Software Compliance Assessment Form
Assess compliance frameworks, controls, safeguards, and evidence for your software.
Software name
*
Software version
*
Deployment model
*
Cloud-hosted SaaS
Public cloud, self-managed
Private cloud
On-premises
Hybrid
Other
Which compliance frameworks or requirements apply?
*
ISO/IEC 27001
SOC 2
GDPR
HIPAA
PCI DSS
NIST CSF
Internal requirements
Other
What categories of data does the software process or store?
*
Public or non-sensitive business information
Confidential business information
Personal data
Health-related data
Payment-related data
Authentication or access data
None of these
Other
Assess the implementation status of each compliance control
*
Rows
Implemented
Partially implemented
Not implemented
Not applicable
Governance and policy ownership
1
2
3
4
Identity and access management
5
6
7
8
Data protection and encryption
9
10
11
12
Logging and auditability
13
14
15
16
Incident response
17
18
19
20
Third-party and vendor oversight
21
22
23
24
How would you rate the software’s overall security and compliance posture?
*
Needs significant improvement
1
2
3
4
Strong
5
1 is Needs significant improvement, 5 is Strong
How frequently is the software reviewed for updates and security patches?
*
Please Select
Continuously or as updates are released
Weekly
Monthly
Quarterly
Less often than quarterly
No defined schedule
Upload relevant compliance documentation or control evidence
Upload a File
Drag and drop files here
Choose a file
Cancel
of
Describe known compliance gaps, remediation plans, or additional context
Submit Assessment
Should be Empty: