Stop drowning in compliance complexity
Your auditor just asked how SOC 2 maps to ISO 27001. Your board wants a gap analysis by Friday. You're juggling six frameworks across three jurisdictions.
We've already mapped it. All 1,073 frameworks. 315K+ verified control connections. Instantly.
Get clarity where you're accountable. Try our Course Advisor →
Used by compliance teams at enterprises across healthcare, finance, government, and tech
One knowledge base, read from the standards themselves
1,073 frameworks, every requirement cited to its source
Not summaries scraped from the web. Each standard, regulation and code is read from the published text, split into its requirements, and every requirement carries the citation, the evidence an auditor asks for, and its judged links to the other frameworks. It grows every day as new editions are published and new frameworks are read. How this is built
Read from the text, not about it
Every requirement is our own statement of a clause of the published standard, cited so you can check it against the official text. When a framework is rebuilt it is read clause by clause, and a placeholder is never allowed to stand in for a requirement.
Browse the frameworks →Judged, with the refusals kept
A link between two frameworks is a judgement about evidence transfer, not a similarity score. Where a pair does not transfer, that refusal is recorded too, so a crosswalk you buy says what does not carry as clearly as what does.
See the crosswalks →Current editions, edition to edition
When a standard is revised the new edition is built beside the old one with the clause-by-clause lineage between them, so a team mid-transition can see exactly what moved.
What changed recently →Built on that knowledge base, a new tool every day
79 working tools, each free to run without an account
Paste the spreadsheet you already keep and get back the register, sheet or map a regulator or auditor asks for by name, with the exact clauses quoted. The newest is at the top.
ISO 25568 Revision Checker
the official ISO/IEC DTS 25568 record, 92 cited records from ISO/IEC 42001 and 23894, a free check, the USD 799 kit and the USD 49 watch.
NDIS Checker
Which NDIS amendment duties reach an insurer or a provider, from what date, and the evidence to keep..
ISO 18033-7 Revision Checker
Know whether the ISO 18033-7 amendment applies, what evidence to keep and by when..
ISO 37014 Revision Checker
Whether the draft reaches your group, the group maturity model in 35 requirements, a free scope check and a dated plan..
ISO 42024 Revision Checker, the draft read in full
the free reference and checker for ISO/IEC/IEEE DIS 42024: 35 terms, 20 clause areas, 9 annex sections, a practice check, the USD 799 kit and the USD 49 watch.
ISO 27045 Revision Checker
ISO/IEC DIS 27045.2 at stage 40.60: the 26-unit record, the 14 changes since the first draft, the eight characteristics, a free scope check and a USD 799 kit.
Accessibility Products & Services Checker
Scope check and dated obligation register for the European accessibility rules for products and services..
Health Insurance Accredited Checker
The free register and date check for the pathology accreditation amendment: ten changes already in force and the in-house IVD standard from 1 July 2027..
EU Corporate Sustainability Reporting Checker
Read Directive (EU) 2026/470 article by article, check whether the amended thresholds catch your company and from which year, and take the 27-duty register and dated plan to 19 March 2027..
ISO 22343-1 Revision Checker
ISO 22343-1:2023 clause by clause, the Amendment 1 stage record and a rating decoder. Free register and scope check; kit USD 799, watch USD 49 a month..
ISO 25059 Revision Checker
The ISO/IEC 25059 quality model in plain words, the public revision record, a free check, a USD 299 kit and a USD 29 a month watch..
ISO 42703 Revision Checker
The algorithmic bias standard clause by clause, with the published IEEE edition, a free scope check, a USD 799 kit and a USD 49 watch..
ISO 27003 Revision Checker
The DIS 27003 guidance register, 30 clauses and 93 controls with evidence, dates and a free scope check..
ISO 45008 remote working guidance
ISO/DIS 45008 at stage 40.60: the 40 ISO 45001 clauses it touches, the public record, a free scope check, a USD 299 kit and a USD 29 watch.
ISO 27028 Revision Checker
ISO/IEC 27028 recorded: all five control attributes for 93 controls, the publication record, a free attribute check and a USD 799 kit.
ISO 17065 Revision Checker
the clause record for ISO/IEC FDIS 17065 and the edition in force. Free check, 44 pages, USD 149 kit, USD 19 watch.
ISO 20996 Revision Checker
The cloud customer continuity draft: stage record, free readiness check, 57 cited clauses, kit and change watch..
ISO 27014 Revision Checker
ISO/IEC 27014 information security governance: the clause record, the FDIS stage and dates, and the evidence a board asks for. Free register and check, kit USD 799, watch USD 49 a month..
ISO 22316 Revision Checker
The resilience guidance clause by clause, with the second edition dates and a free transition check..
PGPA Defence Delivery Agency Checker
the DDA rules clause by clause: the 1 July 2027 start, 5 duties, the evidence and a free scope check. Kit USD 299; watch USD 29/mo.
RWE Readiness Checker
Read a real-world evidence protocol outline against 29 checks, with the rule behind every finding.
Therapeutic Goods Legislation Checker
Free scope and date check for the Australian UDI Database and the adverse event reporting rules in F2025L00414..
Unfair trading practices checker
A free section-by-section reference to the unfair trading practices Act, a scope check, and a paid kit with the register, evidence and dated plan.
ASIC Market Integrity Rules Checker
the amended ASIC market integrity rules, rule by rule: 19 duties, the evidence to keep and the 17 March 2028 start date. Free scope check; kit USD 799.
ISO 29148 revision
the ISO/IEC/IEEE 29148 requirements record in plain words, the public revision record, a free readiness check, a USD 149 kit and a USD 19 watch.
ISO 27007 Revision Checker
what changed in ISO/IEC DIS 27007, clause by clause, with the evidence an auditor asks for, a free edition check and a paid revision kit.
ISO 22000 Revision Checker
The public draft contents clause by clause, the requirement that applies today, the evidence an auditor asks for and a dated plan..
ISO 45001 Revision Checker
the 40 ISO 45001 requirements that apply today, the public draft that replaces them, a free scope and date check, a USD 299 kit and a USD 29 a month watch.
CSRD Disclosure Checker
paste a draft sustainability statement and get, article by article, whether your own words reach the amended EU reporting rules, each line cited. Free.
Evidence Binder
A free, searchable library of 154 audit evidence requirements across ISO 27001:2022 and SOC 2, cited to their clauses, with reviewed cross-framework.
AI Act Obligation Mapper
all 43 EU AI Act obligations, one page each: who each binds, the evidence it calls for, and the NIST AI RMF and ISO/IEC 42001 controls behind it. Free.
AI Visibility Audit
paste your firm's web address and see whether ChatGPT, Perplexity, Gemini and Claude can read and cite your site, with the fix for every finding.
Care Standards Checker
paste your policy or evidence pack and read it against the Australian NDIS and aged care care-quality requirements, one clause at a time, in your browser.
Lapsed Member Mapper
paste a studio lapsed and cancelled member list: every non-customer sorted into three tiers, the still-paying lapse first, with a dated win-back sequence.
Equal Pay Auditor
paste the job titles and pay figures; the browser screens same-work categories, quantifies the exposure per the directive articles, and flags potential.
Lease Buy Comparator
paste a machinery quote, the bank rate and the dealer lease terms: a present-value comparison of lease, buy and used-buy, with the tax timing.
Cutoff Promise Checker
paste your dispatch cutoff, the courier transit times and your target postcodes to get a suburb by suburb promise map, a corrected cutoff clock per zone,.
Word Drill Generator
pick a target sound, a word length and a tier; get a printable practice round with a word list, IPA, a scoring sheet, cut-out cards and a one-page home pack.
Mock HIPAA Audit
Practise the HIPAA audit before it happens: paste a policy and an OCR examiner persona interrogates it against the Security Rule's 67 requirements, with the question behind each gap..
Cyber Insurance Application Scanner
maps each question in a carrier cyber insurance application to the ISO 27001, SOC 2 and NIST CSF controls it tests.
Control Mapping Reader
Place a control statement, a clause or an audit finding: it names the regime and the control and shows the nearest held controls in the other regimes..
AI Agent Compliance Workflow Tester
score an AI agent's run through end-to-end compliance workflows, step by step.
Allied Health NDIS Audit Checklist
the NDIS, privacy and Ahpra requirements your practice evidences, with a worksheet for each.
Cyber Insurance Subjectivity Tracker
an applicant's security controls turned into the gaps behind a cyber quote, each with its rule, on a 30, 60 and 90 day schedule.
NDIS Aged Care Notifiable Change Checker
one change at an NDIS or aged care provider, mapped to who to notify and by when, the requirements it touches and the evidence to keep.
Requirements Traceability Gap Finder
a requirements export and test results read for broken trace chains, each break cited to the clause that asks for it.
Tradie Run Sheet Builder
tomorrow's jobs and crew as a printed run sheet in travel order, with each job's before-you-start lines.
Employee Monitoring Law Planner
paste the monitoring you run, see what each location requires before it starts.
Unsupported Software Finder
paste your software inventory, see what the vendor no longer supports and the clause each one fails.
CCTV Privacy Law Mapper
The privacy laws at every camera, from your camera list.
Age Pension 14-Day Share Checker
Paste a broker transaction history; see every share change an Age Pension client must report, and the day each is due.
Overdue Calibration Finder
Paste a calibration register; see every instrument overdue or due before the audit, and what the out-of-tolerance ones measured.
Orphaned Account Checker
Paste an account export; see every account nobody owns, the dormant and unrotated ones, with the clause behind each.
FAR Overhaul Clause Crosswalk
Paste your clause numbers, see where each moved in the FAR overhaul, with the official source.
Subcontractor CMMC Tracker
Send one link to every subcontractor, see each SPRS score, CMMC level and expiry on one list.
Cyber Resilience Act Gap Finder
the CRA class, duties and gaps for every connected product you sell.
AI Training Data Provenance Checker
which AI training datasets you cannot account for, origin, terms, labelling and version, with the clause behind each.
Cloud Shared Responsibility Mapper
which cloud controls are yours, the provider's or shared, and the ones nobody owns, with the clause behind each.
Delegation of Authority Matrix Validator
who can approve their own request, the missing second approvers and the automation lines with no human sign-off, with the clause behind each.
AML Scenario Gap Finder
The money-laundering risks no monitoring scenario covers, with the obligation behind each.
SOX Change Log Checker
Every production change without an independent approval, with the clause behind it.
Regulated Customer Contract Checker
the regimes each regulated customer pulls onto your agreements, and the breach-notice clocks you promised.
Security Questionnaire Mapper
maps each question on a customer security questionnaire to the clause it tests, and groups the repeats.
Energy Register
paste your sites and their energy supplies, get every supply point classified by meter, tariff and reporting rule with the clause behind it, which sites can take part in demand response, and the contracts ending inside a year.
Batch Register
paste your scheduler export, get every job against the clock a rule sets with the clause, the gap in hours, the jobs with no owner or fallback and the duplicates.
Edge Register
paste the sites your systems run outside the data centre, get the off-premises, continuity and transfer duties per site with the clause behind each.
Policy Register
paste your policy list, get the clauses that require each document, what it must contain, who owns it, and the policies the standards expect that you do not have.
Decision Register
paste the tasks your function has handed to AI, get the stakes, the regime that attaches, the review it needs and the benchmark to demand from the vendor.
Cell Register
paste your automated equipment list, get every machine placed in its zone with the owner's duties under IEC 62443 and the questions for the integrator.
Vendor Register
Paste your vendor list, get what you depend on each vendor for, where the dependency lands, and the register DORA and NIS2 ask for.
Coverage Register
Paste your insurance schedule and see what you retain, what you transfer, and what you pay for and never use.
Handoff Register
Paste a process, see which steps a person still re-keys and which could be handed over.
Conformity Sheet
Paste your product list, get the regulations, documents and after-sale duties per product and market.
Maintenance Log Converter
Paste your maintenance schedule or log, get every item as a condition-based check with the evidence it produces.
Agent Register
Paste the AI agents and copilots your teams use, get each one classified for what it can act on and reach.
Adoption Evidence
Baseline, pulse and report whether an implementation actually got adopted, with provenance on every number.
Field Register
Paste your CRM field list, get each field classified for personal data, lawful basis and AI use.
Evidence Sheet
Paste your control spreadsheet, get the evidence auditors ask for per control.
Accounting Standard AASB Checker
Scope AASB 2026-4 to your entity and first period, with the evidence per paragraph.
New today · Data licensing
Content Feed self-serve checkout is live
1,073 frameworks, 49,249 controls, 315K+ cross-mappings, source-grounded. White-label rights. Click, pay, API key in seconds.
Sound familiar?
Compliance shouldn't feel like this
Weeks spent on manual control mapping
Get instant cross-framework mappings
Our AI maps controls between any two of 1,073 frameworks in seconds. What used to take your team weeks now takes one click.
$300/hr consultants for framework advice
AI-powered compliance intelligence for $149/mo
Ask questions, get gap analyses, build remediation plans. The expertise that used to require expensive consultants, now on-demand.
Siloed knowledge across your team
One source of truth for compliance
Framework guides, control libraries, comparison tools, and training courses. Everything your team needs in one connected platform.
How it works
From confused to compliant in three steps
Whether you're starting from scratch or managing multi-framework compliance, here's how we get you there.
See the full picture
Search 1,073 frameworks. Compare any two side-by-side. Instantly see which controls overlap and where the gaps are.
Browse FrameworksLet AI do the heavy lifting
Our platform maps controls automatically, generates gap analyses, and builds prioritised remediation plans, work that used to take weeks.
Try the PlatformBuild your team's expertise
Close knowledge gaps with executive education courses. Earn professional certifications recognised across 160+ countries.
View CoursesFree Assessment
How ready is your organization for compliance?
Answer 7 questions and get your personalized Compliance Readiness Score, complete with a radar chart, key insights, and an action plan across 5 dimensions.
Get Your ScoreStart exploring
The frameworks your auditor is asking about
Deep guides with controls, domains, and instant cross-framework mapping.
ISO 27001:2013
Information technology, security techniques, information security management systems, requirements: the second edition (2013-10-01), superseded by ISO/IEC 27001:2022. The transition period for certificates to this edition ended on 31 October 2025; it is kept for lineage and for the 2013 to 2022 edition crosswalks.
SOC 2
Trust Service Criteria for service organizations covering security, availability, processing integrity, confidentiality, and privacy.
NIST Cybersecurity Framework 1.0
NIST's Framework for Improving Critical Infrastructure Cybersecurity, Version 1.0 (February 2014): the five Functions, 22 Categories and 98 Subcategories in the Version 1.0 wording, each marked as kept or reworded in Version 1.1. Superseded in April 2018; kept for historic assessments and contracts that cite it.
GDPR
General Data Protection Regulation - EU regulation on data protection and privacy for all individuals within the European Union and European Economic Area.
HIPAA Breach Notification Rule
HIPAA Breach Notification Rule standards for breach risk assessment and notification to individuals, the media, HHS and covered entities by business associates.
PCI DSS v4.0
PCI DSS v4.0 is the global security standard for organisations that store, process, or transmit cardholder data, published by the PCI Security Standards Council. Version 4.0, released in March 2022 with full enforcement from 31 March 2025, introduced a customised approach to validation, expanded multi-factor authentication requirements, and added 64 new requirements. It contains 249 controls across 12 requirement areas.
Built for you
Whether you're a team of one or one hundred
Compliance Officers
Map controls across frameworks instantly. Stop building spreadsheets, start building strategy.
CISOs & Risk Leaders
Board-ready gap analyses in minutes. See your multi-framework landscape at a glance.
Consultants & Advisors
Serve more clients with less effort. Instant framework intelligence at your fingertips.
Teams & Enterprises
Upskill your entire team with professional certification courses trusted in 160+ countries.
Implementation Guides
Step-by-step compliance guidance
From the Blog
Latest compliance insights
Benefits of Automated Invoice Processing Software: Beyond Speed
Automated invoice processing software reduces errors, improves cash flow visibility, and strengthens compliance—but the real benefit is in process standardisation across departments.
Leadership & StrategyChief Commercial Officer Taxonomy Category Guide
The chief commercial officer taxonomy categorises responsibilities into revenue strategy, customer experience, go-to-market execution, and data-driven decision making, aligned with enterprise growth frameworks.
productMDSAP Gap Analysis Checklist: What It Is and How to Use It
A complete MDSAP gap analysis checklist is available for download, covering all eight modules of the Medical Device Single Audit Program and enabling compliance leads to identify deficiencies and prepare for audits.
Questions people ask
What is The Art of Service?
The Art of Service is a compliance education and framework intelligence company based in Brisbane, Australia, founded by Ivanka Menken and Gerard Blokdyk. It publishes professional courses, implementation playbooks and toolkits, and runs a compliance platform that maps controls across regulatory frameworks so an organisation can reuse evidence it already holds.
What is a compliance framework?
A compliance framework is a structured set of guidelines, controls, and best practices that organisations follow to meet regulatory requirements, manage risk, and demonstrate due diligence. Examples include ISO 27001 for information security, SOC 2 for service organisations, and NIST CSF for cybersecurity.
How many compliance frameworks does The Art of Service cover?
The Art of Service covers 1,073 compliance frameworks across information security, privacy, governance, risk management, cloud security, financial services, healthcare, and more. Each framework page includes an overview, key controls, related frameworks, and links to cross-framework control mappings.
What is the difference between ISO 27001 and SOC 2?
ISO 27001 is an international standard for Information Security Management Systems (ISMS) that results in a certificate valid for three years. SOC 2 is a North American auditing standard for service organisations that produces an attestation report, typically renewed annually. Many organisations pursue both to satisfy global and US-specific customer requirements.
How much does compliance training cost?
The Art of Service offers a free tier for its compliance intelligence platform. Professional plans start at $149/month, providing access to 1,073 frameworks, 315K+ verified control mappings, and AI-powered advisory. Individual courses and self-assessment toolkits are available separately through the Academy and Store.
Can AI help with compliance?
Yes. AI-powered compliance tools can automate control mapping across frameworks, identify gaps in your compliance posture, generate audit-ready documentation, and keep you updated on regulatory changes. The Art of Service platform uses AI trained on 25 years of compliance expertise to provide framework-specific guidance.
Your next audit doesn't have to be painful
Join 100,000+ professionals who replaced compliance chaos with clarity.
Free tier available. No credit card required. Set up in 2 minutes.