Compliance Automation Tools

accessiBe — AI-powered web accessibility compliance tool for WCAG 2.1 and ADA, scanning and remediating issues via JS widget.

Airbyte — Open-source data integration platform with 300+ connectors for ELT pipelines with data governance controls.

Anecdotes — Compliance evidence collection platform automating control validation for SOC 2, ISO 27001, and GDPR audits.

Apache NiFi — Open-source data flow platform for routing and transforming data with provenance tracking and access controls.

Aptible — HIPAA-compliant deployment platform handling encryption, access logging, and BAA requirements for healthcare apps.

AudioEye — Automated web accessibility platform with AI-assisted WCAG remediation and human certification services.

Bastion — Secure remote access and privileged session management platform for cloud infrastructure and developer access.

Canvas Medical — HIPAA-compliant EHR API platform with Python-based customization for building clinical workflows.

Carbide — Information security compliance platform guiding startups through SOC 2 with automated policy and evidence tooling.

Census — Reverse ETL platform syncing data warehouse records to CRM and SaaS tools with RBAC and audit logging.

CloudCustodian (Capital One) — CI/CD for Applications tool for developers. Specializes in Cloud Governance.

Clym — GDPR, CCPA, and LGPD privacy compliance platform with consent management, DSR automation, and cookie scanning.

Coalesce — Data transformation platform for Snowflake with column-level lineage and automated documentation generation.

Complianz — WordPress GDPR and cookie compliance plugin with geo-targeted consent banners and automatic cookie scanning.

Compyl — Compliance automation platform mapping technical controls to SOC 2, ISO 27001, and HIPAA with evidence collection.

Consentmanager — Multi-law consent management platform for GDPR, ePrivacy, and CCPA with A/B testing and analytics.

Cookiebot — Automated cookie consent and compliance platform scanning, declaring, and controlling cookies for GDPR and CCPA.

CookieYes — Cookie consent management plugin with automated scanning, geo-based banner display, and compliance reporting.

DataChannel — No-code data integration and reverse ETL platform connecting 100+ sources to warehouses and business apps.

Dataddo — Data pipeline platform connecting marketing and analytics sources to BI tools and warehouses with schema mapping.

HIPAA-compliant healthcare cloud and integration platform providing any-to-any EHR data exchange with built-in compliance tooling.

Delve — Automated vendor security assessment platform generating shareable security profiles from questionnaire responses.

Didomi — Enterprise consent and preference management platform for GDPR, CCPA, and global privacy laws with analytics.

Elliptic — Blockchain analytics and crypto compliance platform screening transactions for AML, sanctions, and illicit activity.

Enzuzo — Privacy compliance platform generating GDPR/CCPA privacy policies, cookie banners, and data mapping documentation.

Estuary Flow — Real-time data integration platform with sub-100ms CDC pipelines and built-in schema evolution for streaming.

Fivetran — Fully managed ELT platform with 300+ automated connectors handling schema drift and data normalization.

Flexpa — FHIR-based health insurance API for retrieving member claims and coverage data under CMS interoperability rules.

Health Gorilla — Healthcare interoperability API connecting to thousands of labs and providers for clinical data exchange.

Hevo Data — No-code ELT pipeline platform with 150+ sources, real-time data loading, and automated schema mapping.

Hightouch — Reverse ETL platform syncing data from warehouses to CRM, marketing, and support tools with RBAC controls.

Integrate.io — ETL/ELT platform for data pipelines with built-in data quality checks and HIPAA-compliant processing options.

iubenda — Privacy policy and cookie consent compliance platform supporting GDPR, CCPA, and LGPD with multi-language output.

German compliance automation platform for GDPR, EU AI Act, ISO 27001 with integrations for SaaS stacks.

Kusari — Open-source software supply chain security platform generating and verifying SBOM provenance metadata.

Laika — Security and compliance management platform automating SOC 2, ISO 27001, and HIPAA evidence collection and audits.

Matia — Data governance and compliance platform mapping personal data flows for GDPR compliance and DPA reporting.

Meltano — Open-source DataOps platform managing Singer taps and targets for ELT pipelines with version-controlled configuration.

mParticle — Customer data platform collecting, governing, and distributing event data with consent enforcement at the SDK level.

Oneleet — Compliance Automation tool for developers. Specializes in security compliance.

OPA (Open Policy Agent) — CI/CD for Applications tool for developers. Specializes in Policy Engine.

Particle Health — Healthcare data network API providing access to longitudinal patient records from 270M US patient records.

Automated Kubernetes optimization platform providing autonomous right-sizing to reduce cloud costs while maintaining availability.

Probo — Compliance Automation tool for developers. Specializes in compliance management.

Redox — Healthcare integration engine translating HL7, FHIR, and EDI messages across EHR and health tech systems.

RegScale — Continuous compliance platform automating NIST, FedRAMP, CMMC, and DISA STIG control evidence collection.

Rivery — Fully managed ELT platform with 200+ connectors, reverse ETL, and data orchestration for warehouse pipelines.

RudderStack — Open-source customer data platform collecting events and routing to warehouses and downstream tools with consent controls.

Scytale — Compliance Automation tool for developers. Specializes in compliance automation.

Segment — Customer data platform routing events from 400+ sources to analytics, CRM, and marketing destinations with consent APIs.

Spanish eSignature and digital onboarding API with legally binding signatures and KYC workflows for EU.

Sourcepoint — Consent management and privacy compliance platform for publishers managing GDPR, TCF 2.0, and CCPA consent.

SPDX — CI/CD for Applications tool for developers. Specializes in License Standard.

Steampipe — CI/CD for Applications tool for developers. Specializes in Cloud Governance & Query.

Stitch — Simple ELT pipeline service extracting data from 100+ SaaS and database sources into data warehouses.

Termly — Privacy compliance platform generating privacy policies, cookie consent banners, and GDPR/CCPA compliance documents.

Thoropass — SOC 2, ISO 27001, and HIPAA compliance automation platform with in-house auditing and continuous readiness monitoring.

Trava — Cyber risk management and compliance platform combining vulnerability scanning with insurance-aligned risk scoring.

Tugboat Logic (OneTrust) — Security compliance automation platform for SOC 2 and ISO 27001 with policy library and audit workflows.

UserWay — AI-powered web accessibility widget and auditing platform for WCAG 2.1, ADA, and EAA compliance.

Weld — No-code ELT data pipeline platform connecting 100+ integrations to warehouses and BI tools with automated syncing.

French electronic signature API with eIDAS-compliant workflows for document signing automation.