Custom Compliance Frameworks
Build a custom compliance framework and track it beside ISO 27001 and SOC 2
OneClickComply is compliance framework software that lets IT, security and compliance leads create a custom compliance framework of their own. Add a framework, add controls with a reference, title, category, description and evidence guidance, then opt your organisation in to track it alongside the standards you already follow.
Why bespoke requirements end up in spreadsheets
Not every obligation arrives as a published standard. Customer security schedules, internal policies, sector rules and board-approved control sets often live in spreadsheets, away from the evidence and tasks that prove them. A custom compliance framework brings those requirements into the same platform as your certified standards, so they are tracked with the same discipline instead of being chased by hand before each review.
How custom frameworks work in OneClickComply
Add custom framework
Use Add Framework on the Standards page to create a bespoke compliance framework. You add its controls afterwards and then opt your organisation in to it.
Controls written your way
Each control you add with Add control has a reference, a title, a category, a description and evidence guidance, so your team knows what good looks like.
Evidence guidance on every control
The evidence guidance field tells whoever owns a control what to collect, which keeps your own requirements as clear as a published standard.
Opt in when you are ready
Creating a framework does not switch it on for your organisation. You add its controls first and opt your organisation in afterwards.
Sits beside your other standards
Once your organisation has opted in, a bespoke control set is managed in the same platform as the standards you already follow, such as ISO 27001, SOC 2 or Cyber Essentials.
Limits set by your plan
The number of custom frameworks and custom controls you can create is capped, and the caps depend on plan. Availability depends on plan, so check yours before you plan a large build.
See Custom Compliance Frameworks working on your own setup.
Book a demoWhat a custom framework gives you
Customer, sector and internal requirements tracked in the same place as certified standards
Clear evidence guidance written into each control, not held in someone's head
Control references and categories you choose, so the framework matches your own vocabulary
A framework you opt in to only when its controls are ready
Controls from other standards shown as cross-mapped where mappings exist
FAQ
Custom Compliance Frameworks: common questions
Frameworks Custom Compliance Frameworks supports
Read what each framework asks for and how OneClickComply covers it.
- ISO 27001
- SOC 2
- Cyber Essentials
- EU GDPR
- NIS2
Related products and guides
Read more about Custom Compliance Frameworks and the parts of the platform it works with.
- Cross-framework control mappingHow one control can support several standards.
- Compliance management softwareThe wider platform that frameworks sit inside.
- Statement of ApplicabilityRecord which controls apply and why, for ISO 27001.
- Evidence collectionCollect the evidence each control needs.
- Risk RegisterLink risks to the controls that treat them.
- Compliance standardsBrowse the published standards you can follow alongside your own.
See Custom Compliance Frameworks on your own stack
Book a 30-minute demo and see how Custom Compliance Frameworks works with the tools and frameworks you already have.