afrexai-compliance-audit

name	afrexai-compliance-audit
description	Run internal compliance audits against major governance and security frameworks, highlighting gaps, risks, and remediation priorities.

Compliance Audit Generator

Run internal compliance audits against major frameworks without hiring a consultant.

What It Does

Generates a structured compliance audit for your organization against any of these frameworks:

• SOC 2 (Type I & II) — Trust Services Criteria
• ISO 27001 — Information Security Management
• GDPR — Data Protection (EU/UK)
• HIPAA — Healthcare Data (US)
• PCI DSS — Payment Card Security
• SOX — Financial Controls (US public companies)
• CCPA/CPRA — California Consumer Privacy

How to Use

Tell the agent which framework you need audited. Provide context about your organization:

• Industry and size
• Current security controls
• Data types you handle
• Existing certifications
• Known gaps or concerns

Example Prompts

• "Run a SOC 2 readiness audit for our 40-person SaaS company"
• "Check our GDPR compliance — we process EU customer data and use AWS"
• "Generate an ISO 27001 gap analysis for our fintech startup"
• "Audit our HIPAA controls — we're a healthtech handling PHI"

Output Format

The agent produces:

1. Executive Summary

• Overall readiness score (0-100%)
• Critical gaps count
• Estimated remediation timeline

2. Control-by-Control Assessment

For each control domain:

• Status: Compliant / Partial / Non-Compliant / Not Assessed