TRY MATPROOF FREE FOR 14 DAYS. €0 TODAY, CANCEL IN ONE CLICK

Compliance for EU founders

Turn compliance into proof.
One evidence base.

One platform for DORA, NIS2, ISO 27001, SOC 2, GDPR and more. Matproof collects the evidence, runs the tests and prepares the audit, so you're always ready. Built and hosted in Europe.

14 days free. Card required, €0 today. Cancel in one click.

Try the live demo
app.matproof.com/complianceLive
3 controls auto-verified

Compliance in real time

Real-time evidence. Automatic tests. One clear view. Stay audit-ready, always.

Compliance

Map one control set across DORA, NIS2, ISO 27001, SOC 2 and GDPR.

Control mapping
MappingsDetailsIssues
KYC verificationHIGHADD +
Data retentionHIGHADD +
Access controlHIGHADD +
Risk profilingMEDADD +
EncryptionHIGHADD +
LoggingMEDADD +

Pentesting

Find and fix vulnerabilities before the auditors ever see them.

Findings
OpenTriagedFixed

Total

12

Open

4

Fixed

8

SQL injectionHIGH
Broken access ctlHIGH
Stored XSSMED
Verbose errorsLOW
Weak TLSMED

Cloud posture

Continuous configuration checks across AWS, Azure and GCP.

Posture overview
AWSAzureGCP

Control performance

S3 public bucketFAIL
IAM MFA enforcedPASS
Key rotationPASS
Open security groupFAIL

AI governance

Discover, classify and register every AI system against the AI Act.

AI inventory
DiscoveredClassifiedRegistered
Microsoft CopilotHigh-risk
ChatGPTLimited
Internal RAGMinimal
ClaudeLimited
GeminiMinimal
HR screening AIHigh-risk
Feature 01

One platform, every framework

Map a control once and reuse it across DORA, NIS2, ISO 27001, SOC 2, GDPR and the EU AI Act. No more duplicated evidence per audit.

Discover how

Unified control library

Access control · A.9Reused ×4
Incident response · DORA Art. 17Reused ×4
Risk assessment · NIS2Reused ×4
Data protection · GDPR Art. 32Reused ×2

AI Governance

Let AI do the compliance busywork

Agents find every AI system, classify it against the EU AI Act, and keep the register. You review and approve. Every step is logged.

New

AI Agent

Deployed

Copilot

Review

Risk Model
⟳
⟳

AI System Inventory

+ AI Agent

AI Usage Policy

Update Policy

One control set. Many audits.

Coverage

Several frameworks, one control set

Stop running parallel audits. Matproof maps your controls once and reuses the evidence across the frameworks it supports, such as DORA, NIS2, ISO 27001 and SOC 2.

DORANIS2ISOSOC2GDPR
Access control
Incident response
Encryption
EU

Sovereignty

Built and hosted in Europe

Your compliance data is stored in the EU. Regulated teams can keep AI processing in the EU too. Every subprocessor is documented, and transfers outside the EU run under Standard Contractual Clauses.

RegionEU
✓Customer data · EU residency
✓AI processing · EU option
✓Subprocessors · documented

The value of unified compliance

See how European teams cut duplicated work and stay audit-ready across their frameworks.

Get the report
3200

Hours saved a year: 336

Saved a year

€20,160

Rough estimate. About 28 hours per person a year of manual compliance work, removed at €60 an hour.

Unify

0+

frameworks mapped to a single control set

Accelerate

Weeks

to audit-ready — not quarters of manual prep

Sovereign

EU

data residency, with an EU option for AI processing

Made for the teams on the hook

Questions people ask before they start

What does Matproof do?

Matproof manages compliance for European regulation. One control set covers DORA, NIS2, ISO 27001, SOC 2, GDPR and the EU AI Act. The software collects evidence, writes policies and prepares the audit.

Does Matproof audit or certify us?

No. Matproof is software, not an audit firm and not a consultancy. An independent accredited body does the audit and issues the certificate.

Which frameworks are covered?

DORA, NIS2, the EU AI Act, ISO 27001, SOC 2, GDPR, the Cyber Resilience Act, CSRD and CSDR. Several frameworks run at once on Professional and Enterprise.

What does it cost?

Starter is €290 a month for teams up to 50 people and one framework. Professional is €690 a month for up to 250 people and up to three frameworks. Yearly billing gives two months free. The app picks your plan from company size and frameworks. Sentinel penetration testing is a separate price ladder and starts at €149 per run.

Where does our data live?

Persistent customer data is stored in the EU, on infrastructure in Germany. TLS 1.3 in transit, AES-256 at rest. The full subprocessor list is on our privacy page.

Is there an API?

Yes. A REST API and a hosted MCP server, so an AI agent can read a compliance programme directly. Both are documented on the developer page.

Get audit-ready in weeks, not quarters.

Unified frameworks

Map once, prove everywhere.

Continuous evidence

Always inspection-ready.

EU-hosted

Sovereign by design.