Compliance Matrix
| Compliance |
AWS |
Azure |
GCP |
|---|---|---|---|
| APRA 234 STANDARD | ✅ | ✅ | ✅ |
| AVID (AI-SPM) | ✅ | ✅ | ✅ |
| AWS CIS Benchmark v1.4.0 | ✅ | ❌ | ❌ |
| AWS CIS Benchmark v1.5.0 | ✅ | ❌ | ❌ |
| AWS CIS Benchmark v2.0.0 | ✅ | ❌ | ❌ |
| AWS CIS Benchmark v4.0.1 | ✅ | ❌ | ❌ |
| AWS Well-Architected Framework - Security | ✅ | ❌ | ❌ |
| Azure CIS Benchmarks v1.3.0 | ❌ | ✅ | ❌ |
| Azure CIS Benchmark v2.0.0 | ❌ | ✅ | ❌ |
| Azure CIS Benchmark v3.0 | ❌ | ✅ | ❌ |
| BAIT | ✅ | ✅ | ✅ |
| CMMC - Cybersecurity Maturity Model Certification | ✅ | ❌ | ❌ |
| COPPA | ✅ | ✅ | ✅ |
| CSCRF SEBI | ✅ | ✅ | ✅ |
| CSPM Encryption Program | ✅ | ✅ | ✅ |
| California Consumer Privacy Act (CCPA) | ✅ | ✅ | ✅ |
| Digital Personal Data Protection (DPDP) Act India | ✅ | ✅ | ✅ |
| FERPA | ✅ | ✅ | ✅ |
| FISMA | ✅ | ✅ | ✅ |
| FedRamp | ✅ | ✅ | ✅ |
| GCP CIS Benchmarks v1.2.0 | ❌ | ❌ | ✅ |
| GCP CIS Benchmark v2.0.0 | ❌ | ❌ | ✅ |
| GCP CIS Benchmark v3.0 | ❌ | ❌ | ✅ |
| General Data Protection Regulation (GDPR) EU | ✅ | ✅ | ✅ |
| HIPAA | ✅ | ✅ | ✅ |
| HITRUST CSF | ✅ | ✅ | ✅ |
| ISMS-P for AWS | ✅ | ❌ | ❌ |
| ISO 27001 - 2013 | ✅ | ✅ | ✅ |
| ISO 27001 - 2022 | ✅ | ✅ | ✅ |
| ISO 27017 | ❌ | ✅ | ✅ |
| ISO 27018 | ✅ | ✅ | ✅ |
| Korean Financial Security Agency Guidelines | ✅ | ✅ | ✅ |
| LGPD | ✅ | ✅ | ✅ |
| MITRE AWS Attack Framework | ✅ | ❌ | ❌ |
| NIST 800-171 | ✅ | ✅ | ✅ |
| NIST CSF | ✅ | ✅ | ✅ |
| NIST SP 800-53 | ✅ | ✅ | ✅ |
| OWASP Top 10 for LLM (AI-SPM) v2025 | ✅ | ✅ | ✅ |
| PCI | ✅ | ✅ | ✅ |
| SOC 2 Type II | ✅ | ✅ | ✅ |
| SOC 3 | ✅ | ✅ | ✅ |
| VAIT | ✅ | ✅ | ✅ |