One place for every standard, framework and regulation we work with.
Find the requirement you are working towards — each links to the service that implements, assesses or assures it.
Compliance & assurance by domain.
ISO standards
- ISO/IEC 27001 — Information Security
- ISO/IEC 27701 — Privacy Information
- ISO 9001 — Quality
- Integrated management systems
Attestation readiness
- SOC 2 Type II readiness
- Trust Services Criteria mapping
- CMMI process maturity
Laws & privacy management
- DPDPA 2023
- GDPR
- DPIA
- PIMS (ISO/IEC 27701)
- CCPA · HIPAA alignment
Frameworks & practices
- NIST Cybersecurity Framework
- OWASP Top 10 / ASVS / MASVS
- CERT-In guidelines
- VAPT · 3PAA · DevSecOps
Standards & legislation
- WCAG 2.1 / 2.2
- Section 508
- ADA
- VPAT® / ACR
Responsible AI & assurance
- AI guardrail & safety evaluation
- Bias, fairness & privacy testing
- Independent AI assurance (VVnT POC Assurance Certificate)
Evaluation & testing frameworks
- LLM & agent evaluation
- Prompt-injection & guardrail testing
- Model drift & bias testing
- Conversational AI / chatbot testing
Proof pointClients get a practical path to audit readiness: gap assessment, testing, fixes, evidence preparation and certification coordination, informed by IAAP, IAPP and DSCI practice areas, and coordinated with certification bodies such as TÜV, TNV and DNV where an external audit is required.
The words we use — and what they mean.
Precise language matters in assurance. This is how we use these terms across our site, proposals and reports.
- Assessment
- An evaluation of a system, product or organization against defined criteria (for example a gap assessment, VAPT or accessibility conformance assessment). It produces findings, not a certificate.
- Audit
- A systematic, independent and documented examination against an audit standard or criteria — for example an internal audit of your ISMS performed by VVnT SeQuor.
- Readiness
- Preparing your organization for an external certification audit or attestation. We implement and prepare; we do not certify.
- Certification
- Formal certification against a scheme such as ISO/IEC 27001, issued only by an independent, accredited certification body. VVnT SeQuor is not a certification body.
- Attestation
- An independent report such as SOC 2, issued by a licensed CPA firm. We prepare you for it.
- Assurance certificate
- A VVnT POC Assurance Certificate is a VVnT-issued artifact recording the scope, criteria, evidence and outcome of our independent assessment of an AI deployment or product (via VVnT Accreditation). It is not an ISO certification or an accreditation.
- Accreditation
- In conformity-assessment, accreditation is granted to certification bodies and labs by national accreditation bodies. “VVnT Accreditation” is our product name for AI assurance and is not an accreditation-body designation.
- Conformance report
- A statement of how a product conforms to a standard such as WCAG — e.g. an Accessibility Conformance Report (ACR) on the VPAT® template. A VPAT is a reporting format, not a certification.
Not sure which requirement applies to you?
Tell us your markets, customers and upcoming audits — we'll map the requirements and recommend where to start.