probo

Most compliance companies are spending hours hunting down the same informations, SOC 2 and ISO 27001 certificates, subprocessor lists, BAAs, terms of service, and so on. To make that process easier, I’ve started putting together a maintained, open-source database of vendor compliance details. Right now, the database includes: - Links to vendor compliance certifications (SOC 2, ISO 27001, HIPAA, etc.) - Legal entity names and headquarters addresses - Subprocessor list URLs (which are often buried) - BAA availability indicators - Security/trust center pages This is an early version, lots of vendors are still missing, but I’m planning to keep expanding and improving it. If you find it useful or have ideas on what would make it better, I’d love your feedback.

Hey, Probo founder here. We are helping several companies achieve compliance using our MVP and are building the open-source software in parallel. You can check our avancement here: https://github.com/getprobo/probo As it is under construction, no testimonial yet regarding the self-hosted part. But happy to help you if we can, feel free to reach out.

Hi HN! We're open-sourcing our collection of SOC 2 controls as the first step in building an open source compliance automation platform. Github: https://github.com/getprobo/probo The current SOC 2 experience: 1. Pay a random $10k+ for compliance software 2. Get hundreds of tasks with no context on what's optional and how much time it will take 3. Realize you need to pay an external auditor 4. End up with checkboxes, not better security Why we think open source matters: - Never speak with a sales guy who doesn’t understand your needs. - You should never pay for templates. - Ship an integration instead of uploading a screenshot. - Don’t get locked. Churn if you don’t like the product Check out the repo, star it, and let us know your thoughts! We’d love feedback from fellow teams tired of compliance-as-a-box-ticking-exercise.