Frameworks
Evidence for Every Framework
You Answer To.
Supported frameworks
- Framework pack in trustlynceSOC 2SOC 2 (AICPA Trust Services Criteria)Service organizations that store or process customer data, especially B2B SaaS.SOC 2 controls and evidence
- Framework pack in trustlynceISO 27001ISO/IEC 27001:2022Any organization that wants a certified information security management system (ISMS).ISO 27001 controls and evidence
- Framework pack in trustlynceHIPAAHIPAA Security Rule (45 CFR Part 164, Subpart C)US covered entities and their business associates that handle electronic protected health information (ePHI).HIPAA controls and evidence
- Control mapping availableGDPREU General Data Protection Regulation (GDPR)Organizations that process personal data of people in the EU or EEA.GDPR controls and evidence
- Control mapping availablePCI DSSPCI DSS v4.0.1Any organization that stores, processes, or transmits payment card data.PCI DSS controls and evidence
- Control mapping availableNIST CSF & SSDFNIST Cybersecurity Framework 2.0 and Secure Software Development Framework (SP 800-218)US federal suppliers, and any organization that wants a widely recognized security baseline.NIST CSF & SSDF controls and evidence
How It Works
Collect Once, Map to Many
01
Connect your systems
trustlynce connects to AWS, GCP, Azure, GitHub, GitLab, and Okta. TrustIvan and aiAxonIQ add scan results and monitoring data.
02
Map controls once
Each piece of evidence is mapped to controls. One access review can satisfy SOC 2 CC6, ISO 27001 A.5.18, and HIPAA 164.312(a) at the same time.
03
Collect evidence on a schedule
Evidence is collected continuously and timestamped, so a Type II observation period or a surveillance audit is covered without a scramble.
04
Share with auditors
Auditors get read-only access to the evidence and its history. People approve; agents and pipelines do the collecting.
Lionhouse software helps you prepare evidence. Certification and attestation decisions are made by your independent auditor or certification body.
Talk to an Architect
See the Four Products Running in Your Environment.
A technical session with a Lionhouse architect covering your stack, your deployment model, and a pilot plan.