Home / Frameworks
Frameworks
One set of controls. Every framework you need.
Most frameworks ask for the same core practices in different words. Doniastack maps your controls once and reuses the evidence across each framework you take on.
AICPA
SOC 2
The report most US enterprise customers ask for. An independent auditor examines your controls against the Trust Services Criteria: security, and optionally availability, confidentiality, processing integrity and privacy.
US HHS
HIPAA
The US law protecting health information. Covered entities and their business associates must meet the Security Rule’s administrative, physical and technical safeguards, and document that they do.
ISO/IEC
ISO 27001
The international standard for an information security management system. Certification shows you run security as a managed, continually improving process, recognised worldwide.
NIST
NIST CSF
The NIST Cybersecurity Framework organises security into Govern, Identify, Protect, Detect, Respond and Recover. Widely used as a baseline and to explain posture to leadership.
PCI SSC
PCI DSS
The Payment Card Industry Data Security Standard applies to anyone who stores, processes or transmits cardholder data. Requirements scale with your transaction volume and how you handle cards.
Questionnaires
SIG, CAIQ and custom reviews
Beyond formal frameworks, we help you answer the security questionnaires your customers send, from standard formats to their own spreadsheets.
Get started
See where you stand in 30 minutes
Tell us which review or audit is in front of you. We'll walk you through the platform and map what readiness takes, with no obligation.