// Compliance.jsx — frameworks + attestations + report previews const Compliance = () => { const frameworks = [ { name: 'SOC 2 Type II', body: 'Security, Availability, Confidentiality' }, { name: 'ISO 27001:2022', body: 'Information security management' }, { name: 'PCI DSS v4.0', body: 'Cardholder data environments' }, { name: 'HIPAA / HITECH', body: 'Healthcare and PHI workloads' }, { name: 'NIST CSF 2.0', body: 'Govern · Identify · Protect · Detect · Respond · Recover' }, { name: 'NIS2 Directive', body: 'Essential and important EU entities' }, { name: 'DORA', body: 'Financial digital operational resilience' }, { name: 'CMMC 2.0', body: 'US DoD contractor cybersecurity' }, ]; return (

Reporting & compliance

Compliance-ready reports

Every finding is mapped to the frameworks your regulators, customers, and board ask about, with an executive summary, technical detail, and reproducible evidence.

{frameworks.map(f => (
{f.name}
{f.body}
))}
{/* Report mockup */}
Engagement report — ACME Corp
GS-2026-0431 · Q2 retest · 142 pages
Executive summary
Posture score: 88 / 100 (↑ 17 from Q1)
{[ { l: 'Critical', v: 0, c: '#27a644' }, { l: 'High', v: 2, c: '#d98326' }, { l: 'Medium', v: 9, c: '#5e6ad2' }, { l: 'Low', v: 14, c: '#62666d' }, ].map(s => (
{s.v}
{s.l}
))}
{['SOC 2 CC7.1', 'ISO A.8.16', 'PCI DSS 6.3.1', 'NIST CSF DE.CM'].map(t => ( {t} ))}
); }; Object.assign(window, { Compliance });