Compliance
by @ops Python + Postgres: Policy-as-Code Validation Engine
Validates infrastructure or application configuration against declared policy rules, similar in spirit to Stacktora's own company.stacktora.json enforcement — generalized as a standalone service for validating any structured config against any rule set.
Loads this recipe straight into the wizard — every setting stays editable before you generate anything.
The stack
Install
# pulls this exact recipe straight from the Vault $ npx stacktora install python-policy-as-code-validation --remote $ stacktora sync # generate the files
What you get
More from the Vault
Compliance Certification & Audit Evidence Tracker
Tracks control status and collects audit evidence for certifications like SOC 2 or ISO 27001 — distinct from GDPR/Consent/Retention: those handle user data rights, this is evidence that YOUR controls are actually being followed.
Consent Management Platform
Cookie/privacy consent capture and an auditable record of what a user agreed to and when — distinct from the GDPR Data Rights recipe: that handles export/deletion requests after the fact, this is the consent record those requests get checked against.
Data Masking & Synthetic Test Data Generator
Generates realistic-but-fake data for staging/test environments via a worker, so real customer data never has to leave production. A genuine compliance concern hiding as a DevOps convenience.
Data Retention & Archival Policy Service
Scheduled, policy-driven data lifecycle enforcement — archive after X, delete after Y, per data type — with a worker that actually executes retention policy instead of it living only in a document nobody enforces. Distinct from the GDPR recipe: that's user-initiated requests, this runs on its own schedule.