Compliance Tools
⚠️ Autional is NOT certified for any compliance framework.
The tools described on this page help you manage compliance workflows within your organization. They are not certifications held by Autional. Achieving certification requires organization-specific policies, controls, and third-party audits. Do not rely on these tools alone for compliance.
Autional includes built-in control libraries and workflow tooling for 10 compliance standards. These tools are designed to help your organization manage compliance processes — they are not certifications themselves.
Built-In Compliance Tooling
| Framework | Built-In Support |
|---|---|
| GDPR | DSAR request management, 16-service erasure orchestration, consent audit trail (13 controls) |
| ISO/IEC 27001:2022 | Annex A access control family (A.5.15–A.8.16) control register (10 controls) |
| SOC 2 Type II | CC6 logical and physical access common criteria controls (10 controls) |
| PCI DSS v4.0.1 | IAM-related controls and evidence management (14 controls) |
| HIPAA Security Rule | IAM-related controls (9 controls) |
| PSD2 SCA | Strong Customer Authentication (SCA) technical requirement controls (8 controls) |
| PIPL (Personal Information Protection Law) | Notice-consent and related IAM provision controls (10 controls) |
| Dengbao 2.0 Level 3 | Identity authentication / access control / security audit controls (20 controls) |
| NIST SP 800-63B v4 | Authenticator and verifier requirement controls (AAL1–AAL3) (17 controls) |
| Minor Protection Framework | COPPA / PIPL minor protection / GDPR Art.8 / UK Code consolidated controls (12 controls) |
Key Technical Features
Hash-Chain Audit Logs
Every authentication event is recorded in a Merkle hash chain. The integrity of the chain can be cryptographically verified, providing tamper-proof evidence for auditors.
Data Retention
Retention policies are configurable per data type, with scheduled archival and cleanup jobs; audit logs can be retained indefinitely.
Data Classification
Data classification and grading management: label sensitivity levels by data category, with level values customizable per organization.