Every framework your customers ask for, handled by one team

Workstreet builds, runs and maintains your security and compliance program across the frameworks you need now and the ones you'll need next, from first gap assessment to audit day.

Talk to an expert
Diagram showing the relationship between compliance foundations and competitive advantage.

One program. Every framework.

We map shared controls across frameworks so evidence you collect once works for every audit, and adding a new framework doesn't mean starting over.

Security

SOC 2

Workstreet takes you from gap assessment to a clean SOC 2 Type I or Type II report, and keeps you ready year after year.
Learn more

ISO 27001

Workstreet builds and runs your ISMS and guides you through ISO 27001 certification and surveillance audits.
Learn more

PCI DSS

Workstreet scopes your cardholder data environment and helps you meet PCI DSS requirements for your SAQ or ROC.
Learn more

NIST CSF 2.0

Workstreet assesses your program against NIST CSF 2.0 and builds a roadmap to your target profile.

HITRUST CSF

Workstreet guides you through HITRUST e1, i1 or r2, from readiness to certification.
Learn more

NIS 2

Workstreet helps you assess NIS 2 applicability and implement the required cybersecurity risk-management measures.

ISO 27017

Workstreet extends your ISO 27001 program with the cloud-specific controls ISO 27017 adds.

AWS FTR

Workstreet helps you prepare for and pass the AWS Foundational Technical Review.

MVSP

Workstreet helps you meet the Minimum Viable Secure Product baseline that enterprise buyers ask for.

APRA CPS 234

Workstreet helps you meet APRA CPS 234 information security requirements for Australian financial services customers.

TISAX

Workstreet prepares you for a TISAX assessment so you can work with automotive OEMs and suppliers.

BSI C5

Workstreet helps you prepare for a BSI C5 attestation to meet German cloud security requirements.

Privacy

GDPR

Workstreet builds your GDPR program, from data mapping and DPAs to rights requests and ongoing compliance.
Learn more

HIPAA

Workstreet implements the safeguards the HIPAA Privacy and Security Rules require, so you can handle PHI with confidence.
Learn more

US Data Privacy

Workstreet helps you comply with CCPA/CPRA and other US state privacy laws as new ones take effect.

ISO 27701

Workstreet extends your ISO 27001 ISMS into a privacy information management system and prepares you for certification.

ISO 27018

Workstreet adds ISO 27018 controls for protecting personal data in public cloud services.

Microsoft SSPA

Workstreet helps you meet Microsoft's Supplier Security and Privacy Assurance requirements.

CCPA

Workstreet builds a right-sized CCPA privacy program that is ready for customer security reviews.
Learn more

AI

ISO 42001

Workstreet builds your AI management system and guides you to ISO 42001 certification.
Learn more

EU AI Act

Workstreet helps you classify your AI systems and put the EU AI Act obligations that apply to you in place.

NIST AI RMF

Workstreet aligns your AI governance program with the NIST AI Risk Management Framework.

AIUC-1

Workstreet helps you design, implement and certify your AI agent program to meet AIUC-1.
Learn more

Government

FedRAMP

Workstreet guides you through FedRAMP readiness and authorization to sell to US federal agencies.

FedRAMP 20x

Workstreet helps you pursue authorization through the FedRAMP 20x pathway.

CMMC 2.0

Workstreet prepares defense contractors for CMMC Level 1 and Level 2, from SSP and POA&M to assessment.
Learn more

NIST 800-53

Workstreet implements and documents the NIST 800-53 controls your federal customers require.

NIST 800-171

Workstreet helps you protect CUI and meet NIST 800-171 requirements for DoD and federal contracts.

CJIS

Workstreet helps you meet the CJIS Security Policy so you can serve law enforcement and public safety agencies.

Financial

DORA

Workstreet helps financial entities and their ICT providers meet DORA's digital operational resilience requirements.

OFDSS

Workstreet helps fintech and open finance companies adopt the Open Finance Data Security Standard.

23 NYCRR 500

Workstreet helps you meet NYDFS cybersecurity requirements, from risk assessment to annual certification.

CRI Profile

Workstreet maps your program to the Cyber Risk Institute Profile for financial services.

APRA CPS 230

Workstreet helps you meet APRA CPS 230 operational risk, continuity and third-party requirements.

Other

Cyber Essentials

Workstreet prepares you for Cyber Essentials and Cyber Essentials Plus certification in the UK.

ISO 22301

Workstreet builds your business continuity management system and prepares you for ISO 22301 certification.

CIS v8.1

Workstreet implements the CIS Critical Security Controls v8.1 for your organization's implementation group.

ISO 9001

Workstreet helps you build a quality management system and prepare for ISO 9001 certification.

Essential Eight

Workstreet helps you implement the Australian Essential Eight mitigation strategies and reach your target maturity level.

SOX ITGC

Workstreet designs and documents IT general controls that support SOX compliance.

Custom Frameworks

Workstreet maps your internal or customer-specific security requirements into one managed program.

GUARD

Workstreet's GUARD maturity model takes you from baseline compliance to security as a business differentiator.
Learn more

Don't see your framework?

If a customer, regulator or partner requires it, we can help you meet it.

Talk to an expert

Frameworks FAQs

Common questions about compliance frameworks

It depends on who you sell to and where. Most US SaaS companies start with SOC 2, international buyers often expect ISO 27001, and regulated industries add HIPAA, PCI DSS or CMMC. We'll help you pick based on your deals and roadmap.

Yes. Many frameworks share controls, so we build one program and map it to each framework you need, which reduces duplicate work.

Yes. We work in the platform you already use, including Vanta, and can help you set one up if you don't have one yet.

No. Independent auditors and assessors issue reports and certifications. We get you ready, manage the audit process and work with your auditor through to completion.

Talk to us. We support additional and custom frameworks based on your customer and regulatory requirements.

INSIGHTS & RESOURCES

Learn about the intersection of AI and Security

Case studies, thought leadership and insights into how the best companies build trust.

Case
Aug 6, 2025
6 minutes
min read

How Clay Saves 6-Figures and Accelerates Growth with Workstreet's Expert-Led Security Program

Clay needed to scale security and compliance without slowing down their explosive growth trajectory—moving from $500M to $3.1B valuation in just over a year. Workstreet's expert-led security services on the Vanta platform enabled Clay to achieve SOC 2 readiness in record time while keeping their product and sales teams focused on growth.

BLOG
Jun 14, 2025
14
min read

Vanta's New MCP Server: AI-Powered Security Compliance Ops is Here

Take the first step to integrate AI into your compliance operations with Vanta's Model Context Protocol server. The new MCP server from Vanta is the first step towards agentic trust and security.

BLOG
Jun 9, 2025
11
min read

SOC 2 vs CMMC: Why One Framework Is 5x More Complex

Compare SOC 2 vs CMMC compliance frameworks. Learn why CMMC requires 3-5x more effort, technical depth, and resources than SOC 2 for defense contractors and government suppliers.

BLOG
Jun 9, 2025
7
min read

Security Pill For the Vibe Coder

AI-assisted "vibe coding" boosts speed but demands better safeguards for security and quality.

Ready to add your next framework?

Tell us which frameworks your customers are asking for, and we'll show you the fastest path to get there.

Talk to an expert