ComplianceCompliance & Audit Management
Map controls to frameworks (ISO 27001, NIS2, TISAX, SOC 2, GDPR, DORA, CCPA), track compliance, collect evidence, and manage audits with evidence-gated scores.

What can the Compliance module do?
What Compliance brings to your workflow.
Frequently asked questions about Compliance
What is the Compliance module in Flux?
Map controls to frameworks (ISO 27001, NIS2, TISAX, SOC 2, GDPR, DORA, CCPA), track compliance, collect evidence, and manage audits with evidence-gated scores.
Which Flux packages include Compliance?
Compliance is part of the ISMS/GRC suite and is included in the Flux ISMS and Flux Complete packages.
What capabilities does the Compliance module offer?
Key capabilities of Compliance include: Multi-framework support: ISO 27001, NIS2, TISAX, SOC 2, GDPR, DORA, CCPA, Control mapping and implementation tracking, Evidence-gated scores — a control counts as implemented only with approved evidence, Automated evidence collection from Microsoft Intune, Entra ID and Action1 — with a growing catalog, Evidence expiration and renewal tracking.
More in ISMS/GRC
Security & Compliance modules
Risks
Risk Management
Identify, assess, and treat organizational risks with configurable risk matrices, AI-assisted detection, and automated risk creation.
Vendor Risk
Third-Party Risk Management
Assess and monitor third-party vendor security posture with tiered assessments, lifecycle tracking, and data sensitivity monitoring.
Business Continuity
Business Continuity Management (BCM)
Continuity plans, RTO/RPO recovery objectives, disaster-recovery test execution, and backup evidence — built to satisfy NIS2 Art. 21(2)(c), with evidence that flows straight into compliance reports.
Training
Security Awareness Training
Course catalog, assignments, an append-only completion ledger, and recertification tracking for security awareness — mapped to NIS2 Art. 21(2)(g). Flux tracks training; it does not deliver course content.
Start using Compliance today
Get started with a free trial and see how Compliance fits into your operations.