All Modules
SQL Comply
Automated Compliance
Continuous compliance monitoring for SOC 2, HIPAA, PCI-DSS, GDPR, and FERPA. Automated evidence collection, PII detection, and remediation tracking.
Supported Frameworks
SOC 2Type I & II
HIPAAPHI Protection
PCI-DSSCardholder Data
GDPREU Data Protection
FERPAEducational Records
Comprehensive Checks
Server & Database Configuration
- Encryption at rest (TDE enabled)
- Encryption in transit (TLS 1.2+)
- Authentication settings (Windows/Mixed)
- Audit configuration (C2/Common Criteria)
- Backup encryption validation
Data-Level Analysis
- PII/PHI detection in actual data
- SSN, credit card, email detection
- ML-based entity recognition
- Custom pattern definitions
- Powered by Microsoft Presidio
Access Control Review
- Complete permission inventory
- Excessive privilege detection
- Role membership analysis
- Cross-database access review
- Service account audit
Evidence & Reporting
- Automated evidence gathering
- Audit trail generation
- Compliance report export
- Remediation tracking
- Historical compliance trends
Intelligent PII Detection
Powered by Microsoft Presidio for accurate, ML-based sensitive data discovery
Sample Scan Output
Scanning table: dbo.Customers (sample: 1000 rows)
Findings:
┌─────────────────┬────────────────┬────────────┬──────────┐
│ Column │ Entity Type │ Confidence │ Count │
├─────────────────┼────────────────┼────────────┼──────────┤
│ Email │ EMAIL_ADDRESS │ 99.2% │ 1,000 │
│ Phone │ PHONE_NUMBER │ 98.7% │ 892 │
│ Notes │ US_SSN │ 95.1% │ 47 │
│ Notes │ CREDIT_CARD │ 94.8% │ 12 │
│ Address │ LOCATION │ 91.3% │ 1,000 │
└─────────────────┴────────────────┴────────────┴──────────┘
⚠ WARNING: PII found in unmasked 'Notes' column
Recommendation: Implement column-level encryption or masking
⚠ CRITICAL: Credit card numbers detected in free-text field
Recommendation: Immediate review - potential PCI-DSS violationContinuous Compliance
Compliance isn't a one-time check. SQL Comply monitors continuously and alerts you when configurations drift out of compliance.
Scheduled Scans
Daily, weekly, or custom scan schedules
Drift Alerts
Immediate notification on compliance changes
Trend Reports
Track compliance posture over time
Audit-Ready Evidence
When auditors come knocking, be ready with comprehensive evidence packages
Evidence Package Includes
- Configuration snapshots with timestamps
- Permission audit reports
- Encryption validation certificates
- Access control matrices
- Change history with attribution
- Remediation tracking logs
Export Formats
- PDF reports for auditors
- Excel spreadsheets for analysis
- JSON/XML for automation
- Integration with GRC platforms
- API for custom workflows
- Scheduled email reports
Ready for Your Next Audit?
Continuous compliance monitoring with automated evidence collection. Be audit-ready, always.
No credit card required • Free for individual developers