Frameworks
Each page cites the instrument exactly, says in plain words what each clause requires, and names the Aspian Cloud record your auditor can inspect for it. A mapping helps an assessment; it doesn’t replace one, and we never claim compliance on your behalf.
Global
- SOC 2CC8.1 · CC6.1 / CC6.2 / CC6.3 · CC7.2SaaS companies selling to enterprises, and anyone a customer asks for a SOC 2 report.
- ISO 27001A.8.32 · A.8.9 · A.8.25 / A.8.28Organisations with, or working towards, ISO/IEC 27001 certification.
- PCI DSSReq. 6.5.1 · Req. 6.5.2 · Req. 6.5.3 / 6.5.4Merchants and service providers that store, process or transmit card data.
European Union
- DORADORA Art. 9(4)(e) · DORA Art. 28(3) and Art. 30(2)-(3) · DORA Art. 19(4)EU banks, payment and e-money institutions, investment firms, insurers and their ICT providers.
- NIS2Art. 21(2)(d) · Art. 21(2)(e) · Art. 23(4)(a),Essential and important entities under your Member State’s NIS2 law, and their suppliers.
United States
- SOX ITGCSOX s.404(a)-(b) · AS 2201 Appendix B, .B28-.B33 · AS 1105.10US-listed companies and their auditors, for systems that touch financial reporting.
- NIST SSDFSSDF PO.1 / PO.3 · SSDF PS.1 / PS.2 / PS.3 · SSDF PW.7 / RV.1US federal suppliers attesting to secure development, and anyone using NIST as their baseline.
Asia-Pacific
- APRACPS 230 'Critical operations and tolerance levels' · CPS 230 'Material service providers' and 'Service provider agreements' · CPS 234 paras 16, 21, 27APRA-regulated banks, insurers and superannuation trustees, and their material service providers.
- MAS TRMSection 7.5 · Section 7.6.1-7.6.2 and 6.3.2 · Section 6.1Financial institutions supervised by the Monetary Authority of Singapore.
- RBIPara 13(a)-(d) Change and Patch Management · Para 15(a)-(c) Audit trails · Para 19(a)-(c) Access controlBanks and other entities regulated by the Reserve Bank of India.
Africa
- Joint Standard 1IT service management provisions · IT risk management frameworkFinancial institutions supervised by South Africa’s Prudential Authority and FSCA.
- CBN, NDPACBN Appendix III 1.2(b) and 1.2(d) · CBN Appendix III 1.3(a)-(b) · CBN 2.3, Appendix III 1.6(a)-(c), 1.9, and 5.0(v)Deposit money banks, payment service banks and organisations processing personal data in Nigeria.
See what shipped without approval in your last 90 days.
Install the GitHub App and the scan arrives in minutes: every repo scored, every unreviewed merge and unapproved deploy named. Nothing is blocked until you choose.
Ship like a startup. Prove it like a bank.