Knowledge base

Frameworks by plan

Which compliance frameworks are included in each ComplianceScout plan. To enable a framework outside your current tier, contact sales for a plan adjustment.

Starter

Included in every account. Defense-industry baselines for early-stage teams.

  • CMMC Level 1
  • CMMC Level 2
  • DFARS 252.204-7012

Growth

Multi-framework support. The frameworks most teams adopt first.

  • SOC 2 Type II
  • HIPAA Security Rule
  • ISO/IEC 27001
  • PCI DSS v4.0
  • NIST Cybersecurity Framework
  • GDPR

Professional

Federal + advanced control catalogs. For teams in regulated industries.

  • NIST SP 800-53 Rev 5
  • FedRAMP Moderate
  • FedRAMP Low
  • CIS Controls v8
  • SOX ITGC
  • COBIT
  • EU DORA

Enterprise

Everything in Professional plus custom-framework support and dedicated audit assistance. Contact sales.

  • Everything in Growth and Professional
  • Custom framework definitions
  • Cross-framework mapping & policy generation
  • Dedicated audit-prep workspace

Need a framework not in your plan?

We can upgrade your account to the right tier — typically within one business day. We also support custom-framework definitions on Enterprise; bring your own control catalog and we'll map it against your connected sources.