Predefined framework library
ISO 27001, CIS18, NIS2, DORA, D-seal and more, with controls, article numbers and naming 1:1 with the standard.
Multi-framework compliance Multi-framework compliance: do the work once
Switch on the frameworks you need and let one shared set of evidence tasks count across all of them. Document a control once, and watch progress move on every framework it belongs to.
Unlimited users • Free onboarding and support • No commitment
.jpeg)
.jpg)
.jpg)
.jpg)
-1.png)
.jpeg)
.jpg)
Multi-framework compliance Meridian meets NIS2, ISO 27001 and CIS18 without documenting everything three times
Maria Holm is group GRC lead at Meridian Nordic. As an energy company they run an ISO 27001-certified ISMS, they have to meet NIS2 as an essential entity, and they use CIS18 as a security baseline. The three overlap heavily, but they used to live in three separate spreadsheets, so the same evidence, an access review here, a backup test there, got written up again and again. Now Maria switches the frameworks on in .legal, the controls arrive predefined, and each one hangs off a shared evidence task. She documents the task once, and progress moves on every framework it belongs to.
-
The same evidence task counts towards NIS2, ISO 27001 and CIS18 at once.
-
Controls arrive predefined, with the standard's own ids and numbering.
-
A simulated score shows how far CIS18 already is from the ISO work.
-
Each framework can still be audited in its own structure.
Multi-framework compliance Frameworks come ready, you set the scope
You don't build the framework, you choose it. The standards are predefined, so you start from the real controls rather than a blank sheet, and you decide how much is in scope.
-
Pick from IT-security standards like ISO 27001 and CIS18 and legal requirements like NIS2.
-
Controls, article numbers and naming match the standard 1:1, nothing to retype.
-
Switch a framework on and choose which controls apply to you.
Multi-framework compliance One evidence task, many controls
Underneath every control sits an evidence task, the thing you actually do and document. That task can be linked to more than one control, and .legal has done the mapping for you.
-
A single task can cover several controls in the same framework.
-
The same task can also cover controls in a different framework entirely.
-
Do the work, upload the documentation, and it lands on every control it's mapped to.
Multi-framework compliance Progress on every framework at once
Because the evidence is shared, finishing one task moves more than one bar. You see where each framework stands, and you can look ahead too.
-
Complete a task and watch progress tick up across every mapped framework.
-
Get a simulated score on frameworks you haven't switched on yet.
-
The head start comes from the documentation you're already collecting.
Multi-framework compliance Set it up, then let it run
The point of doing the work once is that it keeps working. You delegate the tasks, and the platform keeps the right people moving without you chasing them.
-
Assign each task to an owner, with how often it needs doing.
-
The right person gets reminded at the right time, automatically.
-
Follow progress and spot anywhere things aren't closed on time.
Multi-framework compliance Still audit framework by framework
Sharing the evidence underneath doesn't blur the frameworks on top. An auditor wants to see your documentation in the context they're auditing, so we keep each framework's own shape.
-
Present an ISO 27001 audit in ISO 27001's structure, NIS2 in NIS2's.
-
The same evidence appears wherever it's relevant, in each framework's terms.
-
Run one framework's audit without dragging the others into it.
Multi-framework compliance Rails, not the roadmap
We stand up the frameworks and the mapping so the whole picture is easy to see. We don't decide your compliance for you, and we don't write it.
-
You choose which frameworks and which controls belong in your scope.
-
You document your own compliance and security, we give it somewhere to live.
-
The platform makes the work visible and reusable, the judgement stays yours.
Multi-framework compliance Frameworks this covers
Different frameworks, one set of evidence underneath.
-
NIS2
Learn about NIS2The risk-management measures an essential entity must run, evidenced by the same tasks that feed your other frameworks.
-
ISO 27001
Learn about ISO 27001The Annex A controls, predefined and mapped to your evidence, so a certified ISMS reuses work you've already done.
-
CIS18
Learn about CIS18The 18 controls as a security baseline, mapped to the same tasks so you can see how far you already are.
Our Customers
+400
companies
+10.000
users
+79.000
contracts
+14.000
processing activities
.legal's team has consistently demonstrated a commitment to innovation while being responsive to the needs of our mutual clients.
With .legal, we've gained a simpler and more manageable solution that better suits our needs
.legal has been the right choice for us. .legal are professional and welcoming with skilled employees.
Firstly, it means that not all the work is in one place (me), and secondly, that the understanding of GDPR is implemented throughout the organisation.
From .legal, we experience an incredibly high degree of flexibility and willingness to adapt features to our local needs.
.legal's team has consistently demonstrated a commitment to innovation while being responsive to the needs of our mutual clients.
With .legal, we've gained a simpler and more manageable solution that better suits our needs
.legal has been the right choice for us. .legal are professional and welcoming with skilled employees.
Firstly, it means that not all the work is in one place (me), and secondly, that the understanding of GDPR is implemented throughout the organisation.
From .legal, we experience an incredibly high degree of flexibility and willingness to adapt features to our local needs.
We are satisfied with the switch to .legal – it has strengthened our compliance work, made processes easier to manage and more transparent, and improved cross-team collaboration
It just works! It is so easy and user-friendly, and the overview of processing activities is brilliant.
.legal has really understood what it means to create a user-friendly and efficient solution. Privacy is an attractive product compared to price and functionality.
.legal continuously update the platform to ensure their customers always remain compliant. In our view, any other choice would be a downgrade.
The implementation of .legal has made a difference in the way we handle compliance. The system has created structure and overview, which has had concrete benefits.
We are satisfied with the switch to .legal – it has strengthened our compliance work, made processes easier to manage and more transparent, and improved cross-team collaboration
It just works! It is so easy and user-friendly, and the overview of processing activities is brilliant.
.legal has really understood what it means to create a user-friendly and efficient solution. Privacy is an attractive product compared to price and functionality.
.legal continuously update the platform to ensure their customers always remain compliant. In our view, any other choice would be a downgrade.
The implementation of .legal has made a difference in the way we handle compliance. The system has created structure and overview, which has had concrete benefits.
