# Compliance Frameworks

**URL:** https://theauditrail.com/frameworks/
**Published:** 2026-10-12
**Modified:** 2026-10-12
**Author:** The Audit Trail editorial desk

> SOC 2, ISO 27001, HIPAA and PCI DSS compliance software, each rated on a public rubric.

---

Frameworks

# Compliance Frameworks

SOC 2, ISO 27001, HIPAA and PCI DSS. Each with rated platforms and supporting guides.

[

SOC 2

 ![](https://theauditrail.com/logos/drata.png)![](/logos/onetrust.png)![](/logos/scrut.png)7 platforms



](/frameworks/soc-2/)

[Framework](https://theauditrail.com/frameworks/soc-2/)

[

### SOC 2

An audit report governed by the AICPA that evaluates a service organization's security, availability, processing integrity, confidentiality, and privacy controls.



](https://theauditrail.com/frameworks/soc-2/)[

ISO 27001

 ![](https://theauditrail.com/logos/drata.png)![](/logos/onetrust.png)![](/logos/scrut.png)7 platforms

Framework

### ISO 27001

An international standard specifying the requirements for an information security management system (ISMS), with independent certification available through accredited bodies.



](/frameworks/iso-27001/)[

HIPAA

 ![](https://theauditrail.com/logos/drata.png)![](/logos/onetrust.png)![](/logos/scrut.png)7 platforms

Framework

### HIPAA

A US federal law requiring covered entities and their business associates to protect electronic protected health information through administrative, physical, and technical safeguards.



](/frameworks/hipaa/)[

PCI DSS

 ![](https://theauditrail.com/logos/drata.png)![](/logos/onetrust.png)![](/logos/scrut.png)7 platforms

Framework

### PCI DSS

A security standard maintained by the PCI Security Standards Council that applies to organizations storing, processing, or transmitting payment cardholder data.



](/frameworks/pci-dss/)[

CMMC

 ![](https://theauditrail.com/logos/drata.png)![](/logos/onetrust.png)![](/logos/scrut.png)7 platforms

Framework

### CMMC

A the Department of War certification program that sets cybersecurity requirements for defense contractors handling federal contract information and controlled unclassified information.



](/frameworks/cmmc/)