# Audit-grade compliance for managed tenants.

Every MSP tenant inherits the platform compliance posture. 56 CIS safeguards live. NIST CSF 2.0 functions mapped to ChangeSet templates. Underwriter questionnaires populate from evidence — not from marketing copy.

/ 01

### CIS Controls v8.1

#### 56 safeguards. Live.

IG1 baseline fully implemented. Each safeguard has a current state (green/yellow/red), 90 days of history, and a chain of evidence back to the OODA decisions that produced it.

/ 02

### NIST CSF 2.0

#### Six functions. Mapped.

Govern, Identify, Protect, Detect, Respond, Recover — each function maps to a platform primitive. See /nist-csf for the function-level mapping.

/ 03

### Cyber Insurance

#### Carrier questionnaires automated.

Major carriers (Coalition, At-Bay, Corvus, Beazley) supported. Questionnaire answers populate from live evidence — each answer links to the artifact that supports it. Underwriters get a read-only /underwriter view.

/ 04

### Audit trail

#### Signed, hashed, replayable.

Every action on the platform produces an Ed25519-signed, SHA-256-hashed evidence record. Chain spans every product. Enterprise tenants can export the full chain via the operator API.

## Verify the controls.

Open MSP dashboard to inspect the live compliance map for any tenant.