What applies to this client.

Answer a short profile and get a ranked list of compliance frameworks and regulations the organization likely needs to address. Built for MSPs, vCISOs, and auditors who need a defensible starting point in minutes, not days.

This is an indicative tool. It does not constitute legal advice. Verify obligations with qualified counsel before making compliance decisions.

01. Where you operate
Operating regions or data subjects

Select all that apply. State and international rules can apply based on resident data, even without physical presence in that jurisdiction.

US state operations

Showing because US is selected above.

02. Organization

Used for state-specific compliance scoping (CCPA threshold, NY DFS Part 500 tier classification).

Used for compliance scope determination (NIS2 size threshold, NY DFS Class A determination, Texas safe harbor scope).

Public company status
03. Data handled
Sensitive data types stored, processed, or transmitted
04. Customers and contracts
Customer types
Contractual or customer-imposed requirements

Showing because the customer types or industry suggest these may be relevant.

05. Operations

Showing because your industry or selected data types suggest payment cards may be relevant.

Critical infrastructure sector

Showing because the energy industry has sector-specific cybersecurity standards.

Service provider role

Showing because your customers or industry suggest you may serve other organizations.

Based on your answers above, no operational details need to be collected. You can generate the profile now.