Features — Complio Compliance Platform

Risk Management

Structured Risk Assessments

Complio's risk engine guides you through the full ISO 27001 risk assessment process. Identify threats, evaluate likelihood and impact, select treatment options, and track residual risk to completion.

✓

Asset-based and scenario-based risk identification

✓

Configurable likelihood × impact risk matrices

✓

Risk treatment plans with control mapping to Annex A

✓

Risk acceptance workflows with management sign-off

✓

Dynamic risk register with status dashboards

app.compliocore.com · Risk Register

Risk register with inherent and residual scoring

Document Control

Complete Document Management

Never start from a blank page. Complio comes pre-loaded with a comprehensive library of base policy templates aligned to ISO 27001, GDPR, and privacy best practices. Customise, version, and approve in one place.

✓

Pre-built policy library covering all ISO 27001 domains

✓

Version control with full audit trail of changes

✓

Document review and approval workflows

✓

Mandatory read acknowledgement tracking

✓

Contract and supplier agreement storage

✓

AI-assisted drafting via Maximillian for custom policies

app.compliocore.com · Control Library

Complio Control Library with ISO 27001 controls

Preloaded ISO 27001 control library with implementation guidance

Audit Management

End-to-end audit workflow

Generate an audit plan, assign auditors, capture findings, raise corrective actions, and follow through to closure — all tracked in a single, auditable thread.

app.compliocore.com · Overview

Live ISO 27001 readiness dashboard — see exactly what to do next at every stage

📋

1. Plan

Define scope, schedule, and assigned auditors. Generate the audit programme automatically.

🔍

2. Execute

Conduct interviews, review evidence, and record findings using structured checklists.

📝

3. Report

Auto-generate the audit report with findings, non-conformances, and observations.

✅

4. Close

Track corrective actions to closure with deadline reminders and evidence uploads.

Security Awareness Pro

Build a human firewall

Your people are your biggest vulnerability — and your greatest asset. Complio's awareness tools turn every employee into a security champion.

🎣

Phishing Simulations

Send realistic, targeted phishing emails to your workforce. Track click rates, credential submissions, and report rates. Automatically enrol clickers into remedial training.

📱

Social Media Campaigns

Deploy branded security awareness content across your internal channels and social platforms. Keep security top of mind with scheduled micro-learning campaigns.

📧

Employee Communications

Send policy update notifications, compliance reminders, and awareness bulletins. Use Maximillian AI to personalise messages for different audiences.

⏰

Automated Reminders

Assign recurring tasks to employees for evidence collection, acknowledgements, and training. Automated reminders escalate until completed — no more manual chasing.

👥

User Management

Manage roles, departments, and permissions across your entire organisation. Delegate compliance responsibilities and track completion at every level.

📊

Awareness Reporting

Get detailed reports on training completion, phishing susceptibility trends, and campaign effectiveness. Present board-ready metrics with a single click.

ISO 27001 · 27018 · 27019

Built around the ISO 27000 family

Every feature in Complio traces back to a specific ISO control or GDPR article, giving you a direct line of sight from activity to certification.

app.compliocore.com · Asset Register

Complio Asset Register linked to controls and owners

Asset register linked to ISO 27001 controls, risks, and owners

🏅

ISO 27001:2022

Full ISMS implementation support from scope definition to management review. All 93 Annex A controls covered with templates, evidence guidance, and test procedures.

☁️

ISO 27018

Controls for cloud service providers handling PII. Maps natively to GDPR processor obligations and Article 28 Data Processing Agreements.

⚡

ISO 27019

Sector-specific guidance for process control systems in the energy and utility industry. Full template and evidence set provided for certification bodies.

🇪🇺

DPIA workflow, Records of Processing Activities, consent management, data subject request handling, and breach notification within 72 hours — all built in.

See every feature in action

Start your free account today — no credit card required. Upgrade to Pro when you're ready for the full feature set.

Start Free → Compare Plans

One platform.The entire compliance cycle.