSI.
Information security B3S Krankenhäuser Software tool for the industry-specific security standard (B3S) for hospitals. The hospital information system, medical technology and care processes are captured with their dependencies, showing which systems patient care relies on. Measures, internal audits and evidence follow the requirements of the B3S.
Information security CISIS12 Software tool for CISIS12, the twelve-step ISMS for small and medium-sized enterprises and municipalities. The steps are planned as tasks with owners and deadlines. Policy, risk analysis and measures are produced in the system, and the documents for certification along with them.
Information security SFB 2.0 Software tool for the Security Framework Bund (SFB 2.0), the framework for information security in the Austrian federal administration. The requirements are kept as a catalogue and linked to scope, risks, measures and evidence. Security incidents and deviations are recorded, and the implementation status is available on the dashboard.
Information security RDL 12/2018 + RD 43/2021 Software tool for the Spanish rules on the security of network and information systems, RDL 12/2018 with RD 43/2021. Essential services and digital services are captured with their systems and linked to the security measures. Incidents and notifications to the competent CSIRT are documented traceably.
Information security Ley 8/2011 + RD 704/2011 Software tool for critical infrastructure protection in Spain under Ley 8/2011 and RD 704/2011. The operator security plan and the specific protection plans for each infrastructure are built on the modelled scope. Risk analysis and measures connect physical and logical security.
Information security BSI C5 Software tool for the BSI C5 criteria catalogue. Basic and additional criteria are assessed per cloud service and linked to the provider's controls. The system description and evidence for the audit are prepared in the system.
Information security Kit IT-GrundschutzIT-Grundschutz profile for universities IT-Grundschutz + University Profile
Information security Kit IT-Grundschutzmunicipal administration profile IT-Grundschutz + Municipal Profile
Information security BSI TR-03138 RESISCAN Software tool for replacement scanning under BSI TR-03138 (RESISCAN). The scanning process and the protection requirements of the documents are captured and linked to the measures of the guideline. This produces the procedural documentation for the audit.
Information security DIN SPEC 27076 Software tool for IT security consulting under DIN SPEC 27076 for small and micro enterprises. The requirements catalogue is worked through and rated during the interview. The results report with prioritised measures is produced directly in the system.
Information security ENS Software tool for the Esquema Nacional de Seguridad in Spain. Complaica will classify systems into the BÁSICA, MEDIA and ALTA categories and derive the measures of Annex II from them. Statement of applicability, security incidents and evidence will prepare the certification of conformity. Coming soon
Information security SecNumCloud Software tool for ANSSI's SecNumCloud qualification. Complaica will track the requirements of the framework, including protection against non-European law, per cloud service. Evidence for the qualification is prepared in one place. Coming soon
Information security LPM / OIV Software tool for the obligations of operators of vital importance under the Loi de programmation militaire. Complaica will capture the information systems of vital importance and link them to ANSSI's security rules. Incidents and their notifications are documented traceably. Coming soon
Information security QNRCS Software tool for the National Cybersecurity Reference Framework of the CNCS in Portugal. Complaica will link the framework's objectives to scope, measures and evidence. Maturity will be assessed per area and tracked over time. Coming soon
Information security ZoKB (CZ) Software tool for the Czech Cybersecurity Act transposing NIS2. Depending on the regime of higher or lower obligations, Complaica will map the security measures of the implementing decrees. Incidents and their notifications to NÚKIB are documented. Coming soon
Information security KSC (PL) Software tool for the Polish Act on the National Cybersecurity System. Complaica will keep the obligations of essential and important entities as requirements. Incidents and notifications to the competent CSIRT are documented traceably. Coming soon
Information security NIS2 Software tool for the NIS 2 Directive and its national transposition. The cybersecurity risk-management measures of Art. 21 are mapped as requirements and linked to scope, risks and measures. Security incidents are recorded together with their notifications to the authority, and management accountability is evidenced through training and approvals. A dashboard shows management the implementation status.
Information security CRA Software tool for the Cyber Resilience Act. The essential cybersecurity requirements of Annex I are assigned to products with digital elements and tracked across their lifecycle. Vulnerabilities, security incidents and their notifications are recorded per product, together with technical documentation and evidence of conformity. Data from development and ticketing systems can be brought in through the REST API.
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit
Information security ISO/IEC 27019 Software tool for ISO/IEC 27019, the energy-sector supplement to ISO/IEC 27002. Control and process technology is kept as its own part of the scope and linked to the additional controls of the standard. This extends an ISO 27001 ISMS by what, for example, the IT security catalogue of the German Federal Network Agency requires.
Information security ISO/IEC 27017 Software tool for ISO/IEC 27017, the cloud controls for ISO/IEC 27002. For each cloud service it is recorded which responsibility lies with the provider and which with the customer. The additional controls extend an existing ISO 27001 ISMS.
Information security IEC 62443 Software tool for IEC 62443 in operational technology. Complaica will divide plants into zones and conduits and give them target security levels. Requirements for asset owners, integrators and component manufacturers will be tracked separately. Coming soon
Information security ISO 27799 Software tool for ISO 27799, information security in health. Complaica will extend the controls of ISO/IEC 27002 with the requirements for health data. Systems that process patient data will be marked separately in scope, with security incidents linked to them. Coming soon
Information security SOC 2 Software tool for SOC 2 under the AICPA Trust Services Criteria. Complaica will map controls to the criteria and collect evidence across the whole audit period. Evidence from operating systems and tools will be able to come in automatically through the REST API. Coming soon

Data protection 15

Data protection DSG (AT) Software tool for the Austrian Data Protection Act alongside the GDPR. Records of processing, data protection impact assessments, data subject requests and personal data breaches are kept together. Particulars of the DSG, such as data secrecy (Datengeheimnis), are mapped as requirements of their own.
Data protection Kit SFB 2.0Data Protection Act (AT) SFB 2.0 + DSG Kit
Data protection DSG/DSV (CH) Software tool for the revised Swiss Data Protection Act and the Data Protection Ordinance. The record of processing activities, data protection impact assessments, access requests and notifications of data security breaches to the FDPIC are kept in the system. The data security measures of the DSV are stored as requirements.
Data protection Kit RGPDLOPDGDD (LO 3/2018)LSSI-CE (Ley 34/2002) RGPD + LOPDGDD + LSSI-CE
Data protection HDS Software tool for the HDS certification of health data hosts in France. Complaica will build the requirements on an ISO 27001 ISMS and assign them per hosting activity. Contracts, incidents and evidence will sit in one place. Coming soon
Data protection PIPEDA Software tool for PIPEDA, the Canadian privacy law for the private sector. Complaica will keep the ten fair information principles as requirements. Access requests, complaints and breaches of security safeguards are documented in the required record. Coming soon
Data protection Loi 25 (Québec) Software tool for Law 25, the modernisation of privacy protection in Québec. Complaica will keep the person in charge, privacy impact assessments and the register of incidents. Consent, requests and transparency obligations will be stored as requirements. Coming soon
Data protection LFPDPPP Software tool for the Mexican Federal Law on the Protection of Personal Data Held by Private Parties. Complaica will keep privacy notices and processing activities together. Requests for access, rectification, cancellation and opposition are handled against their deadlines. Coming soon
Data protection NOM-151-SCFI-2016 Software tool for NOM-151-SCFI-2016 on the retention of electronic data messages in Mexico. Complaica will capture the documents subject to retention and their systems. The requirements on integrity and time stamps are linked to measures and evidence. Coming soon
Data protection Ley 25.326 Software tool for Argentina's data protection law, Ley 25.326. Complaica will capture databases holding personal data and prepare them for registration with the supervisory authority. Security measures and data subject requests are tracked as requirements and records. Coming soon
Data protection Lei 58/2019 Software tool for Lei 58/2019, the Portuguese act implementing the GDPR. Complaica will keep the national particulars as requirements of their own beside the obligations of the GDPR. Records of processing, data subject requests and personal data breaches will serve both. Coming soon
Data protection Zákon 110/2019 Sb. Software tool for the Czech Act on the Processing of Personal Data. Complaica will keep the national rules in the same record of processing alongside the GDPR obligations. Data subject requests, personal data breaches and evidence are gathered for inspections by the supervisory authority. Coming soon
Data protection UODO Act (PL) Software tool for the Polish Data Protection Act of 2018. Complaica will keep the national rules alongside the GDPR, including the notification of the data protection officer to UODO. Records of processing, data subject requests and personal data breaches are kept together. Coming soon
Data protection GDPR Software tool for the General Data Protection Regulation. Every record the GDPR calls for is kept in the system: records of processing activities, data protection impact assessments, data subject requests, complaints and personal data breaches. Processing activities, processors and systems are linked to the technical and organisational measures. Existing records can be imported and exported again at any time.
Data protection ISO/IEC 27018 Software tool for ISO/IEC 27018 on protecting personal data in the public cloud. The controls for providers acting as processors are tracked alongside the obligations of the GDPR. Processing activities and sub-processors sit in the same register.

Quality & processes 14

Quality & processes ISO 9001 Software tool for quality management under ISO 9001. Processes, risks and opportunities, quality objectives and documented information are maintained together. Complaints, nonconformities and corrective and preventive actions are kept as records. Internal audits and management review close the PDCA cycle.
Quality & processes ISO 14001 Software tool for environmental management under ISO 14001. Environmental aspects, compliance obligations and environmental objectives are assigned to sites and processes. Environmental incidents and corrective actions are recorded, and indicators appear on the dashboard. Internal audits check effectiveness.
Quality & processes Automotive SPICE Software tool for Automotive SPICE. Base practices and work products are assigned to the processes per project and rated by capability level. Findings from assessments become improvement actions with owners and deadlines.
Quality & processes ISO/IEC 33000 Software tool for process assessments under the ISO/IEC 330xx series. Process models, assessment indicators and capability levels are rated per organisational unit. Assessments are planned, findings turned into actions and followed to closure.
Quality & processes ISO 22000 Software tool for food safety management systems under ISO 22000. Hazard analysis, prerequisite programmes and HACCP plans are assigned to the production processes. Deviations, recalls and corrective actions are recorded, and verification and internal audits run in the PDCA cycle.
Quality & processes ISO 31000 Software tool for risk management under ISO 31000. Risk criteria, assessment and treatment apply across the organisation, not only to information security. Risk reports for management come straight from the dashboard.
Quality & processes ISO 37000 Software tool for the governance of organizations under ISO 37000. Governance principles are linked to the responsibilities of the governing bodies, policies and oversight tasks. Evidence of how oversight is exercised sits in one place.
Quality & processes ISO 13485 Software tool for quality management of medical devices under ISO 13485. Design controls and risk management are assigned to the products. Complaints, incidents and corrective and preventive actions are kept as records, and documented procedures are always at hand for audits.
Quality & processes ISO 19011 Software tool for audits under ISO 19011. The audit programme, audit plans and auditor competence are managed centrally. Findings are recorded directly against the requirements concerned and followed as corrective actions to closure.
Quality & processes ISO 50001 Software tool for energy management under ISO 50001. Complaica will keep the energy review, energy baseline and energy performance indicators per site. Significant energy uses, actions and corrective actions will be visible on the dashboard. Coming soon
Quality & processes IFS Food Software tool for preparing IFS Food audits. Complaica will rate the requirements of the standard, including the KO criteria, per site. Deviations from the audit become corrective actions with deadlines. Coming soon
Quality & processes BRCGS Food Safety Software tool for the BRCGS Global Standard Food Safety. Complaica will keep senior management commitment, the HACCP plan and site standards as requirements. Complaints and corrective actions are recorded, and evidence is kept ready for unannounced audits too. Coming soon
Quality & processes FSSC 22000 Software tool for FSSC 22000 certification. Complaica will bring ISO 22000, the prerequisite programmes under ISO/TS 22002 and the additional FSSC requirements together in one catalogue. Internal audits and management review will cover all three parts. Coming soon
Quality & processes HACCP Software tool for HACCP. Complaica will map the seven principles per process, from hazard analysis through the critical control points to verification. Monitoring results and corrective actions are documented without gaps. Coming soon

Business continuity 2

Business continuity BSI-Standard 200-4 Software tool for business continuity management under BSI standard 200-4. The system grows with you from the reactive through the build-up to the standard BCMS. Business impact analysis and business continuity plans use the information domain from IT-Grundschutz.
Business continuity ISO 22301 Software tool for business continuity management under ISO 22301. The business impact analysis works with the processes in scope and their dependencies. Incidents, exercises and their evaluations are recorded, and internal audits keep the BCMS in the PDCA cycle.

ESG & supply chain 2

ESG & supply chain LkSG Software tool for the German Supply Chain Due Diligence Act. Suppliers are kept as assets with a risk analysis of human rights and environmental risks. Preventive and remedial measures are documented, and reports from the complaints procedure are kept as records with their handling status.
ESG & supply chain CSRD Software tool for sustainability reporting under the CSRD. The materiality assessment determines which ESRS disclosures are reported, and owners and data sources are set per disclosure. Evidence for the assurance of the report sits in one place.

AI & data 2

AI & data EU AI Act Software tool for the EU Artificial Intelligence Act. AI systems are inventoried, classified by risk category and linked to the obligations of providers and deployers. Risk management, technical documentation and human oversight for high-risk systems are tracked as requirements.
AI & data EU Data Act Software tool for the EU Data Act. Connected products and related services are captured with the data they generate. Obligations on data access, contract terms and switching between cloud services are tracked as requirements.

Bundles / kits 8

Finance Kit DORAGDPRBDSG Bank & Finance Kit (DE)
Finance Kit DORADSG Bank & Finance Kit (AT)
Finance Kit DORADSG/DSV Bank & Finance Kit (CH)
Data protection Kit SFB 2.0Data Protection Act (AT) SFB 2.0 + DSG Kit
Data protection Kit RGPDLOPDGDD (LO 3/2018)LSSI-CE (Ley 34/2002) RGPD + LOPDGDD + LSSI-CE
Information security Kit IT-GrundschutzIT-Grundschutz profile for universities IT-Grundschutz + University Profile
Information security Kit IT-Grundschutzmunicipal administration profile IT-Grundschutz + Municipal Profile
Information security Kit ISO/IEC 270012700227005 ISO/IEC 27001 Kit

Coming soon 28

Information security ENS Software tool for the Esquema Nacional de Seguridad in Spain. Complaica will classify systems into the BÁSICA, MEDIA and ALTA categories and derive the measures of Annex II from them. Statement of applicability, security incidents and evidence will prepare the certification of conformity. Coming soon
Finance MaRisk Software tool for BaFin's Minimum Requirements for Risk Management. Complaica will link the risk inventory, risk-bearing capacity and outsourcing to the modules of MaRisk. Internal audit will be able to use the same data for its reviews. Coming soon
Information security SecNumCloud Software tool for ANSSI's SecNumCloud qualification. Complaica will track the requirements of the framework, including protection against non-European law, per cloud service. Evidence for the qualification is prepared in one place. Coming soon
Data protection HDS Software tool for the HDS certification of health data hosts in France. Complaica will build the requirements on an ISO 27001 ISMS and assign them per hosting activity. Contracts, incidents and evidence will sit in one place. Coming soon
Information security LPM / OIV Software tool for the obligations of operators of vital importance under the Loi de programmation militaire. Complaica will capture the information systems of vital importance and link them to ANSSI's security rules. Incidents and their notifications are documented traceably. Coming soon
Data protection PIPEDA Software tool for PIPEDA, the Canadian privacy law for the private sector. Complaica will keep the ten fair information principles as requirements. Access requests, complaints and breaches of security safeguards are documented in the required record. Coming soon
Data protection Loi 25 (Québec) Software tool for Law 25, the modernisation of privacy protection in Québec. Complaica will keep the person in charge, privacy impact assessments and the register of incidents. Consent, requests and transparency obligations will be stored as requirements. Coming soon
Finance OSFI B-13 Software tool for OSFI Guideline B-13 on technology and cyber risk management. Complaica will link governance, technology operations and cyber resilience to the financial institution's systems. Incidents and a dashboard per area will show management the status. Coming soon
Data protection LFPDPPP Software tool for the Mexican Federal Law on the Protection of Personal Data Held by Private Parties. Complaica will keep privacy notices and processing activities together. Requests for access, rectification, cancellation and opposition are handled against their deadlines. Coming soon
Data protection NOM-151-SCFI-2016 Software tool for NOM-151-SCFI-2016 on the retention of electronic data messages in Mexico. Complaica will capture the documents subject to retention and their systems. The requirements on integrity and time stamps are linked to measures and evidence. Coming soon
Data protection Ley 25.326 Software tool for Argentina's data protection law, Ley 25.326. Complaica will capture databases holding personal data and prepare them for registration with the supervisory authority. Security measures and data subject requests are tracked as requirements and records. Coming soon
Finance BCRA Com. „A“ 7724 Software tool for Communication A 7724 of the Central Bank of Argentina. Complaica will link the requirements for managing technology and information security risks to the institution's systems and providers. Incidents and a dashboard will show the status towards the supervisor. Coming soon
Information security QNRCS Software tool for the National Cybersecurity Reference Framework of the CNCS in Portugal. Complaica will link the framework's objectives to scope, measures and evidence. Maturity will be assessed per area and tracked over time. Coming soon
Data protection Lei 58/2019 Software tool for Lei 58/2019, the Portuguese act implementing the GDPR. Complaica will keep the national particulars as requirements of their own beside the obligations of the GDPR. Records of processing, data subject requests and personal data breaches will serve both. Coming soon
Information security ZoKB (CZ) Software tool for the Czech Cybersecurity Act transposing NIS2. Depending on the regime of higher or lower obligations, Complaica will map the security measures of the implementing decrees. Incidents and their notifications to NÚKIB are documented. Coming soon
Data protection Zákon 110/2019 Sb. Software tool for the Czech Act on the Processing of Personal Data. Complaica will keep the national rules in the same record of processing alongside the GDPR obligations. Data subject requests, personal data breaches and evidence are gathered for inspections by the supervisory authority. Coming soon
Information security KSC (PL) Software tool for the Polish Act on the National Cybersecurity System. Complaica will keep the obligations of essential and important entities as requirements. Incidents and notifications to the competent CSIRT are documented traceably. Coming soon
Data protection UODO Act (PL) Software tool for the Polish Data Protection Act of 2018. Complaica will keep the national rules alongside the GDPR, including the notification of the data protection officer to UODO. Records of processing, data subject requests and personal data breaches are kept together. Coming soon
Finance KNF Rekomendacja D Software tool for Recommendation D of the Polish Financial Supervision Authority (KNF). Complaica will link the recommendations on IT management and IT security in banks to systems and providers. A dashboard will show the implementation status per recommendation. Coming soon
Automotive UNECE R155 / R156 Software tool for UN Regulations R155 and R156. Complaica will link the cyber security management system and the software update management system to the vehicle types. Security incidents and evidence for type approval will be kept per vehicle type. Coming soon
Information security IEC 62443 Software tool for IEC 62443 in operational technology. Complaica will divide plants into zones and conduits and give them target security levels. Requirements for asset owners, integrators and component manufacturers will be tracked separately. Coming soon
Quality & processes ISO 50001 Software tool for energy management under ISO 50001. Complaica will keep the energy review, energy baseline and energy performance indicators per site. Significant energy uses, actions and corrective actions will be visible on the dashboard. Coming soon
Quality & processes IFS Food Software tool for preparing IFS Food audits. Complaica will rate the requirements of the standard, including the KO criteria, per site. Deviations from the audit become corrective actions with deadlines. Coming soon
Quality & processes BRCGS Food Safety Software tool for the BRCGS Global Standard Food Safety. Complaica will keep senior management commitment, the HACCP plan and site standards as requirements. Complaints and corrective actions are recorded, and evidence is kept ready for unannounced audits too. Coming soon
Quality & processes FSSC 22000 Software tool for FSSC 22000 certification. Complaica will bring ISO 22000, the prerequisite programmes under ISO/TS 22002 and the additional FSSC requirements together in one catalogue. Internal audits and management review will cover all three parts. Coming soon
Quality & processes HACCP Software tool for HACCP. Complaica will map the seven principles per process, from hazard analysis through the critical control points to verification. Monitoring results and corrective actions are documented without gaps. Coming soon
Information security ISO 27799 Software tool for ISO 27799, information security in health. Complaica will extend the controls of ISO/IEC 27002 with the requirements for health data. Systems that process patient data will be marked separately in scope, with security incidents linked to them. Coming soon
Information security SOC 2 Software tool for SOC 2 under the AICPA Trust Services Criteria. Complaica will map controls to the criteria and collect evidence across the whole audit period. Evidence from operating systems and tools will be able to come in automatically through the REST API. Coming soon

ALL 02

Working with us is easy and pleasant!

Ask us – we answer quickly.

✓Price list on request — we send it over

✓An offer within 24 hours

✓Migration of your data free of charge

✓Integration of your applications free of charge — tell us which ones