Evidence that collects itself.
Connect cloud, code, identity, HR, device and IoT systems. CompliLens checks them every day against 132 rules mapped to real controls, and drafts what needs fixing for a person to review.
Pick a connector to see what it checks
From signal to fix, with a person in the loop
Secure links to your other tools so CompliLens can check settings and gather evidence by itself.
How it works- Open Integrations → Connectors → Add Connector. Choose a tool from the list: GitHub, GitLab, Bitbucket, AWS, Azure, Google Cloud, IBM Cloud, Oracle Cloud, DigitalOcean, Tencent Cloud, Sify Cloud, BambooHR, Okta, Microsoft Intune, Particle, AWS IoT SiteWise, plus Jira and Slack for sending messages out.
- Enter the credentials, which are stored encrypted. Click Test connection.
- CompliLens syncs daily (or on demand) and runs more than 130 rules. Examples: "Is two-factor required?", "Are storage buckets private?", "Is branch protection on?", "Did a cold-storage sensor go out of range?"
- Results appear in the Evidence Feed as compliant or non-compliant findings, each tied to real ISO 27001 / SOC 2 controls.
- Serious findings become drafts in the NCR Feed (control gaps) or Incident Feed (real events like a temperature excursion). A person reviews and clicks Accept, Dismiss or Snooze. Nothing is created without a human decision.
- The Rules tab lets you switch rules on or off and decide which ones create drafts.
- The Overview tab highlights unhealthy connectors, open findings by source, recent findings and pending drafts, and it scales to large numbers of connectors.
Okta shows three admin accounts without two-factor. A draft NCR appears; the security manager accepts it, assigns an owner, and the fix is tracked to completion.
Every rule names the control it proves
| Rule | Source | Severity | Controls | Escalates to |
|---|---|---|---|---|
| AWS-003 S3 buckets block public access | AWS | Critical | ISO 8.3 CC6.1 | NCR |
| GH-001 Branch protection on default branch | GitHub | High | ISO 8.32 CC8.1 | NCR |
| OKTA-002 MFA for all active users | Okta | High | ISO 5.17 | NCR |
| PRT-001 Cold storage temperature excursion | Particle | Critical | ISO 9001 8.7 | Incident |
| INT-004 Antivirus enabled | Intune | Medium | ISO 8.7 | Queue only |
Connectors use real platform APIs. Not every rule in the catalog has a live check for every connector yet.
Temperature excursion
9.4°C against an 8°C limit drafts an incident mapped to ISO 9001 8.7.
Vibration out of range
5.1 mm/s against a 4.5 mm/s ceiling, plus calibration-overdue checks.
Jira and Slack
Accepted NCRs open Jira issues. Evidence requests post to Slack.