Comp AI: The open-source way to get compliant with SOC 2, ISO 27001, HIPAA and GDPR

Comp AI is an open-source compliance automation platform positioned as an alternative to vendors like Vanta and Drata; it supports SOC 2, ISO 27001, HIPAA, and GDPR. The article outlines three core features—the AI Policy Editor for natural-language policy edits, an Automated Evidence system for scheduled evidence collection, and a Device Agent that checks device compliance for disk encryption, AV, password policy, and screen lock—and notes AGPLv3 licensing, cloud integrations (AWS/GCP/Azure), an API, and options for manual evidence collection where agents cannot be installed.