Firmis
United States
What it is
Firmis is a web-based enterprise Governance, Risk, and Compliance platform for managing internal policies and employee attestations. It records policy versions with timestamps and approvals, and tracks who signed each policy, when they signed, and which version they acknowledged. Drafting, approval, publication, and deletion are among the actions logged automatically. Teams can upload .txt, .docx, or .pdf policy files or generate policies from compliance templates. Listed templates cover HIPAA, SOC 2, ISO 27001, GDPR, CCPA, and SOX; they are informational and not legal advice. Firmis describes encryption at rest, TLS encryption in transit, and database-level Row Level Security to isolate organization data. After account closure, data is held for 90 days before deletion, while audit logs and attestations may be retained as legal evidence. Starter is free and covers up to five policies, one framework, and ten team members. Growth is $299 a month, and Scale is $799 a month; both are listed as founding-member pricing locked for 12 months.
For and against
For
- Tracks policy versions, approvals, and attestations
- Automatically logs policy actions
- Supports policy uploads and compliance templates
- Free Starter plan
Against
- Starter is limited to five policies
- Templates are informational, not legal advice
- Account data is held for 90 days after closure
The verdict
Firmis focuses on policy versioning, employee attestations, and an automatic audit trail. Review plan limits and the template disclaimer when deciding whether it fits your organization.
Who it suits
Firmis suits regulated teams and compliance-focused organizations managing internal policies and employee acknowledgments. The free Starter plan is limited to five policies, one framework, and ten team members.
Plans and prices
Starter
up to 5 policies · 1 compliance framework · basic version control · PDF export
Read 15 Oct 2026 · firmis.io
Growth
up to 50 policies · 3 frameworks (SOC 2, HIPAA, ISO 27001) · AI policy editor · BambooHR sync
Read 15 Oct 2026 · firmis.io
Scale
up to 200 policies · 7 frameworks (SOC 2, HIPAA, ISO 27001, GDPR, NIST CSF, PCI-DSS, CCPA) · Growth features · SSO
Read 15 Oct 2026 · firmis.io
On the record
- API
- The Growth plan includes API access, but the public pages do not provide endpoint or SDK documentation.firmis.io · read 15 Oct 2026
- Attestations
- Firmis records which employee signed a policy, when they signed and which version they acknowledged.firmis.io · read 15 Oct 2026
- Audit trail
- Policy actions such as drafting, approval, publication and deletion are logged automatically.firmis.io · read 15 Oct 2026
- Company mission
- Lauland Labs says its mission is to provide enterprise-grade governance tools that are intuitive like a modern text editor and robust like a legal ledger.firmis.io · read 30 Sep 2026
- Compliance templates
- Firmis provides templates for HIPAA, SOC 2, ISO 27001, GDPR, CCPA, and SOX frameworks, with a disclaimer that they are informational and not legal advice.firmis.io · read 30 Sep 2026
- Dashboard
- The administrator overview shows readiness score, pending actions, document status and recent activity.firmis.io · read 15 Oct 2026
- Data processors
- The privacy policy names Supabase for hosting and Stripe for billing as trusted processors.firmis.io · read 15 Oct 2026
- Data retention
- After account closure, data is held for 90 days before deletion, while audit logs and attestations may be retained as legal evidence.firmis.io · read 15 Oct 2026
- Document import
- Documentation says policies can be uploaded as TXT, DOCX or PDF files.firmis.io · read 15 Oct 2026
- Document upload
- The documentation says policies can be uploaded as .txt, .docx, or .pdf files, or generated from a compliance template.firmis.io · read 30 Sep 2026
- Draft visibility
- Members can view published policies but cannot see drafts.firmis.io · read 15 Oct 2026
- External company profile
- Lauland Labs describes itself as a software studio building focused, audit-ready SaaS applications for compliance, housing and health tracking.laulandlabs.com · read 15 Oct 2026
- External compliance focus
- Lauland Labs identifies SOC 2 as a compliance track for its products.laulandlabs.com · read 15 Oct 2026
- External industry scope
- The studio lists SaaS compliance, public housing, renal/dialysis and NDE/QC inspection among its served industries.laulandlabs.com · read 15 Oct 2026
- External operating background
- Lauland Labs says its team has more than ten years of field-operations experience in quality control, NDE reporting and HUD regulatory standards.laulandlabs.com · read 15 Oct 2026
- External portfolio size
- Lauland Labs reports three products shipped across its portfolio.laulandlabs.com · read 15 Oct 2026
- External positioning
- The maker's studio describes Firmis as tamper-proof policy workflows and immutable audit trails for small SaaS teams facing their first compliance review.laulandlabs.com · read 15 Oct 2026
- External product status
- Lauland Labs lists Firmis as live and open for customers.laulandlabs.com · read 15 Oct 2026
