Features
Compliance software features, in plain English
OneClickComply is a compliance management platform for ISO 27001, SOC 2, Cyber Essentials and more. These pages explain what each part of it does, how it works day to day and which plans it belongs to, so you can check the detail before you book a demo.
Book a demoThe platform
How the pieces fit together: one place to run your standards, tasks, evidence, policies and reports.
- Compliance Management SoftwareOneClickComply is compliance management software for IT, security and compliance leads who need one system of record.
- Compliance Automation SoftwareOneClickComply is compliance automation software for IT, security and compliance leads at small and mid-sized organisations.
- GRC SoftwareOneClickComply is GRC software for IT, security and compliance leads at growing organisations.
- Compliance DashboardThe OneClickComply compliance dashboard shows live readiness for each framework you have adopted, alongside overdue tasks and evidence freshness.
Policies, audit and evidence
Write, approve and prove: policy lifecycle, approvals, a record of every change and answers ready for questionnaires.
- Policy Management SoftwareOneClickComply is policy management software for IT, security and compliance leads who need to write, approve, publish and review information security policies in one place.
- Document Approval WorkflowsOneClickComply includes a document approval workflow for IT, security and compliance leads who need proof that each policy was reviewed and approved by a named person.
- Audit LogOneClickComply includes audit trail software for IT, security and compliance leads who need a record of activity in their compliance platform.
- Statement of Applicability GeneratorA statement of applicability (SoA) is the ISO 27001 document that lists each Annex A control, says whether it applies to your organisation, and explains why.
- Organisation BrainOrganisation Brain is the AI knowledge base inside OneClickComply, for compliance and IT leads who answer security questionnaires.
Frameworks and controls
Adopt the standards you need, build your own and reuse one set of controls across all of them.
- Custom Compliance FrameworksOneClickComply is compliance framework software that lets IT, security and compliance leads create a custom compliance framework of their own.
- Cross-Framework Control MappingOneClickComply is compliance software for IT, security and compliance leads who work to more than one standard.
- AI Governance FrameworksOneClickComply AI Governance Frameworks lets you work towards ISO/IEC 42001:2023, the NIST AI RMF 1.0, NIST AI 600-1 and the EU AI Act on the same controls, evidence and policies you already use for ISO 27001.
People and access
Who can do what, who has left and how managed service providers run many companies.
- Role-Based Access ControlOneClickComply includes role-based access control for IT, security and compliance leads who need to decide who can view and who can change compliance data.
- Employee Offboarding ChecklistOneClickComply gives IT, security and compliance leads an employee offboarding checklist they can work through and prove.
- Multi-Tenant Compliance for MSPsOneClickComply multi-tenant compliance is for managed service providers (MSPs) who run compliance for several client companies.
Work and trust
Keep the work moving and show customers your security posture without a stream of emails.
- Compliance Task ManagementOneClickComply includes compliance task management for IT, security and compliance leads who need to track the work behind each framework.
- Compliance Notifications and RemindersOneClickComply sends compliance reminders and alerts for tasks, evidence, policies and vendor reviews, so nothing lapses between audits.
- NDA-Gated Trust CentreThe OneClickComply Trust Centre is a public security page for IT, security and compliance leads who answer customer due diligence.
See these features working on your own setup.
Book a demoMore from the platform
Automation, security operations and expert help sit alongside the features above. Each has its own page.
- OneClickFixFix supported security misconfigurations in one click, with each change logged as evidence.
- Automated EvidenceEvidence collected from 13,000+ tools and attached to the right controls.
- Continuous MonitoringAlerts when a control drifts out of compliance.
- Risk RegisterRisks tied to controls and evidence.
- Vendor Risk ManagementDiscover vendors, send assessments and track supplier risk.
- Questionnaire AutomationAI-drafted answers to customer security questionnaires.
- Trust CentreA public page that shows your security posture.
- IT Asset RegisterA live inventory of devices and cloud assets.
- Incident ManagementLog, investigate and close security incidents.
- Penetration TestingPenetration testing built into the platform.
- Ask an AuditorOn-demand access to real auditors.
- MCP ServerQuery your controls and evidence from Claude, ChatGPT and Cursor.
OneClickComply is a UK-built compliance automation platform. It maps 240+ security and privacy standards to one set of controls, collects evidence from 13,000+ tools, fixes supported misconfigurations in one click and is backed by an in-house audit team.
OneClickComply has three plans, Core, Advanced and Complete, quoted on request. Some features, such as custom roles, Slack and Teams messaging and a custom Trust Centre domain, depend on the plan, and each feature page says where that applies.
Yes. Controls are shared across standards, so evidence you collect once counts towards every standard it applies to. You can also add a custom framework of your own, within the limits of your plan.
Yes. For example, OneClickComply does not discover which AI tools your staff use, and it does not run access review campaigns. Each feature page describes what the feature does and what it does not, so you can check before you buy.
Book a demo and the team will walk you through the platform using your own frameworks and tools. You can also read about each feature on its page above.
See the features on your own stack
Book a 30-minute demo and see how the platform works with the tools and frameworks you already use.