Monesize Kompro · Compliance + Trust
Compliance, under your control.
An open-source, self-hosted, framework-agnostic compliance management platform for organizations that need to manage controls, evidence, policies, frameworks, risks, and assessments.
Compliance is an organizational system.
Kompro helps organizations define, manage, assess, and continuously maintain their compliance requirements while retaining ownership and control of their data and infrastructure.
Compliance is more than a framework.
Kompro is not built around a single compliance framework. Organizations can define their own policies, controls, requirements, evidence, assessments, and compliance structures.
Frameworks provide different views over the organization's underlying compliance state.
For example
Build compliance around your organization.
Policies
Define the rules and requirements your organization establishes for itself.
Controls
Manage the security, operational, administrative, and compliance objectives the organization needs to maintain.
Evidence
Associate evidence with controls and assessments while preserving compliance history.
Assessments
Evaluate controls and trace results back to supporting evidence.
Frameworks
Enable standardized frameworks or define your own organizational standards.
Mappings
Connect organizational controls to requirements across multiple frameworks.
One control. Multiple requirements.
A single organizational control can contribute toward requirements across multiple enabled frameworks, allowing organizations to maintain their underlying compliance state without independently duplicating the same implementation for every framework.
Evidence-driven compliance.
Compliance status should be supported by the state of the organization's controls and the evidence behind them.
Organizational documentation
Policies and internal records.
Manual submissions
Evidence supplied by teams.
System integrations
Evidence from connected systems.
Automated checks
Machine-generated evidence where appropriate.
Infrastructure information
Evidence from supported infrastructure sources.
Collect evidence automatically where possible.
Kompro can collect evidence from connected systems through configurable collectors that run on a schedule or on demand.
Collected evidence is recorded with an audit trail.
Collector examples
Turn parts of compliance into machine-evaluable rules.
Kompro supports policy-as-code for compliance requirements that can be evaluated programmatically, while retaining support for human review where automation is not appropriate.
Go beyond compliance checklists.
Risk management
Maintain risk registers, likelihood, impact, treatment plans, and key risk indicators.
Incident management
Record security and operational incidents and track response actions.
IT service management
Track assets, changes, and capacity supporting the compliance program.
Audit programs
Manage audits, nonconformities, and corrective actions.
Keep control of your compliance environment.
Kompro is designed around an organization-owned deployment model, allowing organizations to deploy the platform within infrastructure they control and retain ownership of their application data.
Self-hosted
Deploy within infrastructure controlled by your organization.
Organization-owned data
Maintain control over the application's compliance data.
PostgreSQL
Use PostgreSQL as the primary database within your own infrastructure.
Configurable access control
Define organizational permissions, roles, resource boundaries, and access rules.
Built for organizations managing compliance across teams.
Management
Maintain visibility into the organization's compliance state.
Compliance teams
Manage frameworks, controls, evidence, and assessments.
Security teams
Manage security controls, evidence, risks, and incidents.
Operations
Maintain operational controls and organizational requirements.
Engineering and IT
Connect technical evidence, infrastructure, and controls.
Build your compliance program on your own terms.
Manage compliance frameworks, controls, evidence, policies, risks, and assessments from one structured platform.
Get Started with Kompro