Compliance
Compliance evidence, generated by the platform.
Framework packs, continuous scoring, a tamper-evident audit trail and scheduled reports, for global standards and national regulations.
Last updated · Fusionative
Short answer
FusioNative ships compliance packs for CIS, ISO 27001, NIST CSF, PCI DSS 4.0, NSA Kubernetes Hardening, NCA ECC, NCA CCC and SAMA CSF, a SOC 2 Center, and audit evidence mapped to ISO 42001, GDPR and PDPL, with scoring, drift detection and scheduled reports.
| Framework | Scope | What FusioNative provides |
|---|---|---|
| CIS Benchmarks | Global | Framework pack, kube-bench scans, scoring and drift |
| ISO/IEC 27001 | Global | Framework pack and audit evidence mapping |
| ISO/IEC 42001 | Global (AI management) | Audit evidence mapping for AI systems |
| NIST Cybersecurity Framework | Global | Framework pack with scoring |
| PCI DSS 4.0 | Global (payments) | Framework pack with scoring |
| NSA Kubernetes Hardening Guide | Global | Framework pack |
| SOC 2 | Global | SOC 2 Center: evidence, executive reports, attestation pack |
| GDPR | European Union | Audit evidence mapping; residency and classification views |
| NCA ECC and NCA CCC | Saudi Arabia | Framework packs with scoring and drift |
| SAMA Cyber Security Framework | Saudi Arabia (financial sector) | Framework pack |
| PDPL and NDMO | Saudi Arabia | Evidence mapping; data governance, residency and classification views |
Capabilities
What the compliance module does
- Compliance framework packs with scoring and drift detection: CIS, ISO 27001, NIST CSF, PCI DSS 4.0, NSA Kubernetes Hardening, NCA ECC, NCA CCC and SAMA Cyber Security Framework
- SOC 2 Center with evidence collection, executive reports and an attestation pack
- Unified audit trail (API calls, Kubernetes audit, GitOps, storage, model registry) protected by a tamper-evident HMAC hash chain, shipped to SIEM or Loki
- Audit evidence mapped to ISO 27001, ISO 42001 (AI management), GDPR and Saudi PDPL
- Data governance views for NDMO, PDPL, data residency and data classification
- Scheduled CEO, CTO, compliance, SOC, risk and incident reports in PDF, HTML, CSV or JSON, by email or webhook
FAQ
Frequently asked questions
Is FusioNative certified for these frameworks?
No platform can certify your environment for you. FusioNative provides framework packs, continuous scoring, evidence and reports that support your audits; certification is between you and your auditor or regulator.
How is the audit trail protected?
Audit events from API calls, Kubernetes, GitOps, storage and the model registry go into one trail protected by an HMAC hash chain, so tampering is detectable, and can be shipped to your SIEM or Loki.
Does FusioNative support data residency requirements?
Yes. The whole platform runs on your infrastructure, the LLM gateway has no cloud egress by default, and residency and classification views help show where data lives.