- Home
- SOX Compliance Software
- Complies
Complies
What it is
Complies is a web workspace for tracking compliance work in small and midsize companies. Teams can assign obligations to owners, statuses, and due dates, then manage them through a calendar with Slack or email reminders. The service maps controls, gathers evidence from connected systems on a schedule, and links evidence for reuse across frameworks. Listed frameworks include SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS. Connections named for automated collection include AWS, Azure, GitHub, Google Workspace, Okta, Slack, and Jira. Human tasks such as vendor reviews and tabletop writeups remain assigned work with reminders rather than automatic generation. Complies says traffic uses TLS 1.2+, stored data uses AES-256, and staff access is role-based, logged, and protected by mandatory MFA. Customers can export or request deletion of data. Pricing starts at $79/mo (annual), with no free plan. It does not provide legal advice, certification, or guaranteed audit outcomes.
For and against
For
- Tracks owners, statuses, and due dates
- Supports five named frameworks
- Automates evidence collection from integrations
- Exports or deletes customer data
- Role-based access with mandatory MFA
Against
- Paid from $79/mo (annual)
- No free plan
- Human evidence tasks are not generated automatically
- Does not certify customers or guarantee audits
The verdict
Complies organizes compliance obligations, controls, evidence, and readiness information in one web service. It can reduce manual tracking for connected systems, but teams still handle human-generated evidence and audit decisions.
Who it suits
Complies is aimed at companies with 5 to 200 people where compliance is a side responsibility. It suits teams needing obligation, evidence, control, and remediation tracking across listed frameworks.
Plans and prices
Starter
1 active framework · 3 seats · obligation tracker and compliance calendar · policy templates
Read 7 Oct 2026 · complies.ai
Growth
all frameworks cross-mapped · 15 seats · evidence collection · control mapping
Read 7 Oct 2026 · complies.ai
Scale
40 seats · custom frameworks · roles and permissions · SSO (SAML)
Read 7 Oct 2026 · complies.ai
Enterprise
unlimited seats · custom retention · bespoke crosswalks · SLA
Read 7 Oct 2026 · complies.ai
On the record
- Data handling
- Customers can export their data at any time and request deletion, and Complies says it does not sell, share, or train on compliance data.complies.ai · read 7 Oct 2026
- Enterprise security
- A data processing agreement and security reviews are available as part of Enterprise procurement.complies.ai · read 7 Oct 2026
- Evidence collection
- Evidence from connected systems can be collected on a schedule, tied to controls, and reused across frameworks.complies.ai · read 7 Oct 2026
- Frameworks
- The site lists SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS as supported frameworks.complies.ai · read 7 Oct 2026
- Integrations
- The evidence page names AWS, Azure, GitHub, Google Workspace, Okta, Slack, and Jira as connected systems for automated evidence collection.complies.ai · read 7 Oct 2026
- Limitations
- Complies says it assists with compliance workflows but does not provide legal advice, certify customers, or guarantee audit outcomes; the auditor decides.complies.ai · read 7 Oct 2026
- Manual work limit
- Evidence that requires human work, such as vendor reviews or tabletop writeups, is tracked with owners, due dates, and reminders rather than generated automatically.complies.ai · read 7 Oct 2026
- Obligation tracking
- Obligations have named owners, statuses, and due dates, with a calendar and reminders sent through Slack or email.complies.ai · read 7 Oct 2026
- Purpose
- Complies tracks compliance obligations, maps controls, collects evidence, and shows audit readiness for small and midsize teams.complies.ai · read 7 Oct 2026
- Security
- Complies says traffic uses TLS 1.2+, stored data uses AES-256 encryption, and staff access is role-based, logged, and protected by mandatory MFA.complies.ai · read 7 Oct 2026
- Support
- The contact page says Complies replies to inquiries within one business day; Starter includes email support and Scale includes priority support.complies.ai · read 7 Oct 2026
- Target users
- Complies says it is built for companies with 5 to 200 people where compliance is handled as a side responsibility.complies.ai · read 7 Oct 2026
