A framework is the backbone of your compliance program in ISO Mate, defining the standard your organization commits to. You can set one up in two ways: scaffold a complete framework from a built-in template in your chosen language, or start from a blank framework and add everything yourself. Frameworks and every related feature live in the sidebar Compliance group.
Two ways to create a framework
Open Compliance > Frameworks in the sidebar, then use the Create button. When AI creation is enabled for your account, the button splits into Create and Create with AI. Choosing Create opens a dialog that lets you scaffold from a template or start from scratch.
Scaffold from a template
Templates give you a working framework in a single step. Three are built in:
- ISO 27001: information security management, covering controls, policies, and operational procedures.
- GDPR: EU data protection and privacy, mapped to the regulation’s articles.
- General Business Policies: governance, HR, health and safety, IT, and financial operations.
To scaffold a framework:
- Go to Compliance > Frameworks and click Create.
- Select the template you want.
- If the template offers more than one language, pick your preferred language (English, German, or Spanish).
- Click Scaffold Framework.
What scaffolding creates
The scaffold builds the requirements, controls, and draft policies for the template, adds operational procedures with step-by-step guidance, and creates an “All Staff” user group with the relevant policies already assigned for attestation. Review and publish the policies, then add your team to the user group. Each generated policy opens with a clear notice that its content was produced by AI and must be reviewed and verified by a qualified person before it is approved or published. The notice appears in the language you scaffold in.
Build a framework from scratch
- Go to Compliance > Frameworks and click Create.
- Select Create from Scratch, then click Continue.
- Enter the framework name, and optionally a description, a version label, and an effective date.
- Click Create Framework.
Language selection applies when you scaffold from a template. A framework built from scratch is defined by its name, description, version, and effective date, and you add requirements to it next.
Add requirements
- Go to Compliance > Requirements and click Create.
- Select the framework the requirement belongs to.
- Enter a reference code, a title, and an optional description.
- Click Create Requirement.
Each requirement carries a compliance status of Compliant, Warning, or Non-Compliant, which rolls up into the framework’s overall compliance percentage as you implement the controls that satisfy it.
Track your compliance posture
Open Compliance > Dashboard for a summary of your program: totals for frameworks, requirements, controls, policies, and procedures, an overall compliance percentage, a breakdown of compliant, warning, and non-compliant requirements, plus expiring evidence and attestation rates. You can also export frameworks and requirements to CSV or PDF from their list pages using the Export control for audit documentation.
Next steps
With a framework in place, define the controls that satisfy your requirements and attach evidence in Managing Controls and Evidence, then roll out policies and collect sign-off in Managing Policies and Attestations.
Ready to build your compliance program? Start your free 14-day trial.