Multi-framework compliance
ISO 27001, NIS2, GDPR, HDS, DORA, SOC 2, PCI-DSS, NIST CSF — Galea centralises your compliance across all regulatory and normative frameworks.
Your compliance status in 5 minutes
No more weeks spent filling in control spreadsheets. Upload your documents, TARS analyses them and pre-fills your frameworks: all you have to do is validate.
- Upload your documentsSecurity policy, procedures, audit reports, architecture
- TARS pre-fills the controlsimplementation level and supporting evidence
- You validate, Galea tracksgap to target and action plan over time
A single dashboard for all your frameworks
Galea calculates your compliance rate in real time for each activated framework.
Activate your frameworks
Select the standards applicable to your organisation. Each framework is pre-loaded with its controls.
Assess each control
For each control, indicate the implementation level (Absent, Partial, In progress, Compliant) with supporting evidence.
Manage continuously
Real-time dashboard, corrective action plans, audit reports ready to submit to your auditors.
Information security management system
The international reference standard for ISMS. Galea pre-loads the 93 Annex A controls and guides your teams through each domain.
Automatically generated, exportable as PDF and XLSX
Compliance rate by ISO chapter with identified gaps
Attach supporting documents to each control
Network and Information Systems security directive
Mandatory since October 2024 for essential and important entities in Europe. Galea guides you through the 10 required cybersecurity measures.
Galea automatically determines your NIS2 category
NIS2-compliant 24h/72h notification workflow
TPRM assessment of critical NIS2 suppliers
GDPR, HDS, DORA, SOC 2, PCI-DSS and NIST CSF
Personal data protection
Processing register, DPIA (Data Protection Impact Assessment), data subject rights management, data breaches. Galea supports your DPO in their daily mission.
Health Data Hosting
Mandatory certification for hosting health data. Galea supports healthcare establishments and e-health players in their certification process.
Digital operational resilience
Digital Operational Resilience Act — mandatory for the financial sector since January 2025. Resilience testing, ICT risk management, incident reporting.
Trust audit for SaaS and cloud providers
Service Organization Control 2 — the AICPA audit framework built on the 5 Trust Services Criteria: security, availability, confidentiality, processing integrity and privacy. Galea maps your ISO 27001 controls to the SOC 2 TSC automatically.
Payment card data security
Payment Card Industry Data Security Standard v4.0 — mandatory for anyone who processes, stores or transmits payment card data. Galea covers the 12 PCI-DSS requirements and the SAQ matching your merchant level.
Cybersecurity Framework — a maturity assessment reference
The NIST v2.0 framework, built around 6 functions: Govern, Identify, Protect, Detect, Respond, Recover. Galea scores your maturity per function and proposes a improvement plan aligned with the target you set.
Audit your compliance for free
30-minute demo with a Galea expert, no commitment.
Ready to secure your organisation?
Join the companies that trust Galea to drive their cyber-résilience. 30-minute demo.
Already a customer? Go to the platform