Frameworks
Test a control once. Satisfy every framework that asks for it.
AssureLoom keeps a single, framework-independent control library. Frameworks are mappings onto it — so adding a second framework doesn't mean doing the work twice.
DPDP Act & Rules (India)
Purpose-built obligations for Data Fiduciaries and Processors: security safeguards, breach handling, data-principal rights and Significant Data Fiduciary duties.
ISO/IEC 27001:2022
Annex A control coverage for identity, cryptography, logging, backup, vulnerability and supplier management.
SOC 2 (2017 TSC)
Security-focused criteria mapped to the same automated checks, ready for a Type I or II readiness review.
NIST CSF 2.0
Govern, Identify, Protect, Detect, Respond and Recover functions linked to testable controls.
CIS Controls v8.1
Prioritised safeguards for asset, account, data and vulnerability management.
Framework packs carry control identifiers, metadata and mappings — not the full copyrighted text of the standards. Bring your licensed copy where your programme requires it. Coverage today is a representative control set per framework, growing release by release.
DPDP deep dive
Built for India's data-protection reality
Generic privacy tools bolt DPDP onto a GDPR template. AssureLoom models the obligations that are specific to the Act, and adjusts what it suggests to your company profile.
- Fiduciary, Processor or Both — recorded per workspace, drives DPA guidance
- Named Grievance Officer with contact details
- Significant Data Fiduciary obligations suggested from your profile, confirmed by a human
- DSAR tracker with your own SLA, automatic due dates and overdue alerts
- Personal data inventory and RoPA with legal basis and retention
- Penalty exposure reference (Section 33 schedule) linked to open findings — reference only, not legal advice
Universal control model
Why mapping beats duplication
MFA for privileged accounts is one control. It appears in ISO 27001, SOC 2, NIST CSF, CIS and DPDP safeguards. Fail it once and you see every requirement it affects — pass it once and they all move.
See your real compliance posture, not a spreadsheet of it.
Book a walkthrough and we'll run the checks against a sample environment so you can see every verdict traced back to its evidence.