Comp AI

Open-source, self-hostable compliance automation platform for SOC 2, ISO 27001, HIPAA, and GDPR.

Comp AI is an AGPLv3-licensed compliance platform that companies can inspect, modify, and self-host, positioned as an open-source alternative to Vanta and Drata. It generates policies, connects to infrastructure to pull evidence for control frameworks, and runs a device agent that checks endpoint settings. The company was founded in early 2025 and reports supporting 25-plus frameworks from a single dashboard.