Safeguard
Compliance Frameworks

Every framework you're audited against.

Safeguard maps continuous evidence to the frameworks your auditors actually ask about — US, international, and sector-specific. Major frameworks plus 150+ regional variants and regimes mapped across 6 regions — 25 highlighted below.

◈ the crosswalk — one control set, every framework you're audited against
70
Americas
41
International
28
Europe
28
Asia-Pacific
19
Middle East & Africa
11
Internal

A framework not listed?

If your auditor is asking for it, we'll map it. Book a 30-minute call and we'll walk through your control set with the Safeguard evidence engine live.

The full registry

Every framework we support.

All 373 regimes in the registry, grouped by region.

Americas

107
NIST SSDF
United States · Government Regulation
NIST CSF 2.0
United States · Government Regulation
NIST SP 800-53
United States · Government Regulation
NIST SP 800-161
United States · Government Regulation
NIST SP 800-171
United States · Government Regulation
NIST SP 800-82
United States · Government Regulation
NIST SP 800-207
United States · Government Regulation
NIST CSF 2.0 (Full)
United States · Government Regulation
FISMA
United States · Government Regulation
FedRAMP
United States · Government Regulation
StateRAMP
United States · Government Regulation
CMMC 2.0
United States · Government Regulation
DFARS 252.204-7012
United States · Government Regulation
NDAA Section 889
United States · Government Regulation
HIPAA Security Rule
United States · Government Regulation
HIPAA / HITECH
United States · Government Regulation
HITRUST CSF
United States · Government Regulation
FDA Medical Device
United States · Government Regulation
SOC 2 Type II
United States · Government Regulation
SOC 2 Type II (Extended)
United States · Government Regulation
SOX ITGC
United States · Government Regulation
FTC Safeguards Rule
United States · Government Regulation
FFIEC CAT
United States · Government Regulation
CCPA / CPRA
United States · Government Regulation
FIPS 140-3
United States · Government Regulation
NIST AI RMF
United States · Government Regulation
NIST SP 800-218A
United States · Government Regulation
NERC CIP
United States · Government Regulation
Canada PIPEDA
Canada · Government Regulation
Brazil LGPD
Brazil · Government Regulation
Virginia CDPA
United States · Government Regulation
Colorado CPA
United States · Government Regulation
Connecticut CTDPA
United States · Government Regulation
Utah UCPA
United States · Government Regulation
Texas TDPSA
United States · Government Regulation
Oregon OCPA
United States · Government Regulation
Montana CDPA
United States · Government Regulation
Tennessee TIPA
United States · Government Regulation
Delaware PDPA
United States · Government Regulation
New Jersey CDPA
United States · Government Regulation
New Hampshire DPA
United States · Government Regulation
Maryland MODPA
United States · Government Regulation
Minnesota CDPA
United States · Government Regulation
Indiana CDPA
United States · Government Regulation
Iowa CDPA
United States · Government Regulation
Florida Digital Bill of Rights
United States · Government Regulation
Washington My Health My Data Act
United States · Government Regulation
FDA 21 CFR Part 11
United States · Government Regulation
TSA Pipeline Security Directives
United States · Government Regulation
Mexico LFPDPPP
Mexico · Government Regulation
Argentina PDPL (Law 25.326)
Argentina · Government Regulation
Chile Law 19.628
Chile · Government Regulation
Colombia Law 1581
Colombia · Government Regulation
Peru Law 29733
Peru · Government Regulation
NIST Privacy Framework
United States · Industry Standard
NY DFS 23 NYCRR 500
United States · Government Regulation
NY SHIELD Act
United States · Government Regulation
Massachusetts 201 CMR 17.00
United States · Government Regulation
Illinois BIPA
United States · Government Regulation
COPPA
United States · Government Regulation
FERPA
United States · Government Regulation
GLBA
United States · Government Regulation
FCRA / FACTA
United States · Government Regulation
NIST SP 800-37 RMF
United States · Government Regulation
NIST SP 800-66 r2
United States · Government Regulation
NIST SP 800-63
United States · Government Regulation
Quebec Law 25
Canada · Government Regulation
Canada CPPA
Canada · Government Regulation
Uruguay Law 18.331
Uruguay · Government Regulation
Jamaica DPA
Jamaica · Government Regulation
Costa Rica Law No. 8968 on Personal Data
Costa Rica · Government Regulation
Panama Law No. 81 of 2019 on Personal Data
Panama · Government Regulation
Ecuador Organic Law on Personal Data Protection
Ecuador · Government Regulation
Paraguay Law No. 6534/2020 on Personal Data
Paraguay · Government Regulation
Nicaragua Law No. 787 on Personal Data
Nicaragua · Government Regulation
Dominican Republic Law No. 172-13 on Personal Data
Dominican Republic · Government Regulation
Trinidad and Tobago Data Protection Act 2011
Trinidad and Tobago · Government Regulation
Barbados Data Protection Act 2019
Barbados · Government Regulation
Bahamas Data Protection Act 2003
Bahamas · Government Regulation
El Salvador Personal Data Protection Law 2024
El Salvador · Government Regulation
Bermuda Personal Information Protection Act 2016
Bermuda · Government Regulation
Cayman Islands Data Protection Act 2017
Cayman Islands · Government Regulation
Antigua and Barbuda Data Protection Act 2013
Antigua and Barbuda · Government Regulation
El Salvador Cybersecurity and Information Security Law 2024
El Salvador · Government Regulation
Bolivia Supreme Decree 1793
Bolivia · Government Regulation
Venezuela Constitutional Habeas Data
Venezuela · Government Regulation
Guatemala Ley de Acceso a la Informacion Publica
Guatemala · Government Regulation
Honduras Ley de Transparencia (Habeas Data)
Honduras · Government Regulation
Cuba Law 149/2022 on Personal Data Protection
Cuba · Government Regulation
Haiti National Privacy Framework
Haiti · Government Regulation
Belize Data Protection Act 2021
Belize · Government Regulation
Guyana Data Protection Act 2023
Guyana · Government Regulation
Suriname National Privacy Framework
Suriname · Government Regulation
Grenada National ICT / Privacy Framework
Grenada · Government Regulation
Dominica National ICT / Privacy Framework
Dominica · Government Regulation
Saint Lucia Data Protection Act
Saint Lucia · Government Regulation
Saint Kitts and Nevis Data Protection Act 2018
Saint Kitts and Nevis · Government Regulation
Saint Vincent National ICT / Privacy Framework
Saint Vincent and the Grenadines · Government Regulation
Greenland Data Protection Act
Greenland · Government Regulation
Puerto Rico Act 111-2005 / US Frameworks
Puerto Rico · Government Regulation
Aruba Personal Data Protection Ordinance
Aruba · Government Regulation
Curacao Personal Data Protection Ordinance
Curacao · Government Regulation
British Virgin Islands Data Protection Act 2021
British Virgin Islands · Government Regulation
Turks and Caicos Data Protection Ordinance
Turks and Caicos · Government Regulation
Anguilla Data Protection Act 2020
Anguilla · Government Regulation
Montserrat National ICT / Privacy Framework
Montserrat · Government Regulation
Falkland Islands Data Protection Ordinance
Falkland Islands · Government Regulation

Europe

76
EU Cyber Resilience Act
European Union · Government Regulation
EU DORA
European Union · Government Regulation
EU NIS2 Directive
European Union · Government Regulation
GDPR
European Union · Government Regulation
GDPR Article 25
European Union · Government Regulation
EU AI Act
European Union · Government Regulation
ETSI EN 303 645
European Union · Government Regulation
ENISA Good Practices
European Union · Government Regulation
BSI TR-03183-2
Germany · Government Regulation
TISAX
Germany · Government Regulation
UK Cyber Essentials
United Kingdom · Government Regulation
France ANSSI RGS
France · Government Regulation
Italy ACN Cybersecurity
Italy · Government Regulation
Spain ENS (RD 311/2022)
Spain · Government Regulation
Netherlands NEN 7510
Netherlands · Government Regulation
Switzerland revFADP
Switzerland · Government Regulation
Norway NSM Basic Principles
Norway · Government Regulation
UK GDPR / DPA 2018
United Kingdom · Government Regulation
UK NCSC CAF
United Kingdom · Government Regulation
EU Cybersecurity Act
European Union · Government Regulation
EU eIDAS Regulation
European Union · Government Regulation
EU PSD2
European Union · Government Regulation
EU Digital Services Act
European Union · Government Regulation
EU Digital Markets Act
European Union · Government Regulation
EU Data Act
European Union · Government Regulation
BSI IT-Grundschutz
Germany · Government Regulation
Estonia EISA / ISKE
Estonia · Government Regulation
Poland KSC Act
Poland · Government Regulation
Ireland Data Protection Act 2018
Ireland · Government Regulation
Belgium Data Protection Act 2018
Belgium · Government Regulation
Austria Data Protection Act (DSG)
Austria · Government Regulation
Sweden Data Protection Act (2018:218)
Sweden · Government Regulation
Denmark Data Protection Act 2018
Denmark · Government Regulation
Finland Data Protection Act (1050/2018)
Finland · Government Regulation
Portugal Law No. 58/2019
Portugal · Government Regulation
Greece Law 4624/2019
Greece · Government Regulation
Czechia Act No. 110/2019 on Personal Data Processing
Czechia · Government Regulation
Slovakia Act No. 18/2018 on Personal Data Protection
Slovakia · Government Regulation
Hungary Act CXII of 2011 (Infotv)
Hungary · Government Regulation
Romania Law No. 190/2018
Romania · Government Regulation
Bulgaria Personal Data Protection Act
Bulgaria · Government Regulation
Croatia Act on Implementation of the GDPR 2018
Croatia · Government Regulation
Slovenia Personal Data Protection Act (ZVOP-2)
Slovenia · Government Regulation
Lithuania Law on Legal Protection of Personal Data
Lithuania · Government Regulation
Latvia Personal Data Processing Law 2018
Latvia · Government Regulation
Luxembourg Data Protection Law of 1 August 2018
Luxembourg · Government Regulation
Malta Data Protection Act (Cap. 586) 2018
Malta · Government Regulation
Cyprus Law 125(I)/2018
Cyprus · Government Regulation
Iceland Act on Data Protection No. 90/2018
Iceland · Government Regulation
Ukraine Law on Protection of Personal Data (2297-VI)
Ukraine · Government Regulation
Serbia Law on Personal Data Protection 2018
Serbia · Government Regulation
Russia Federal Law 152-FZ on Personal Data
Russia · Government Regulation
Belarus Law No. 99-Z on Personal Data Protection
Belarus · Government Regulation
Moldova Law No. 133 on Personal Data Protection
Moldova · Government Regulation
Albania Law No. 9887 on Protection of Personal Data
Albania · Government Regulation
North Macedonia Law on Personal Data Protection 2020
North Macedonia · Government Regulation
Bosnia and Herzegovina Law on Protection of Personal Data
Bosnia and Herzegovina · Government Regulation
Montenegro Law on Personal Data Protection
Montenegro · Government Regulation
Kosovo Law No. 06/L-082 on Protection of Personal Data
Kosovo · Government Regulation
Georgia Law on Personal Data Protection 2023
Georgia · Government Regulation
Armenia Law on Protection of Personal Data
Armenia · Government Regulation
Azerbaijan Law on Personal Data
Azerbaijan · Government Regulation
Liechtenstein Data Protection Act (DSG) 2018
Liechtenstein · Government Regulation
Andorra Qualified Law 29/2021 on Personal Data Protection
Andorra · Government Regulation
Monaco Law No. 1.165 on Personal Data
Monaco · Government Regulation
Russia Federal Law 187-FZ on Critical Information Infrastructure
Russia · Government Regulation
Ukraine Law on Basic Principles of Cyber Security 2017
Ukraine · Government Regulation
Georgia Law on Information Security
Georgia · Government Regulation
San Marino Law 171/2018 on Data Protection
San Marino · Government Regulation
Holy See Data Protection Framework
Holy See (Vatican) · Government Regulation
Gibraltar Data Protection Act 2004
Gibraltar · Government Regulation
Jersey Data Protection Law 2018
Jersey · Government Regulation
Guernsey Data Protection Law 2017
Guernsey · Government Regulation
Isle of Man Data Protection Act 2018
Isle of Man · Government Regulation
Faroe Islands Data Protection Act
Faroe Islands · Government Regulation
Aland Finnish Data Protection Act
Aland · Government Regulation

Asia-Pacific

62
Australia Essential Eight
Australia · Government Regulation
Australia Privacy Act
Australia · Government Regulation
Japan METI SBOM Guidelines
Japan · Government Regulation
India CERT-In
India · Government Regulation
India DPDP Act
India · Government Regulation
South Korea PIPA
South Korea · Government Regulation
Singapore Cybersecurity Act
Singapore · Government Regulation
New Zealand NZISM
New Zealand · Government Regulation
Thailand PDPA
Thailand · Government Regulation
China PIPL
China · Government Regulation
Vietnam Decree 13/2023
Vietnam · Government Regulation
Philippines Data Privacy Act
Philippines · Government Regulation
Malaysia PDPA
Malaysia · Government Regulation
Indonesia PDP Law
Indonesia · Government Regulation
Pakistan PDPB
Pakistan · Government Regulation
China Data Security Law
China · Government Regulation
China Cybersecurity Law
China · Government Regulation
China MLPS 2.0
China · Government Regulation
Japan APPI
Japan · Government Regulation
Japan ISMAP
Japan · Government Regulation
Korea ISMS-P
South Korea · Government Regulation
Hong Kong PDPO
Hong Kong · Government Regulation
Taiwan PDPA
Taiwan · Government Regulation
Singapore PDPA
Singapore · Government Regulation
MAS TRMG
Singapore · Government Regulation
Australia ACSC ISM
Australia · Government Regulation
Australia SOCI Act
Australia · Government Regulation
Macau PDPA
Macau · Government Regulation
Kazakhstan Law on Personal Data and its Protection
Kazakhstan · Government Regulation
Uzbekistan Law on Personal Data
Uzbekistan · Government Regulation
Kyrgyzstan Law on Personal Information
Kyrgyzstan · Government Regulation
Tajikistan Law on Protection of Personal Data
Tajikistan · Government Regulation
Turkmenistan Law on Information about Private Life
Turkmenistan · Government Regulation
Sri Lanka Personal Data Protection Act No. 9 of 2022
Sri Lanka · Government Regulation
Nepal Individual Privacy Act 2018
Nepal · Government Regulation
Myanmar Law Protecting Privacy and Security of Citizens 2017
Myanmar · Government Regulation
Laos Law on Electronic Data Protection 2017
Laos · Government Regulation
Brunei Personal Data Protection Order 2025
Brunei · Government Regulation
Mongolia Law on Personal Data Protection 2021
Mongolia · Government Regulation
Bangladesh Cyber Security Act 2023
Bangladesh · Government Regulation
Papua New Guinea Cybercrime Code Act 2016
Papua New Guinea · Government Regulation
Afghanistan National Privacy Framework
Afghanistan · Government Regulation
Bhutan ICM Act 2018 (Data Protection)
Bhutan · Government Regulation
Maldives National Privacy Framework
Maldives · Government Regulation
Timor-Leste National Privacy Framework
Timor-Leste · Government Regulation
DPRK National Data Framework
North Korea · Government Regulation
Cambodia E-Commerce Law 2019 (Data Protection)
Cambodia · Government Regulation
Fiji National ICT / Privacy Framework
Fiji · Government Regulation
Fiji Cybercrime Act 2021
Fiji · Government Regulation
Samoa National ICT / Privacy Framework
Samoa · Government Regulation
Tonga National ICT / Privacy Framework
Tonga · Government Regulation
Vanuatu National ICT / Privacy Framework
Vanuatu · Government Regulation
Solomon Islands National ICT / Privacy Framework
Solomon Islands · Government Regulation
Kiribati National ICT / Privacy Framework
Kiribati · Government Regulation
Tuvalu National ICT / Privacy Framework
Tuvalu · Government Regulation
Nauru National ICT / Privacy Framework
Nauru · Government Regulation
Marshall Islands National ICT / Privacy Framework
Marshall Islands · Government Regulation
Micronesia National ICT / Privacy Framework
Micronesia · Government Regulation
Palau National ICT / Privacy Framework
Palau · Government Regulation
Guam Data Breach Law / US Frameworks
Guam · Government Regulation
French Polynesia Loi Informatique et Libertes
French Polynesia · Government Regulation
New Caledonia Loi Informatique et Libertes
New Caledonia · Government Regulation

Middle East & Africa

76
Saudi Arabia NCA ECC
Saudi Arabia · Government Regulation
Israel INCD
Israel · Government Regulation
UAE PDPL
United Arab Emirates · Government Regulation
UAE NESA IA Standards
United Arab Emirates · Government Regulation
Qatar PDPL
Qatar · Government Regulation
Bahrain PDPL
Bahrain · Government Regulation
Oman PDPL
Oman · Government Regulation
Egypt PDPL (Law 151/2020)
Egypt · Government Regulation
Turkey KVKK
Turkey · Government Regulation
South Africa POPIA
South Africa · Government Regulation
Nigeria NDPR / NDPA
Nigeria · Government Regulation
Kenya Data Protection Act 2019
Kenya · Government Regulation
Ghana Data Protection Act
Ghana · Government Regulation
Saudi PDPL
Saudi Arabia · Government Regulation
SAMA Cybersecurity Framework
Saudi Arabia · Government Regulation
Kuwait Cybersecurity Law
Kuwait · Government Regulation
Jordan PDP Law
Jordan · Government Regulation
Morocco Law 09-08
Morocco · Government Regulation
Lebanon Law 81
Lebanon · Government Regulation
Uganda Data Protection and Privacy Act 2019
Uganda · Government Regulation
Tanzania Personal Data Protection Act 2022
Tanzania · Government Regulation
Rwanda Law No. 058/2021 on Protection of Personal Data
Rwanda · Government Regulation
Botswana Data Protection Act 2018
Botswana · Government Regulation
Zimbabwe Cyber and Data Protection Act 2021
Zimbabwe · Government Regulation
Zambia Data Protection Act No. 3 of 2021
Zambia · Government Regulation
Angola Law No. 22/11 on Protection of Personal Data
Angola · Government Regulation
Mauritius Data Protection Act 2017
Mauritius · Government Regulation
Madagascar Law No. 2014-038 on Protection of Personal Data
Madagascar · Government Regulation
Senegal Law No. 2008-12 on Protection of Personal Data
Senegal · Government Regulation
Cote d'Ivoire Law No. 2013-450 on Personal Data
Cote d'Ivoire · Government Regulation
Benin Digital Code 2018 (Personal Data)
Benin · Government Regulation
Togo Law No. 2019-014 on Protection of Personal Data
Togo · Government Regulation
Gabon Law No. 001/2011 on Protection of Personal Data
Gabon · Government Regulation
Tunisia Organic Law No. 2004-63 on Personal Data
Tunisia · Government Regulation
Algeria Law No. 18-07 on Protection of Personal Data
Algeria · Government Regulation
Ethiopia Personal Data Protection Proclamation 1321/2024
Ethiopia · Government Regulation
Mali Law No. 2013-015 on Protection of Personal Data
Mali · Government Regulation
Burkina Faso Law No. 010-2004 on Personal Data
Burkina Faso · Government Regulation
Niger Law No. 2017-28 on Protection of Personal Data
Niger · Government Regulation
Chad Law No. 007/PR/2015 on Protection of Personal Data
Chad · Government Regulation
DR Congo Digital Code 2023 (Personal Data)
DR Congo · Government Regulation
Cape Verde Law No. 133/V/2001 on Personal Data
Cape Verde · Government Regulation
Lesotho Data Protection Act 2011
Lesotho · Government Regulation
Eswatini Data Protection Act 2022
Eswatini · Government Regulation
Malawi Data Protection Act 2024
Malawi · Government Regulation
Seychelles Data Protection Act 2003
Seychelles · Government Regulation
Zambia Cyber Security and Cyber Crimes Act 2021
Zambia · Government Regulation
Tanzania Cybercrimes Act 2015
Tanzania · Government Regulation
Cameroon Law 2010/012 on Cybersecurity
Cameroon · Government Regulation
Iran Computer Crimes Law 2009
Iran · Government Regulation
Palestine Data Protection Framework
Palestine · Government Regulation
Iraq National Privacy Framework
Iraq · Government Regulation
Yemen National Privacy Framework
Yemen · Government Regulation
Syria National Privacy Framework
Syria · Government Regulation
Syria Cybercrime Law No. 20 of 2022
Syria · Government Regulation
Malabo Convention (AU) - Sudan
Sudan · Government Regulation
Malabo Convention (AU) - South Sudan
South Sudan · Government Regulation
Somalia Data Protection Act 2023
Somalia · Government Regulation
Malabo Convention (AU) - Libya
Libya · Government Regulation
Mauritania Law 2017-020 on Data Protection
Mauritania · Government Regulation
Malabo Convention (AU) - Gambia
Gambia · Government Regulation
Guinea Law L/2016/037 on Data Protection
Guinea · Government Regulation
Malabo Convention (AU) - Guinea-Bissau
Guinea-Bissau · Government Regulation
Malabo Convention (AU) - Sierra Leone
Sierra Leone · Government Regulation
Sierra Leone Cyber Security and Crime Act 2021
Sierra Leone · Government Regulation
Malabo Convention (AU) - Liberia
Liberia · Government Regulation
Malabo Convention (AU) - Central African Republic
Central African Republic · Government Regulation
Congo Law 29-2019 on Data Protection
Republic of the Congo · Government Regulation
Malabo Convention (AU) - Equatorial Guinea
Equatorial Guinea · Government Regulation
Malabo Convention (AU) - Burundi
Burundi · Government Regulation
Malabo Convention (AU) - Djibouti
Djibouti · Government Regulation
Malabo Convention (AU) - Eritrea
Eritrea · Government Regulation
Malabo Convention (AU) - Comoros
Comoros · Government Regulation
Malabo Convention (AU) - Sao Tome
Sao Tome and Principe · Government Regulation
Malabo Convention (AU) - Namibia
Namibia · Government Regulation
Malabo Convention (AU) - Mozambique
Mozambique · Government Regulation

International

41
ISO/IEC 27001
International · Industry Standard
ISO/IEC 27017
International · Industry Standard
ISO/IEC 27018
International · Industry Standard
ISO/IEC 5962 (SPDX)
International · Industry Standard
ISO 22301
International · Industry Standard
ISO/IEC 20000
International · Industry Standard
ISO/IEC 42001
International · Industry Standard
Common Criteria (CC)
International · Industry Standard
PCI DSS v4.0
International · Industry Standard
PCI DSS 4.0 (Full)
International · Industry Standard
SWIFT CSCF
International · Industry Standard
IEC 62443
International · Industry Standard
IEC 62443-4-2
International · Industry Standard
UNECE WP.29
International · Industry Standard
ISO/IEC 21434
International · Industry Standard
OWASP Top 10
International · Industry Standard
OWASP SCVS
International · Industry Standard
OWASP CycloneDX BOM
International · Industry Standard
OWASP ASVS
International · Industry Standard
OWASP MASVS
International · Industry Standard
SLSA Supply Chain
International · Industry Standard
OpenChain ISO 5230
International · Industry Standard
OpenSSF Scorecard
International · Industry Standard
CIS Controls v8
International · Industry Standard
CSA STAR
International · Industry Standard
CSA Cloud Controls Matrix
International · Industry Standard
MITRE ATT&CK
International · Industry Standard
CycloneDX VEX
International · Industry Standard
ISO/IEC 29147
International · Industry Standard
O-TTPS / ISO 20243
International · Industry Standard
in-toto
International · Industry Standard
IEC 62304
International · Industry Standard
DO-326A
International · Industry Standard
GxP (GMP/GLP/GCP)
International · Industry Standard
ISO/IEC 27701
International · Industry Standard
ISO/IEC 27005
International · Industry Standard
ISO/IEC 27002:2022
International · Industry Standard
ISO/IEC 27035
International · Industry Standard
ISO/IEC 27032
International · Industry Standard
ISO 28000
International · Industry Standard
ISO 31000
International · Industry Standard

Internal

11
Component Health
Internal · Internal Policy
CISA KEV Correlation
Internal · Internal Policy
Supply Chain Risk Score
Internal · Internal Policy
Dependency Age
Internal · Internal Policy
License Obligations
Internal · Internal Policy
VEX Readiness
Internal · Internal Policy
Duplicate Detection
Internal · Internal Policy
Crypto Algorithm Audit
Internal · Internal Policy
Provenance Chain
Internal · Internal Policy
Transitive Depth
Internal · Internal Policy
Typosquatting Detection
Internal · Internal Policy

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.