Controls mapped to ISO/IEC 42001, UK GDPR, DUAA, SOC 2, Cyber Essentials.
Compliance Mapping maps your controls to ISO/IEC 42001, UK GDPR and DUAA, SOC 2 and Cyber Essentials, with gaps named. We prepare the evidence; certification is issued by accredited bodies.
Regulation and standards are multiplying and each asks about AI in its own way.
Gaps are found by someone else, at the least convenient moment.
of employers have an AI policy at all
CIPD, 2026The benefits of Compliance Mapping.
The people who feel the problem first.
See coverage across frameworks at a glance.
Know where you stand.
Show alignment to the standards your regulators expect.
Three ways teams use Compliance Mapping.
See gaps against ISO/IEC 42001 before an assessment.
Respond to security and AI questionnaires.
Prioritise the controls to build next.
Works best alongside.
Register, data-flow map, control matrix and exception log, generated from the record.
See Evidence Packs Control MatrixWhich controls apply, where, and whether they are working.
See Control Matrix RulesPolicy as enforced rules: approved models by task, data type and risk.
See Rules All of EvidenceA record of what AI saw, produced and who approved it, with reports against the regulations and your policies. Used with Guard.
See the Evidence modulePrices are indicative ranges, confirmed in writing before you commit. Estimates are replaced by your own figures once your health check runs.
How the supporting tools fit together
GenWA Frame brings together your policies, business knowledge and our methodology to guide the work.
The Log records what connected AI saw, produced and who approved it.
The Intelligence Layer is being built to turn those records into trends and answers linked to their source. We agree which tools are available and appropriate for your engagement.
Find out more about the GenWA FrameSee Compliance Mapping working on your business.
Start with a health check. Agree the scope, fees and next steps with us.