COMINGCompliance · KVKK, ISO 27001
XComply Collects the evidence, readies the audit
XComply gathers the evidence for ISO 27001 and KVKK controls for you: from the other agents’ records, the identity system and the backup reports. It finds missing evidence, reminds the owner and produces an audit-ready report. It gives no legal opinion.
What it does
- 01
Maps the controls
It maps ISO 27001:2022 Annex A controls and KVKK duties to their evidence sources.
- 02
Gathers evidence
It takes evidence, with its date, from XWatch, XDefend and XOperate records and the identity system.
- 03
Finds the gaps
It lists controls with missing or outdated evidence.
- 04
Reminds the owner
It sends a reminder to whoever owns the missing evidence and follows the answer.
- 05
Prepares for audit
It produces a report an auditor can use, showing the evidence control by control.
- 06
Warns about drift
If a control that had evidence breaks, it tells you without waiting for the audit.
How it works
- Detects
It reads the evidence for each control from its sources on a schedule.
- Plans the action
For missing or ageing evidence it writes who should do what, as a task.
- Hands you the control
You decide which controls are in scope and which risks are accepted.
- Records it
Every piece of evidence is kept with where and when it was taken.
What it never touches
- It gives no legal opinion; interpretation and decisions are yours and your advisers’.
- It never changes evidence; it only reads it and keeps it with its date.
- It takes personal data into the evidence file only as far as needed.
What it connects to
- Framework
- ISO 27001:2022 Annex A, KVKK
- Evidence
- XWatch, XDefend and XOperate records, identity system
- Output
- Gap list, reminders, audit-ready report
Let us talk through how the agent would run in your own environment.
Request a meeting