Compass
Compass
AI compliance engine — every finding auto-mapped to the frameworks you report against.
Compass reads every finding the platform generates and maps it — in real time — against the frameworks you care about. Audit evidence is captured the moment a vulnerability is confirmed, not during a panicked pre-audit sprint.
The Compass workflow.
Finding intake
Sentinel, Hive, Recon, Mirror emit findings into a canonical schema — Compass ingests them all.
Clause matching
AI classifier maps each finding to applicable clauses across 7 frameworks simultaneously (e.g. DPDP §8 + ISO A.8.2 + SOC CC6.1).
Evidence locker
Screenshots, request/response logs, remediation diffs packaged into timestamped, tamper-evident evidence bundles.
Audit export
One-click export in auditor-ready formats — CERT-In 6-hour submission, DPDP breach notification, SOC 2 attestation evidence.
What Compass does.
DPDP Act Native
India's Digital Personal Data Protection Act is the primary framework — not bolted on. Breach-notification timers + CERT-In reporting built in.
RBI + SEBI Maps
RBI cyber circular, SEBI CSCRF, IRDAI, PFRDA — all Indian regulators covered out of the box.
ISO 27001 / SOC 2
Clause-level mapping with control-family traceability. Pre-audit assessments in days, not months.
PCI + HIPAA + GDPR
Global frameworks for export-ready SaaS and regulated industries.
Continuous Control
Compliance status is a live dashboard, not a once-a-year snapshot. Drift is flagged the moment it happens.
Auditor Portal
External auditors get a read-only portal with scoped evidence access — no more sharing spreadsheets over email.
The innovation behind Compass.
India-first, not India-added
DPDP, RBI, SEBI, CERT-In, IRDAI are the primary classification targets — global frameworks layered on top. No Indian enterprise should have to "adapt" a US compliance tool.
Finding-to-clause in <1s
Traditional GRC tools ask a human auditor to map findings to clauses. Compass's classifier does it at ingest — with auditable model rationale.
Integrated, not imported
Because Compass lives inside Kavach, findings carry full context — reproduction steps, PoC, remediation diff — directly into the evidence locker.
Built for these teams & sectors.
Regulations and standards.
What changes for your team.
Evidence is captured at the moment a finding is confirmed — no pre-audit scramble to reconstruct proof.
One finding is simultaneously mapped to every framework you report against — one run, many audits satisfied.
Compliance posture is visible every minute, not once a year. Drift is flagged the moment it happens.
Regulator and customer-requested reports export in auditor-ready formats with one click — not multi-week effort.
The rest of the platform.
Make compliance continuous, not cataclysmic.
See how Compass transforms compliance from an annual scramble into a real-time control plane.