Get audit-ready for SOC 2 without the spreadsheet
AlignHQ connects to your cloud, code and identity tools, collects evidence on a schedule, and shows what an auditor will ask for next.
One workspace for your compliance program
Controls, evidence, policies and gaps in one place, kept current by checks that run against the tools you already use.
Continuous evidence collection
Connect AWS, Azure, Google Cloud, GitHub, Google Workspace and more. AlignHQ pulls configuration and access evidence on a schedule and records the source and time of every item.
Policy templates
Start from templates for information security, access control, incident response, vendor management, AI governance and the rest of a typical policy set. Track owners, versions and staff acknowledgment.
Control monitoring
Every control shows its status, owner and evidence freshness. Failing checks become findings and tasks, so each gap has an owner and a due date.
Trust center
Publish a security page for prospects and customers. Share private documents behind an access request and keep internal evidence out of view.
Frameworks: SOC 2, ISO 27001, ISO 42001, EU AI Act, NIST AI RMF
One internal control can map to requirements in several frameworks, so evidence you collect once counts toward each of them.
Pricing
Starter
For teams preparing for their first SOC 2 or ISO 27001 audit.
- SOC 2, ISO 27001, ISO 42001, EU AI Act and NIST AI RMF
- Cloud, code and identity integrations
- Policy templates
- Control monitoring and tasks
- Trust center
Frequently asked questions
Which frameworks does AlignHQ cover?
SOC 2, ISO 27001, ISO 42001, the EU AI Act and the NIST AI Risk Management Framework. SOC 2 and ISO 27001 have the deepest coverage. Controls map across frameworks, so one piece of evidence can support several requirements.
Which integrations are available?
AWS, Azure, Google Cloud, Cloudflare, GitHub, Google Workspace, JumpCloud, Slack, Linear, Jira, Tailscale, Bitwarden, Brex and the OpenAI and Anthropic admin APIs. AWS connects through a read-only role that you create in your own account.
Does AlignHQ replace our auditor?
No. AlignHQ gets you ready for an audit and keeps your program current between audits. An independent CPA firm still performs a SOC 2 examination, and an accredited certification body still issues an ISO certificate. AlignHQ does not give legal advice.
How is our data stored?
Application data is stored in Postgres hosted on Neon, and evidence files in Cloudflare R2. Both providers encrypt that data at rest. AlignHQ encrypts integration credentials itself, with a separate key for each workspace. Access is scoped to the workspaces you are a member of.
See where your program stands today
Connect one cloud account and get a list of failing controls and missing evidence, with an owner for each fix once you assign one.