AutoComply

AutoComply (under Compliance) automates the busywork of getting audit-ready. Activate a framework like SOC 2, and Osto maps out the requirements, controls, policies, and tasks you need — then helps you generate policies, assign training, and track everything to completion in one place.

Path: Compliance → AutoComply

​

First-run setup

The first time you open AutoComply, a Guided Setup assistant walks you through enabling compliance for your workspace. It captures a few essentials used throughout your policies and attestations:

1. Enable compliance for your workspace.
2. Organization legal name — exactly as it should appear on contracts and audit documents.
3. Default policy author — chosen from your workspace admins; listed as the author on generated policies.
4. Policy logo — branding for generated documents.
5. Activate your first framework.

Once setup completes, Compliance expands into the full AutoComply console, with sections for Frameworks, Policies, Tasks, Awareness Training, and Settings. A role switcher in the top-right toggles between the Admin console and the Employee self-service view.

​

Frameworks

The Frameworks page lists the compliance standards you can work toward. SOC 2 Type II is available to activate today; others — CCPA, FedRAMP, GDPR, HIPAA, ISO 27001:2022, ISO 42001:2023, and PCI-DSS v4.0 — are on the roadmap and marked Coming soon. Select View compliance status on an active framework to open its requirements: The detail view summarizes the framework’s requirements and controls with how many are completed, partial, or pending, and lets you filter by status or search. Each requirement (mapped to its criterion) lists the controls that satisfy it, and you can add a control where needed.

​

Policies

The Policies page is your library of company policies, pre-mapped to your active framework. Each policy moves through a workflow — Not started → Draft → Needs approval → Approved — and the summary counts show where everything stands. Use Generate Policies to draft them from Osto’s templates (populated with your organization details), filter by framework, and Setup now on any row to work through a single policy. The table shows each policy’s status and framework.

​

Tasks

The Tasks page is your compliance pipeline — the concrete to-dos that move you toward audit-readiness. Tasks are summarized by status (Open, In progress, Done, Failing) and by type (Automated vs. Manual). Automated tasks are checked by Osto from the platform itself (for example, WAF/WAAP protection, DLP policies, endpoint screen lock, TLS certificates); manual tasks are evidence you record yourself (risk assessments, HR documentation, audits). Filter by status, category, or type, and Sync to refresh automated checks.

​

Awareness Training

AutoComply includes a full security awareness training module so you can satisfy the “train your people” controls every framework requires — build programs from a starter pack, assign them to employees, and track completion. It’s a feature in its own right:

​

Settings

Settings holds the organization details captured during setup — used to populate policy templates and attestations — plus your policy logo. Under Organisation Details you can edit your legal name, company domain, industry, country, website, default policy author and approver, and default review frequency. Under Policy Logo, upload the logo that appears on generated documents. These values flow into every policy and report AutoComply produces.