Programs

A program is a single compliance effort against one framework, for example SOC 2 Type II 2026 or ISO 27001 recertification. Controls, evidence, policies, tasks and reports all belong to a program.

Create a program

Go to Programs > New program, pick a framework template and complete the planning wizard. See Launch your first program for a walkthrough.

The program dashboard

• Readiness score and how it has moved.
• Milestones and what blocks the next one.
• Control progress by status and owner.
• Stale evidence that needs refreshing.

Projects

Not everything is a full program. Projects handle program-lite work such as ad-hoc remediation, regulator or customer inquiries, vendor actions and incident response. Every workspace has a General project. Linking a project to a control makes it visible to auditors.

Multiple frameworks

Run one program per framework and let control mapping share work between them, so one piece of evidence can satisfy SOC 2 and ISO 27001 at once.