Policy, control and evidence workspace
Control Atlas
Build granular policies, map controls to multiple frameworks, organise evidence, assess vendors and record reviews. Generated documents are editable, versioned and exportable rather than one-page placeholders.
Policies, controls, evidence and vendors
Start with a complete operating context
Control Atlas tailors policy language and evidence expectations to your company, environment, data and frameworks.
Coverage model
Use the workspace as a connected system, not a document factory.
PolicyWhat must be true
GovernanceControlHow risk is reduced
OperationEvidenceHow operation is proven
AssuranceReviewWho validates and approves
AccountabilitySaved documents
Open a document, edit it and save a new version.
Control register
Controls are created from generated policies and retain framework mappings and evidence expectations.
Evidence register
| Evidence | Control | Owner | Due | Status |
|---|
Vendor register
| Vendor | Criticality | Score | Review | Status |
|---|
Review and approval trail
Portable workspace
Export policies, controls, evidence, vendors and reviews as one JSON backup. The application stores data locally in this browser.
Important review requirement
Generated documents are implementation aids. Legal, privacy, compliance and security stakeholders must validate applicability, scope and wording before approval or audit use.