Compliance
by @ops Compliance Certification & Audit Evidence Tracker
Tracks control status and collects audit evidence for certifications like SOC 2 or ISO 27001 — distinct from GDPR/Consent/Retention: those handle user data rights, this is evidence that YOUR controls are actually being followed.
Loads this recipe straight into the wizard — every setting stays editable before you generate anything.
The stack
Install
# pulls this exact recipe straight from the Vault $ npx stacktora install compliance-certification-audit-evidence --remote $ stacktora sync # generate the files
What you get
More from the Vault
Consent Management Platform
Cookie/privacy consent capture and an auditable record of what a user agreed to and when — distinct from the GDPR Data Rights recipe: that handles export/deletion requests after the fact, this is the consent record those requests get checked against.
Data Masking & Synthetic Test Data Generator
Generates realistic-but-fake data for staging/test environments via a worker, so real customer data never has to leave production. A genuine compliance concern hiding as a DevOps convenience.
Data Retention & Archival Policy Service
Scheduled, policy-driven data lifecycle enforcement — archive after X, delete after Y, per data type — with a worker that actually executes retention policy instead of it living only in a document nobody enforces. Distinct from the GDPR recipe: that's user-initiated requests, this runs on its own schedule.
GDPR / Data Rights Request Service
A backend for handling data export and deletion requests properly — request intake, an auditable trail of what was done and when, and a worker to actually walk through deleting/exporting across tables instead of a manual one-off SQL script every time someone asks.