Guides and downloads
In-depth guides, checklists, and resources to help you get compliant — and understand what you're getting into before you start. Practical, plain-language, and built from the work we do every day.
Browse the resources
Start with the program you're trying to understand. Each one connects back to the engagement it supports.
HIPAA
What the law actually requires, who it covers, and what a real program includes.
Read the guideSOC 2
Type I, Type II, and what a report is — and isn't — before a customer asks for one.
Read the guideISO 27001
The ISMS, Annex A, and the certification cycle in plain language.
Read the guideHITRUST
e1, i1, and r2, and how the framework sits on top of HIPAA.
Read the guideGDPR
When a US company is in scope, and what a data-subject request actually takes.
Read the guideTraining
Which course fits which role, and how a group account works.
Read the guide
Let's talk about where you stand
Whether you're starting from scratch or shoring up a program you already have, the first step is a straight conversation about your organization and your risk.