Frameworks
Compliance frameworks we map
This page covers frameworks VendorBreach helps you assess vendors against. For VendorBreach's own compliance status, see the Trust Center.
Every control mapped, every gap surfaced.
SOC 2
Map vendor findings and evidence to the Trust Service Criteria.
ISO 27001
Annex A control coverage for your vendors, with evidence you collect from them.
NIST AI RMF
Govern, map, measure, manage — assess AI vendors against the risk management lifecycle.
EU AI Act
Record the risk tier of AI vendors and the obligations that apply to them.
GDPR
Data Processing Agreements, sub-processor registry and data-residency tracking.
HIPAA
Track which vendors handle health data and whether a Business Associate Agreement is on file.
PCI DSS v4
Track which vendors touch cardholder data and the evidence they provide.
DORA
Operational resilience for EU financial services. Critical ICT third-party register.