Stop drowning in compliance complexity
Your auditor just asked how SOC 2 maps to ISO 27001. Your board wants a gap analysis by Friday. You're juggling six frameworks across three jurisdictions.
We've already mapped it. All 1,120 frameworks. 315K+ verified control connections. Instantly.
Get clarity where you're accountable. Try our Course Advisor →
Used by compliance teams at enterprises across healthcare, finance, government, and tech
One knowledge base, read from the standards themselves
1,120 frameworks, every requirement cited to its source
Not summaries scraped from the web. Each standard, regulation and code is read from the published text, split into its requirements, and every requirement carries the citation, the evidence an auditor asks for, and its judged links to the other frameworks. It grows every day as new editions are published and new frameworks are read. How this is built
Read from the text, not about it
Every requirement is our own statement of a clause of the published standard, cited so you can check it against the official text. When a framework is rebuilt it is read clause by clause, and a placeholder is never allowed to stand in for a requirement.
Browse the frameworks →Judged, with the refusals kept
A link between two frameworks is a judgement about evidence transfer, not a similarity score. Where a pair does not transfer, that refusal is recorded too, so a crosswalk you buy says what does not carry as clearly as what does.
See the crosswalks →Current editions, edition to edition
When a standard is revised the new edition is built beside the old one with the clause-by-clause lineage between them, so a team mid-transition can see exactly what moved.
What changed recently →Built on that knowledge base, a new tool every day
115 working tools, each free to run without an account
Paste the spreadsheet you already keep and get back the register, sheet or map a regulator or auditor asks for by name, with the exact clauses quoted. The newest are at the top; the full index is one page.
Golden Answer Library Builder
Paste signed-off answers and a questionnaire, get a deterministic approved match or a gap with an owner, a due date and the rule..
AI Agent Outbound Email Compliance Gate
Paste the email templates an AI agent plans to send; classify each send against CAN-SPAM, PECR, UK GDPR, GDPR and ePrivacy, flag financial promotion, and get a dated fix list with the rule cited..
AI Subscription Swap Auditor
Paste a software subscription list and get a swap-or-keep verdict per tool, the annual saving arithmetic and a dated plan, each line citing the task rule behind it..
Term Sheet Rights Pricer
Prices the board, pro-rata, information rights and liquidation preference in a term sheet, with a counter-sheet..
Leader-Led AI Adoption Scorecard
Paste team AI usage and leader learning hours, get the adoption gap on the reported 2x and 3.5x multipliers, and a dated 12-week leader plan with every calculation shown..
Spend-Tail Playbook
A per-supplier negotiation playbook for the spend tail: leverage, positions and dated asks, each lever cited to a sourcing rule.
Redline Position Tracker
Paste a contract redline and get a clause-by-clause position sheet: agreed, conceded, open or escalated, with the rule, the fallback ladder and a dated reply calendar..
EV Truck Charging Planner
Paste a depot and route list, get each depot's charger power class, dwell verdict, grid flag and dated readiness calendar..
Regulatory Change Watch
Same-day alerts when a regulator page changes, with the controls to review and the clauses behind them..
Looking for an older tool?
The front page shows the newest nine. The index lists all 115 with search and an A–Z sort.
New today · Data licensing
Content Feed self-serve checkout is live
1,120 frameworks, 51,079 controls, 315K+ cross-mappings, source-grounded. White-label rights. Click, pay, API key in seconds.
Sound familiar?
Compliance shouldn't feel like this
Weeks spent on manual control mapping
Get instant cross-framework mappings
Our AI maps controls between any two of 1,120 frameworks in seconds. What used to take your team weeks now takes one click.
$300/hr consultants for framework advice
AI-powered compliance intelligence for $149/mo
Ask questions, get gap analyses, build remediation plans. The expertise that used to require expensive consultants, now on-demand.
Siloed knowledge across your team
One source of truth for compliance
Framework guides, control libraries, comparison tools, and training courses. Everything your team needs in one connected platform.
How it works
From confused to compliant in three steps
Whether you're starting from scratch or managing multi-framework compliance, here's how we get you there.
See the full picture
Search 1,120 frameworks. Compare any two side-by-side. Instantly see which controls overlap and where the gaps are.
Browse FrameworksLet AI do the heavy lifting
Our platform maps controls automatically, generates gap analyses, and builds prioritised remediation plans, work that used to take weeks.
Try the PlatformBuild your team's expertise
Close knowledge gaps with executive education courses. Earn professional certifications recognised across 160+ countries.
View CoursesFree Assessment
How ready is your organization for compliance?
Answer 7 questions and get your personalized Compliance Readiness Score, complete with a radar chart, key insights, and an action plan across 5 dimensions.
Get Your ScoreStart exploring
The frameworks your auditor is asking about
Deep guides with controls, domains, and instant cross-framework mapping.
ISO 27001:2013
Information technology, security techniques, information security management systems, requirements: the second edition (2013-10-01), superseded by ISO/IEC 27001:2022. The transition period for certificates to this edition ended on 31 October 2025; it is kept for lineage and for the 2013 to 2022 edition crosswalks.
SOC 2
Trust Service Criteria for service organizations covering security, availability, processing integrity, confidentiality, and privacy.
NIST Cybersecurity Framework 1.0
NIST's Framework for Improving Critical Infrastructure Cybersecurity, Version 1.0 (February 2014): the five Functions, 22 Categories and 98 Subcategories in the Version 1.0 wording, each marked as kept or reworded in Version 1.1. Superseded in April 2018; kept for historic assessments and contracts that cite it.
GDPR
General Data Protection Regulation - EU regulation on data protection and privacy for all individuals within the European Union and European Economic Area.
HIPAA Breach Notification Rule
HIPAA Breach Notification Rule standards for breach risk assessment and notification to individuals, the media, HHS and covered entities by business associates.
PCI DSS v4.0
PCI DSS v4.0 is the global security standard for organisations that store, process, or transmit cardholder data, published by the PCI Security Standards Council. Version 4.0, released in March 2022 with full enforcement from 31 March 2025, introduced a customised approach to validation, expanded multi-factor authentication requirements, and added 64 new requirements. It contains 249 controls across 12 requirement areas.
Built for you
Whether you're a team of one or one hundred
Compliance Officers
Map controls across frameworks instantly. Stop building spreadsheets, start building strategy.
CISOs & Risk Leaders
Board-ready gap analyses in minutes. See your multi-framework landscape at a glance.
Consultants & Advisors
Serve more clients with less effort. Instant framework intelligence at your fingertips.
Teams & Enterprises
Upskill your entire team with professional certification courses trusted in 160+ countries.
Implementation Guides
Step-by-step compliance guidance
From the Blog
Latest compliance insights
Retail Procurement Org Transformation: From Cost-Cutting to Strategic Value
Retail procurement transformation shifts the function from transactional savings to strategic value creation across supply chains.
securitySIEM Technologies Toolkit: Tools and Capabilities for Modern Security Operations
A SIEM technologies toolkit includes log collection, correlation engines, threat detection rules, dashboards, and response workflows for real-time security monitoring.
Integration ArchitectureWhat Is an Enterprise Service Bus (ESB)? A Practitioner’s Guide
An enterprise service bus (ESB) is a middleware architecture that enables reliable, scalable integration across disparate systems using a common communication backbone.
Questions people ask
What is The Art of Service?
The Art of Service is a compliance education and framework intelligence company based in Brisbane, Australia, founded by Ivanka Menken and Gerard Blokdyk. It publishes professional courses, implementation playbooks and toolkits, and runs a compliance platform that maps controls across regulatory frameworks so an organisation can reuse evidence it already holds.
What is a compliance framework?
A compliance framework is a structured set of guidelines, controls, and best practices that organisations follow to meet regulatory requirements, manage risk, and demonstrate due diligence. Examples include ISO 27001 for information security, SOC 2 for service organisations, and NIST CSF for cybersecurity.
How many compliance frameworks does The Art of Service cover?
The Art of Service covers 1,120 compliance frameworks across information security, privacy, governance, risk management, cloud security, financial services, healthcare, and more. Each framework page includes an overview, key controls, related frameworks, and links to cross-framework control mappings.
What is the difference between ISO 27001 and SOC 2?
ISO 27001 is an international standard for Information Security Management Systems (ISMS) that results in a certificate valid for three years. SOC 2 is a North American auditing standard for service organisations that produces an attestation report, typically renewed annually. Many organisations pursue both to satisfy global and US-specific customer requirements.
How much does compliance training cost?
The Art of Service offers a free tier for its compliance intelligence platform. Professional plans start at $149/month, providing access to 1,120 frameworks, 315K+ verified control mappings, and AI-powered advisory. Individual courses and self-assessment toolkits are available separately through the Academy and Store.
Can AI help with compliance?
Yes. AI-powered compliance tools can automate control mapping across frameworks, identify gaps in your compliance posture, generate audit-ready documentation, and keep you updated on regulatory changes. The Art of Service platform uses AI trained on 25 years of compliance expertise to provide framework-specific guidance.
From our co-founder
Ivanka Menken co-founded The Art of Service and now mentors founders of growing businesses through cash, pricing and letting-go decisions. Her book The Clarity Shift is free, with no email required.
Your next audit doesn't have to be painful
Join 100,000+ professionals who replaced compliance chaos with clarity.
Free tier available. No credit card required. Set up in 2 minutes.