The platform

A handful of areas that build on each other.

From your first policy to a public trust center, everything your ISO 27001 and GDPR program needs, in one tenant you control.

app.certixa.ai/compliance
Compliance · ISO 27001 program
ISO 27001 + GDPR
93
Controls mapped
ANNEX A
76%
Implemented
AUTO-TRACKED
12
Awaiting approval
REVIEW QUEUE
A.5.1 Information security policy v3 · approved Complete
A.8.2 Privileged access rights evidence: 14 items Complete
A.6.3 Security awareness training 2 comments In review
GDPR Records of processing (Art. 30) shared control Complete
A.5.9 Inventory of assets assigned to Maya To do
AI reviewing 3 policy drafts…
Registry · 148 objects
ISO 27001 + GDPR
52
Personnel
ENTRA ID
31
Vendors
CRM SYNC
65
Assets & platforms
CMDB + SHEETS
PPL Maya Lindqvist, Engineering onboarded · trained Compliant
VND CloudRelay Ltd DPA expiring in 14 days Action
AST prod-api-cluster AWS eu-west-2 Tracked
VND Postmark subprocessor · listed Tracked
PPL New contractor (3) import pending Queued
Syncing personnel from Entra ID…
Exposure · scan in progress
ISO 27001 + GDPR
12
Domains scanned
NIGHTLY
4
Open findings
GH + AWS + GCP
38
Fixed this quarter
REMEDIATION LOG
HIGH TLS cert expires in 9 days, api.zooblin.com domain scan Assigned
MED Dependabot: lodash CVE-2026-1183 GitHub In progress
MED S3 bucket missing access logging AWS Security Hub In progress
LOW Verbose server header on marketing site domain scan Accepted
FIXED GCP: over-privileged service account risk updated Documented
Scanning 12 domains · GitHub + AWS Security Hub connected
Automation · 6 active workflows
ISO 27001 + GDPR
6
Active workflows
APPROVALS ON
41/52
Campaign responses
EMAIL OUTREACH
9
Tasks escalated
REMINDERS SENT
WF Quarterly access review Entra ID + Google Drive Running
CAMP Security training, all staff 41 of 52 complete Running
Q Vendor questionnaire: CloudRelay due in 5 days Waiting
TASK Approve incident response policy v2 escalated to CTO Overdue
WF Evidence refresh, AWS configs runs Sunday 02:00 Scheduled
Access review campaign: 41 of 52 responses in
Trust Center · public
ISO 27001 + GDPR
214
Visits this month
TRUST.ZOOBLIN.COM
8
Documents published
AUTO-UPDATED
11
Subprocessors listed
FROM REGISTRY
DOC ISO 27001 certificate public Live
DOC GDPR & data-processing overview public Live
DOC Penetration test summary 2026 gated · NDA required Gated
REQ Access request, procurement@frs.co.uk auto-approved Granted
SUB Subprocessor list synced from Registry Live
3 prospects viewing your security docs right now

Every area, one tenant.

Modules that share the same objects, a control satisfies requirements across frameworks, evidence feeds your trust center, risks link to real vulnerabilities.

Compliance management

Policies, controls, evidence, and programs, with editors, approvals, comments, and full history on every object.

Frameworks & standards

Importable control sets for ISO 27001, GDPR and more. One control can satisfy requirements across multiple frameworks.

Registry

Import personnel and contractors from your directory, vendors from your CRM, assets from your CMDB or spreadsheets. Define platforms and third-party contacts.

Exposure

Automated domain scanning and vulnerability integrations with GitHub, AWS Security Hub, and GCP Security Command Center, with remediation tracking that documents fixes and updates your risks.

Automation

Integrate Google Drive, GitHub, Entra ID, AWS, GCP and more. Configurable workflows and approvals, email campaigns, questionnaires for vendors or employees, and task assignment with reminders and escalation.

Trust Center

A customizable, branded portal on your own domain publishing certifications, security documents, and subprocessors, one-stop shopping for your prospects and vendors.

Organization settings

Your tenant, your team, your data, granular RBAC, billing, and the custom data that shapes how objects are classified.

Integrations & security

Multiple authentication methods, organization-wide SSO, 2FA enforcement, auditor roles and views, included with every module, never paywalled.

And we're just getting started.

ON THE ROADMAP

Evidence collection + test libraries

Automated evidence collection with reusable checks and tests you can run on a schedule.

Internal training programs

Build and run security training campaigns for your own staff, tracked to completion.

More integrations

Ticketing systems, documentation repositories, directories, and security scanners.

Vendor Risk Scoring + TPRM

Score your vendors and run full third-party risk management on top of the registry.

OSCAL support

Deeper OSCAL import and export for machine-readable control catalogs and SSPs.

See it with your own data.

Connect your stack, answer a few questions, and see your gap assessment today.

Start today