Complies
Complies is a web-based workspace for tracking compliance obligations, mapping controls, collecting evidence, and viewing audit readiness.
What Complies is
Complies is a web-based workspace for tracking compliance obligations, mapping controls, collecting evidence, and viewing audit readiness. It is aimed at companies with 5 to 200 people where compliance is handled alongside other responsibilities. Supported frameworks include SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS. Obligations have owners, statuses, and due dates; a calendar and Slack or email reminders help teams follow deadlines. Evidence from connected systems can be gathered on a schedule, linked to controls, and reused across frameworks. Named connections include AWS, Azure, GitHub, Google Workspace, Okta, Slack, and Jira. Tasks requiring human work, such as vendor reviews or tabletop writeups, are tracked with owners and deadlines rather than generated automatically. Complies says traffic uses TLS 1.2+, stored data uses AES-256, and staff access is role-based, logged, and protected by mandatory MFA. Customers can export data or request deletion. Paid plans start at $79/mo (annual); there is no free plan. The service supports workflows but does not provide legal advice, certification, or guaranteed audit outcomes.
Good
- Tracks obligations with owners, statuses, and due dates.
- Lists SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS.
- Evidence can be collected on a schedule from connected systems.
- Customers can export data and request deletion.
- Mandatory MFA protects staff access.
Watch out
- There is no free plan.
- Human-dependent evidence still needs to be completed by owners.
- Complies does not provide legal advice or certify customers.
- Audit outcomes are not guaranteed.
Who it suits
Complies suits small and midsize teams that need a shared way to assign compliance work and collect evidence across frameworks. It is especially relevant where compliance is a side responsibility rather than a dedicated function.
Verdict
Complies brings obligation tracking, evidence collection, and control mapping into one web workspace. It can organize audit preparation, but customers remain responsible for human tasks and the auditor decides the outcome.
Plans and prices
From Complies's own pricing page, checked 7 Oct 2001.
| Plan | Price | What it gives you |
|---|---|---|
| Starter | $564 a year | 1 active framework · 3 seats · obligation tracker and compliance calendar · policy templates · email support · $47 /MO billed yearly · $564 once a year |
| Growth | $1,428 a year | all frameworks cross-mapped · 15 seats · evidence collection · control mapping · readiness score · reports · risk register · $119 /MO billed yearly · $1,428 once a year |
| Scale | $3,588 a year | 40 seats · custom frameworks · roles and permissions · SSO (SAML) · audit-ready export packs · priority support · $299 /MO billed yearly · $3,588 once a year |
| Enterprise | $5,988 a year | unlimited seats · custom retention · bespoke crosswalks · SLA · dedicated onboarding · DPA · invoicing and procurement support · $499 /MO billed yearly · $5,988 once a year |
The facts
Each one read from Complies's own pages, with the date it was checked.
What it does
- Data handling
- Customers can export their data at any time and request deletion, and Complies says it does not sell, share, or train on compliance data.checked 7 Oct 2001
- Enterprise security
- A data processing agreement and security reviews are available as part of Enterprise procurement.checked 7 Oct 2001
- Evidence collection
- Evidence from connected systems can be collected on a schedule, tied to controls, and reused across frameworks.checked 7 Oct 2001
- Frameworks
- The site lists SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS as supported frameworks.checked 7 Oct 2001
- Integrations
- The evidence page names AWS, Azure, GitHub, Google Workspace, Okta, Slack, and Jira as connected systems for automated evidence collection.checked 7 Oct 2001
- Limitations
- Complies says it assists with compliance workflows but does not provide legal advice, certify customers, or guarantee audit outcomes; the auditor decides.checked 7 Oct 2001
- Manual work limit
- Evidence that requires human work, such as vendor reviews or tabletop writeups, is tracked with owners, due dates, and reminders rather than generated automatically.checked 7 Oct 2001
- Obligation tracking
- Obligations have named owners, statuses, and due dates, with a calendar and reminders sent through Slack or email.checked 7 Oct 2001
- Purpose
- Complies tracks compliance obligations, maps controls, collects evidence, and shows audit readiness for small and midsize teams.checked 7 Oct 2001
- Security
- Complies says traffic uses TLS 1.2+, stored data uses AES-256 encryption, and staff access is role-based, logged, and protected by mandatory MFA.checked 7 Oct 2001
- Support
- The contact page says Complies replies to inquiries within one business day; Starter includes email support and Scale includes priority support.checked 7 Oct 2001
- Target users
- Complies says it is built for companies with 5 to 200 people where compliance is handled as a side responsibility.checked 7 Oct 2001
Alternatives to Complies
- 1
VComply
AndroidiOSWebAPI7.7From $120 a month - 2
Diligent Audit
AndroidiOSWebAPI7.5From $416.67 a month - 3
FloQast
WebAPImacOSWindows7.0From $999 a month - 4
SmartSuite Enterprise Service Desk
AndroidiOSWebAPI6.9From $15 a month - 5
Workiva Audit Management
AndroidiOSWebAPI6.8 - 6
ControlHatch
Free planWeb6.7Free plan