Hesk compliance, automated for SOC 2, ISO 27001 & GDPR
OneClickComply connects to Hesk through the OneClickComply Companion, our AI browser agent, and checks how it is configured against SOC 2, ISO 27001 and GDPR. Checks include: record access scoped by role, bulk export restricted to admins and MFA enforced for all users. Every result is stored as audit evidence, so there are no screenshots to collect.
SOC 2 · ISO 27001 · GDPR
- Set up in minutes
- No API keys or extra logins
- Evidence collected continuously
- Built for UK teams
Continuous control checks
What OneClickComply checks in Hesk
Your CRM is one of the biggest stores of personal data in the business. Role-based access and export controls are what auditors look for.
Record access scoped by role
Bulk export restricted to admins
MFA enforced for all users
See it work
Watch OneClickComply check Hesk
The Companion, our AI browser agent, opens Hesk with the access you already have, reads the settings that matter, tests them against your controls and files the result as evidence.
Hesk admin
Security settings
- Record access scoped by role
- Bulk export restricted to admins
- MFA enforced for all users
OneClickComply Companion
- Opened Hesk with your existing session
- Reading users, roles and permissions, export controls
- Record access scoped by role
- Bulk export restricted to adminsGap found, fix it in one click with OneClickFix
- MFA enforced for all users
Evidence saved and mapped
Hesk evidence, collected automatically
The Hesk evidence auditors ask for, captured on a schedule and stored against the right requirement. No more screenshots the week before the audit.
- Users
- Roles and permissions
- Export controls
- MFA status
- Audit log
Mapped to your frameworks
Every Hesk check is mapped to the controls it satisfies, so one piece of evidence counts everywhere it applies.
- SOC 2 CC6.1, C1.1
- ISO 27001 A.5.15, A.8.3
- UK/EU GDPR Art. 5, 32
Set up in minutes
How to connect Hesk to OneClickComply
- 1
Add the browser extension
Install the OneClickComply Companion, our AI browser agent. There's no API key to create and nothing to change in your stack.
- 2
Open Hesk as normal
The Companion reads Hesk's admin settings that matter for compliance, using the access you already have. No extra logins.
- 3
Fix it in one click
Settings are checked against your controls and the evidence is stored. When something fails, OneClickFix can correct it in Hesk for you, with the change logged as evidence.
See Hesk checked live against your controls.
Hesk security & compliance FAQs
How does OneClickComply connect to Hesk?
Through the OneClickComply Companion, our AI browser agent. It reads Hesk's admin settings using the access you already have, so there's no API key to create and no extra login. When a setting fails a check, OneClickFix can correct it for you.
What does OneClickComply check in Hesk?
Its checks for Hesk include: record access scoped by role, bulk export restricted to admins and MFA enforced for all users. Each result is stored as evidence against the requirement it satisfies.
Is Hesk GDPR compliant?
No tool is GDPR compliant on its own. It comes down to how your organisation configures and uses Hesk: who can access personal data, how it's shared, how long it's kept and whether you've got a data processing agreement in place. OneClickComply checks those settings in Hesk and keeps the evidence for you.
What Hesk evidence do auditors ask for?
For CRM and sales tools, auditors usually want users, roles and permissions, export controls and MFA status. OneClickComply captures it on a schedule, so it's ready before they ask.
Which frameworks does the Hesk integration cover?
Hesk evidence is mapped to SOC 2, ISO 27001 and GDPR. Cyber Essentials and your other frameworks are managed in the same platform.
Also connects with
Other CRM and sales tools we connect to
Using more than one CRM and sales tool? OneClickComply connects to these too, so your evidence stays in one place.
Get Hesk audit-ready this week
OneClickComply connects to Hesk and the rest of your stack, collects the evidence and tells you exactly what to fix. If it has a web admin console, we can work with it.
Logos provided by Logo.dev. All product names and logos are trademarks of their respective owners.