Explore the compliance frameworks Secrato supports—from GDPR, NIS2 and DORA to ISO/IEC 27001—in one connected, EU-first GRC platform.
Secrato is built for European businesses first, delivering seamless compliance coverage for critical EU regulations and global standards.
EU directive setting cybersecurity and incident-reporting obligations for essential and important entities.
EU regulation governing the protection of personal data and privacy for individuals in the EU.
EU regulation setting ICT risk management and resilience requirements for the financial sector.
EU regulation setting cybersecurity requirements for products with digital elements sold in the EU market.
EU regulation setting risk-based requirements for AI systems and general-purpose AI models.
International standard for establishing and maintaining an information security management system.
International standard for management systems governing the responsible use of artificial intelligence.
International standard for business continuity management systems.
Belgian cybersecurity framework of baseline controls for organisations operating in Belgium.
ANSSI reference for NIS2 in France, with security objectives and acceptable means of compliance.
Reference security standards and certification schemes set by Germany’s federal cybersecurity agency.
Dutch law implementing NIS2, with the Cyberbeveiligingsbesluit setting the minimum security measures.
US Department of Defense programme that verifies how contractors protect FCI and CUI.
Information security assessment and exchange standard used across the automotive industry.
Global security standard for organisations handling payment card data.
PCI SSC standard for the secure management, processing and transmission of PIN data in card payments.
International standard for security of industrial automation and control systems.
Voluntary NIST framework for managing cybersecurity risk, organised around six core functions from Govern to Recover.
AICPA attestation report on a service organisation’s controls against the Trust Services Criteria.
CUSTOM FRAMEWORKS
Combine requirements from any standard framework or your own internal policies into a framework built around your organisation, tracked the same way as everything else in the register.
GRC data is processed on self-managed infrastructure in a Belgian datacentre, within the EU legal and regulatory environment.
Belgium · EU
Secrato covers 20+ frameworks across four groups: EU regulations and directives, international management standards, national laws and schemes, and industry and security standards. The full set is listed in the register above and new frameworks are added regularly.
You can build it yourself. Alongside the supported frameworks, Secrato lets you compile controls from any standard framework or your own internal policies into a custom framework, tracked the same way as every other entry in the register.
No. When a control satisfies requirements across more than one framework, Secrato maps it once and reuses it everywhere it applies. Mapping a control for NIS2 that also counts toward ISO/IEC 27001 means the work carries across without being repeated.
Request a demo and we’ll walk through the frameworks that apply to your organisation, and how Secrato maps them together.
Data-driven realtime compliance for continuous readiness
Continuous readiness through structured assessments
Centralize, automate, and stay ahead of risks
Connect policies, procedures and evidence to controls
Choose what you allow per category. You can change this anytime via the cookie button at the bottom left. More in our cookie policy and privacy statement.
Required for the site and portal to work. Always on.
Remembers choices such as language and region.
Anonymised analytics to improve the site (Google Analytics).
Advertising and campaign measurement.
