United States · Delivered remotely
ISO 42001, ISO 27001 and SOC 2, implemented on the Microsoft 365 you already run.
We implement AI governance and information security for US companies inside their own Microsoft 365 tenant: the controls, the evidence and the reports live in SharePoint, on Checkpoint, our compliance software. No GRC platform to buy.
- Delivered remotely
- Fixed price, agreed up front
- Data stays in your tenant
- No GRC platform licence
What buyers in the US ask for
ISO 42001, implemented on Microsoft
Your AI inventory, impact assessments and oversight records sit next to the Microsoft 365, Entra and Defender data they describe, so the AI management system is evidenced from the tenant rather than rebuilt in a separate tool.
An ISO 27001 Statement of Applicability you can defend
Every Annex A control with its justification, owner, status and a link to its evidence, with the technical controls checked against your live tenant configuration.
SOC 2 from enterprise buyers
US enterprise security reviews usually ask for a SOC 2 report. We get you ready for Type I and the Type II observation period. The report itself is issued by an independent CPA firm, which you engage directly.
Compliance checks that run themselves
Posture checks read your Microsoft 365 and Azure configuration, and an optional scheduled monitor flags drift, so evidence stays current between audits instead of being gathered the week before.
What we deliver
Guides people here read
- ISO 42001 on Microsoft 365 and Azure →
- Inside a Statement of Applicability →
- Automating compliance in Microsoft 365, Azure and AWS →
- ISO 42001 vs NIST AI RMF vs the EU AI Act →
How it works from Australia
Remote by design
Workshops run over Microsoft Teams and the evidence is collected from your tenant, so there is no travel and no site visit to schedule.
In your Microsoft 365
Registers are SharePoint lists in your own tenant and posture checks read your live configuration. No third-party GRC platform holds your data.
Senior and fixed price
A senior practitioner from start to finish, on a fixed price agreed before we start, paid in milestones as the work is delivered.
Checkpoint
Prefer to run it yourself?
Checkpoint, our compliance software, runs inside your own Microsoft 365. It is included in every engagement and stays yours, or you can use it on its own from A$7,000 a year per framework.
Compliance365 is based in Brisbane, Australia, and works with clients remotely. Prices on our site are in Australian dollars; your fixed price is agreed before any work starts.
Talk to a senior practitioner
A free 30-minute call: what your customers are actually asking for, what you already have, and a fixed price for the rest.
