CompStack
What we cover13 standards · 3 categories

Every standard you answer to, already loaded.

Framework standards, country conformity schemes and sector packs, all held as structured requirements rather than documents. When one is amended you get a diff of what changed, and we work the change through your system for you.

Book a working sessionSee what we run
standards library13 published
ISOISO 9001:2015
Quality management systems. Requirements.
29 req.
ISOISO 22301:2019
Security and resilience. Business continuity management systems. Requirements.
41 req.
AICPASOC 2 (TSC 2017, rev. 2022)
Trust services criteria for security, availability, processing integrity, confidentiality and privacy.
61 req.
ISOISO/IEC 27001:2022
Information security, cybersecurity and privacy protection. Information security management systems. Requirements.
16 req.
Search by clause, intent, evidence type…
All familiesOfficial onlyFree trial
Core

Framework standards

The bedrock most certified organizations live by. Quality, environment, safety, security, business continuity.

ISOInternational
ISO 9001:2015
Quality management systems. Requirements.
29 clauses29 requirements
ISOInternational
ISO 22301:2019
Security and resilience. Business continuity management systems. Requirements.
55 clauses41 requirements
AICPAInternational
SOC 2 (TSC 2017, rev. 2022)
Trust services criteria for security, availability, processing integrity, confidentiality and privacy.
25 clauses61 requirements
ISOInternational
ISO/IEC 27001:2022
Information security, cybersecurity and privacy protection. Information security management systems. Requirements.
15 clauses16 requirements
ISOInternational
ISO 45001:2018
Occupational health and safety management systems. Requirements with guidance for use.
34 clauses16 requirements
ISOInternational
ISO 14001:2015
Environmental management systems. Requirements with guidance for use.
31 clauses16 requirements
Country

Regional & country packs

Local conformity schemes mapped against international standards. Cross-mapped at the requirement level so you don't double-document.

KEBSEast Africa
KS EAS 153:2018
Packaged drinking water. Specification.
15 clauses23 requirements
KEBSKenya
PVOC (Kenya)
Pre-export verification of conformity to standards, for imports into Kenya.
21 clauses12 requirements
SONNigeria
SONCAP
Standards Organisation of Nigeria conformity assessment programme.
22 clauses13 requirements
Sector

Industry schemes

Sector-specific packs, food safety, pharma, social accountability, that drop into your existing standards.

ISOInternational
ISO 22000:2018
Food safety management systems. Requirements for any organization in the food chain.
61 clauses40 requirements
FSSCInternational
FSSC 22000 v6
Food safety system certification scheme, version 6.
28 clauses21 requirements
ISOInternational
ISO 13485:2016
Medical devices. Quality management systems. Requirements for regulatory purposes.
89 clauses34 requirements
ISOInternational
ISO/IEC 17025:2017
General requirements for the competence of testing and calibration laboratories.
56 clauses29 requirements
Upgrade safety

Versions, diffs, and a publisher chain you can trust.

Modules are versioned semver-style. Upgrades show added / changed / removed requirements before they touch your live data.

iso-9001-2015@2.4.0 → 2.5.0
42 changes
Added
+11
  • 8.2.4 · Customer property, visit logs
  • 9.1.3 · Trend analysis on complaints
  • 10.3 · Continual improvement evidence
Changed
+26
  • 7.5.3 · Now requires retention metadata
  • 8.5.1 · Tightens production change control
  • 9.2 · Internal audit competence rules
3 publishers contributedReviewed · signed · staged
Trust chain
  • SHA-256 signature on every module artifact.
  • Publisher identity verified at registration.
  • Optional trust policy: only "official" modules.
  • Rollback to a previous version in one click.
Entitlements
  • Per-organization licenses with expiry.
  • 30-day trials, paid packs, free packs.
  • Usage stays inside the tenant, never sent home.
Publisher SDK

Build your own modules, or sell them.

The CSDK CLI ships with every install. Fork an existing module, change a clause, push a new version. Or publish a paid pack.

~/modules/iso-9001 · csdk v3.0terminal
$ csdk init iso-9001
✓ scaffolded manifest.json
✓ scaffolded clauses/

$ csdk validate
✓ 29 requirements typed
✓ 217 cross-mappings checked
✓ schema · v3.0 OK

$ csdk build
✓ packed iso-9001-2.5.0.module
✓ sha256 4e:9b:c2:…:7d

$ csdk publish --org your-org
→ submitted for review
  https://compstack.io/p/your-org/iso-9001
What you get
  • Manifest schema + content schema.
  • Validators for cross-mappings, evidence types.
  • Diff & preview before push.
  • Sign & publish to your private namespace.
Need a module that doesn't exist yet?

We co-author modules with consultancies and certification bodies.

Bring the standard text and the audit experience. We bring the schema, validation tooling, and the marketplace.

Become a publisherRequest a module