---
title: Compliance Assistant
emoji: 🛡️
colorFrom: indigo
colorTo: purple
sdk: gradio
sdk_version: 4.0.0
app_file: app.py
pinned: true
license: mit
tags:
  - compliance
  - GDPR
  - RGPD
  - ISO27001
  - NIS2
  - cybersecurity
  - GRC
  - risk-management
  - data-protection
  - information-security
---

# 🛡️ Compliance Assistant

**Multi-Framework Compliance Management Platform**

A comprehensive wizard-style interface for managing compliance across RGPD/GDPR, ISO 27001:2022, and NIS2 Directive frameworks.

## 🎯 Features

### 📋 RGPD/GDPR Compliance
- **Complete Checklist**: 20 essential GDPR requirements
- **Gap Analysis**: Identify missing controls and non-compliant areas
- **Risk Assessment**: Evaluate compliance risks (Critical/High/Medium/Low)
- **Action Plan Generator**: Prioritized remediation steps
- **AI Guidance**: Get expert answers to GDPR questions
- **Real-time Scoring**: Visual compliance dashboard

### 🔒 ISO 27001:2022 Compliance
- **Clauses 4-10**: Full implementation checklist
- **Annex A Controls**: All 93 controls from ISO 27001:2022
  - Organizational Controls (A.5)
  - People Controls (A.6)
  - Physical Controls (A.7)
  - Technological Controls (A.8)
- **Statement of Applicability (SoA)**: Auto-generate SoA documents
- **Risk Register Template**: Structured risk management framework
- **Theme Filtering**: Filter controls by category
- **Priority-based Assessment**: Critical/High/Medium prioritization

### 🌐 NIS2 Directive
- **Applicability Checker**: Determine if NIS2 applies to your organization
  - Essential vs Important entities
  - Sector classification
  - Size-based thresholds
- **Requirements Checklist**: 20 core NIS2 requirements
- **Incident Reporting Workflow**: Complete incident notification timeline
  - 24-hour early warning
  - 72-hour detailed report
  - 1-month final report
- **Severity Classification**: Critical/High/Medium/Low incident assessment

### 📊 Compliance Reporting
- **Multi-Framework Reports**: Generate comprehensive compliance reports
- **Export Formats**: Markdown, HTML, JSON
- **Framework Comparison**: Understand overlaps between GDPR, ISO 27001, and NIS2
- **Visual Dashboards**:
  - Gauge charts for overall compliance scores
  - Category breakdown charts
  - Real-time progress tracking

## 🚀 How to Use

### Step 1: RGPD/GDPR Assessment
1. Navigate to the **RGPD/GDPR Compliance** tab
2. Check all implemented requirements from the checklist
3. View your real-time compliance score
4. Generate gap analysis to identify missing controls
5. Review risk assessment for critical gaps
6. Create an action plan with prioritized remediation steps
7. Use AI Guidance for specific compliance questions

### Step 2: ISO 27001 Assessment
1. Go to the **ISO 27001 Compliance** tab
2. Review **Clauses 4-10** and check implemented requirements
3. In **Annex A Controls**, select all applicable controls (93 total)
4. Use theme filters to focus on specific control categories
5. Generate **Statement of Applicability (SoA)** document
6. Review the **Risk Register Template** for risk management
7. Monitor compliance score by theme

### Step 3: NIS2 Assessment
1. Access the **NIS2 Directive** tab
2. Use **Applicability Checker** to verify if NIS2 applies:
   - Select your sector
   - Specify organization size
   - Review applicability assessment
3. Complete the **Requirements Checklist**
4. Study the **Incident Reporting Workflow** for compliance
5. Track compliance score by category

### Step 4: Generate Reports
1. Navigate to the **Compliance Report** tab
2. Select framework scope (RGPD/GDPR, ISO 27001, NIS2, or All)
3. Choose export format (Markdown, HTML, or JSON)
4. Generate comprehensive compliance report
5. Review **Framework Comparison** for integrated compliance approach

## 📈 Compliance Scoring

The platform uses **weighted scoring** based on control severity:
- **Critical**: Weight 4 (e.g., encryption, incident reporting, DPO appointment)
- **High**: Weight 3 (e.g., access controls, training, risk assessment)
- **Medium**: Weight 2 (e.g., documentation, monitoring)
- **Low**: Weight 1 (e.g., minor procedural controls)

**Compliance Levels:**
- 🟢 **75-100%**: Strong compliance - Optimized
- 🟡 **50-74%**: Moderate compliance - Managed/Defined
- 🟠 **25-49%**: Weak compliance - Repeatable
- 🔴 **0-24%**: Critical gaps - Initial/Ad-hoc

## 🎓 Framework Integration

### RGPD ↔ ISO 27001
- ISO 27001 security controls support GDPR requirements
- Annex A.18 (Compliance) addresses GDPR obligations
- Privacy controls (A.5.34) align with GDPR principles

### NIS2 ↔ ISO 27001
- ISO 27001 certification demonstrates NIS2 compliance
- Risk management frameworks overlap
- Incident response requirements align

### RGPD ↔ NIS2
- Both require incident notification (different timelines)
- Supply chain security requirements overlap
- Governance structures are complementary

## 🔧 Technical Details

- **Framework**: Gradio 4.0+ with dark theme
- **Visualizations**: Plotly for interactive charts
- **AI Integration**: Hugging Face Inference API for guidance
- **Data Processing**: Pandas for compliance tracking
- **Export**: Multiple formats (Markdown, HTML, JSON)

## 📚 Resources

### Official Documentation
- [GDPR Official Text](https://gdpr-info.eu/)
- [ISO/IEC 27001:2022](https://www.iso.org/standard/27001)
- [NIS2 Directive (EU) 2022/2555](https://eur-lex.europa.eu/eli/dir/2022/2555/oj)

### Compliance Guides
- [ISO 27001 Complete Guide](https://ayinedjimi-consultants.fr/articles/conformite/iso-27001-guide-complet.html)
- [NIS2 Operational Phase 2026](https://ayinedjimi-consultants.fr/articles/conformite/nis-2-phase-operationnelle-2026.html)
- [RGPD 2026 Security & CNIL](https://ayinedjimi-consultants.fr/articles/conformite/rgpd-2026-securite-cnil.html)

## 👨‍💼 About

**Created by AYI NEDJIMI Consultants**

Senior Offensive Cybersecurity & AI Consultant specializing in:
- Governance, Risk & Compliance (GRC)
- Information Security Management (ISO 27001)
- Data Protection (GDPR/RGPD)
- Cybersecurity Frameworks (NIS2, DORA)
- Security Architecture & Threat Intelligence

### Contact
- 🌐 [Website](https://www.ayinedjimi-consultants.fr)
- 💼 [LinkedIn](https://www.linkedin.com/in/ayi-nedjimi)
- 🐙 [GitHub](https://github.com/AYI-NEDJIMI)
- 🐦 [X/Twitter](https://x.com/AyiNedjimi)

## 📄 License

MIT License - Free to use for compliance assessments

## 🔐 Privacy & Security

- No data is stored on servers
- All assessments are client-side
- Export reports locally for security
- No personally identifiable information required

## 🚨 Disclaimer

This tool provides guidance for compliance assessments but does not constitute legal advice. Consult with legal and compliance professionals for definitive compliance determination and audit preparation.

---

**Supporting Organizations in Achieving Compliance Excellence** 🛡️