Find out where you stand.
Pick the regulation or standard you're up against. Answer a few questions from our engineers, get your readiness tier in two minutes, and we'll send the detailed breakdown.
Assessment frameworks
Privacy & regulation
The laws that decide how you handle personal and critical data in Canada.
Bill C-26 (now Bill C-8)
See how your cyber security program lines up with the CCSPA duties. The Act is law and not yet in force as of 2026-08-27, so this is preparation, not remediation.
6 questionsAbout 2 minutesReport by email
Quebec Law 25
Check your Law 25 posture across consent, incident handling, rights requests, and your privacy officer appointment.
6 questionsAbout 2 minutesReport by emailSecurity attestations
The reports and certificates enterprise buyers ask for before they trust you.
SOC 2
Check how ready your controls and evidence are for a SOC 2 audit, area by area.
6 questionsAbout 2 minutesReport by email
PCI DSS
Find out how your cardholder data environment, scope, and controls stack up against PCI DSS v4.0.1.
6 questionsAbout 2 minutesReport by email
ISO 27001
See how your ISMS scope, risk process, SoA, and evidence stack up against the 2022 standard.
6 questionsAbout 2 minutesReport by emailAI governance
How you govern the AI you build and buy, before a board or customer asks.
Who does the work these assessments point to?
We do. Each assessment scores you against one framework and stops there. The practice pages below describe what happens next: the audit, the controls we build, the evidence your auditor asks for, and the people who run it. Start there if you already know which standard applies to you.
