Frameworks

Frameworks, standards and regulations we align with.

Our products and services are designed around recognised privacy, cybersecurity, risk, governance, automation and business technology frameworks.

SOC2

Privacy & Data Protection

SOC 2 Compliance

Supports structured security, availability, processing integrity, confidentiality, privacy controls and evidence readiness.

GAID

Privacy & Data Protection

Privacy Implementation Guidance

Supports practical interpretation, compliance implementation, DPO responsibilities, notices and privacy operations.

GDPR

Privacy & Data Protection

General Data Protection Regulation

International privacy benchmark for transparency, lawful basis, data subject rights, processors, transfers and accountability.

ISO

Cybersecurity Governance

ISO/IEC 27001

Information security management standard for ISMS implementation, risk management, controls and audit readiness.

27701

Privacy Information Management

ISO/IEC 27701

Privacy extension supporting controller and processor privacy governance within an information security management system.

NIST

Cybersecurity

NIST Cybersecurity Framework

Cybersecurity framework for identifying, protecting, detecting, responding and recovering from cyber risks.

RMF

Risk Management

NIST Risk Management Framework

Structured approach for categorising systems, selecting controls, assessing risk and monitoring security posture.

M365

Business Technology

Kuraye 365 Governance

Governance support for Kuraye Connect, Kuraye Library, access control, document lifecycle, Kuraye Automate and productivity risk.

GWS

Business Technology

Kuraye Workspace Governance

Governance support for Kuraye Drive, Kuraye Mail, Kuraye Forms, Kuraye Sheets, Kuraye Script, user access and workflow automation.

AI

Emerging Technology Governance

AI Governance

Governance support for AI accountability, privacy, risk, oversight, acceptable use and operational controls.