Sudory
Menu

Compliance you can prove, every day

Sudory connects to the tools your company already runs, turns what it finds into evidence and maps it to ISO 27001, NIS2, SOC 2 and the standards you adopt.

Book a demoExplore Pulse
HygraphHetzner CloudHaloMigaduMicrosoft 365CalendlyAvePointGitHubAnthropicFly.ioAikido SecurityVercelAmazon Web ServicesGoogle WorkspaceCloudflareResendAtticSupabaseMollieSentryAtlassianSlackMoneybird1PasswordInserve

Evidence mapped toISO 27001ISO 27002SOC 2CIS BenchmarksNIS2DORACRAEAAAI Act

One platform, one product at a time

Every Sudory product does one job on the same catalog of controls and the same evidence log. Pulse is the first.

Product

Pulse

Continuous evidence collection

Connect the SaaS your company runs. Pulse reads from them on a schedule, grades every reading against your policies and files it on the controls of the frameworks you adopt.

Explore Pulse
GitHubISO 27001ISO 27001SlackNIS2NIS2Microsoft 3651PasswordSOC 2SOC 2CloudflareDORADORAAWS

Connect the tools you already run

Read-only access to the SaaS your company works in. No agents, nothing to install.

25 live, 10 coming.

All integrations

Scan the clouds you run on

Servers, firewalls, buckets, databases, backups and DNS, read from the provider on a schedule. What is public, what is encrypted, what is backed up, as evidence on your controls.

How Pulse reads them

Govern the AI your company uses

Which assistants and models are in use, who can reach them and under which policy. Readings from the providers you connect, mapped to the AI Act controls in the catalog.

The AI Act in the catalog
  • AnthropicAnthropic
  • OpenAIOpenAISoon
  • MistralMistralSoon
  • Google GeminiGoogle GeminiSoon
  • Microsoft CopilotMicrosoft CopilotSoon
  • CursorCursorSoon
  • Hugging FaceHugging FaceSoon
  • PerplexityPerplexitySoon

Three steps, then it runs on its own

  1. Connect

    Authorise read-only access to Slack, GitHub, Microsoft 365 and the rest of the catalog.

  2. Collect

    Readings arrive on a schedule, are graded against policies and kept as an event log.

  3. Map

    Every reading lands on the controls of the frameworks you adopt, from the default catalog or your own.

Every framework you adopt, one stream of evidence

The default catalog maps readings to these standards. Adopt the ones that apply, adjust the mapping where your auditor reads a control differently.

Co-founder, Remotion logoMehmet AdemiCo-founder, Remotion
“Sudory is well-versed in enterprise software compliance. Without their expertise, we would have struggled to determine what truly applies to us.”

Questions we get before the first demo

Something else on your mind? Book a demo

Which tools can Sudory connect to?
Slack, GitHub, Microsoft 365, Google Workspace, AWS, Cloudflare, 1Password, Sentry, Vercel and more. The integrations page lists every connector with its status, and new ones are added as customers ask for them.
Does Sudory change anything inside my tools?
No. Sudory asks for read-only scopes or a read-only token wherever the vendor offers one, and never writes back. If a vendor only offers broader access, the integration page says so before you connect.
Where does the evidence go?
Every reading is stored as an event, graded against the policies you adopt and mapped to controls. The event log is the record your auditor reads, so nothing is pruned or rewritten.
Which standards does the default catalog cover?
ISO 27001 and 27002, SOC 2, CIS Benchmarks, NIS2, DORA, the Cyber Resilience Act, the European Accessibility Act and the AI Act. You adopt the frameworks that apply and adjust the mapping where your auditor reads a control differently.
Do I need to install agents?
No. Everything runs through the vendors’ own APIs. There is nothing to deploy on your machines or in your cloud.

See it on your own tools

Thirty minutes. We connect one of your integrations live and show the first readings landing on your controls.

Book a demoOr set it up yourself