Questions, answered plainly.
What buyers, auditors and new admins ask us first.
Getting started
What is CompliLens?
One workspace to plan your security and compliance program, run it every day, prove it to auditors and customers, and keep it healthy all year.
Can we try it with realistic data?
Yes. Every module ships with realistic sample content, so you can explore a working program before adding your own.
Do I need to retype my controls for each framework?
No. Activating a framework provisions its controls. A control you already run can be mapped to several frameworks, so the work counts everywhere it applies.
Can we import our existing SoA?
Yes. Import or bulk-update controls from your own spreadsheet, matched by reference number.
Frameworks & regulation
Does CompliLens certify my company?
No. Certificates are issued by independent certification bodies. CompliLens prepares you, collects the evidence they ask for and tracks your certification cycle.
Which frameworks are supported?
ISO/IEC 27001:2022, SOC 2 Type II, ISO 9001:2015, ISO/IEC 42001:2023 and GDPR, plus opt-in overlays for RBI, SEBI and IRDAI.
Is the regulation content legal advice?
No. Framework and regulator content is paraphrased reference material for readiness. Check deadlines and obligations with your legal team.
Can one incident be reportable under several regulations?
Yes. Flag it under each regime that applies, and each runs its own deadline and reminders.
Automation & AI
Will automation raise NCRs without asking me?
Connector findings create drafts only, and a person must accept them. Vendor document gaps and failed vendor evaluations raise NCRs directly, because you set those rules.
Can the AI assistant change my data?
No. It is read-only. Questionnaire answers are drafts a person reviews and marks final.
What data does the AI see?
Only your own organisation's records relevant to the question. Records matching a restricted data category are excluded first.
About CompliLens
Who builds CompliLens?
CodeLogicX. CompliLens is a CodeLogicX product, built and run by the same team that runs your demo.
Is CodeLogicX certified?
Yes. CodeLogicX is certified to ISO/IEC 27001:2022 for information security and ISO 9001:2015 for quality management.
Where are you based?
CodeLogicX has offices in Kolkata, India; East Brunswick, New Jersey, USA; and Birmingham, UK.
How do we get in touch?
Book a demo on this site, or write to cx.sales@codelogicx.com.
People & security
How do employees use it?
They see only their tasks, the policies to acknowledge and their training. Acknowledging requires real reading time.
Do notifications arrive by email?
Not yet. Notifications appear in the app and can be delivered to Slack and Jira. Email delivery is planned.
Is phishing simulation included?
Yes. Twelve attack types across email, SMS, voice, QR codes, MFA prompts and physical media, each at five difficulty levels, with a teachable moment after every click.
How are connector credentials stored?
Encrypted with AES-256-GCM, decrypted only for the duration of a sync, and never returned to the browser.