Redesigned builder & respondent view
A cleaner Questionnaire Template Builder and a modern answering layout that is easier to follow, with faster navigation between questions.
Insights on Your Conformity Levels
Compliance Assessments
Enactia’s Compliance Assessments module lets you run questionnaire-based assessments and gap analyses against ISO 27001, SOC 2, GDPR, NIS2, DORA, PDPL and 65+ ready-made templates. Collect evidence once, route approvals, raise risks automatically and track conformity in real time, all in one GRC platform.
- 65+ assessment templates
- Unlimited assessments
- AI-recommended actions
- Every feature included, no tiers
65+ READY-MADE ASSESSMENT TEMPLATES, INCLUDING
- ISO/IEC 27001:2022
- SOC 2
- GDPR
- NIS2
- DORA
- NIST CSF 2.0
- ISO/IEC 42001
- PCI DSS 4.0
- HIPAA
- KSA PDPL
- NCA ECC
- SAMA CSF
- UAE IAR (NESA)
- DIFC & ADGM
- India DPDP
- PIPEDA
- CPRA
- ISO 22301
A reimagined assessment experience
We rebuilt the questionnaire builder and the answering experience from the ground up, so assessments are faster to create, easier to complete and simpler to share.
AI-recommended improvement actions
Enactia AI suggests remediation actions based on responses and the gaps identified, so findings turn into a plan straight away.
Regulatory references in context
The legal or framework reference sits right next to each question, so respondents never have to leave the assessment to check a clause.
External collaborators
Invite consultants, legal advisors or vendors into internal assessments through a redesigned external portal, scoped to the exact sections they help with.
Assessment partitions
Insert guidance pages between questions or sections of long assessments. They are read in place and never affect progress, scores or numbering.
Policies as evidence
Link a policy from Policy Management to the questions it answers. The link always shows the current version, so nothing needs re-uploading.
How it works
From template to approved assessment in four steps
01
Pick or build a template
Start from an Enactia template, copy and tailor one, import from Excel, or reuse a past assessment to carry answers into the new cycle.
02
Scope and assign
Link the assessment to an organisation, department, process or asset. Add owners, editors and viewers, down to individual sections or questions.
03
Answer with evidence
Record gap, maturity and priority, attach or link evidence, discuss in context, and let rules raise risks and actions as you go.
04
Approve, report, monitor
Run multi-level approvals, lock the result, export a branded report, and watch conformity update across your frameworks.
Questionnaire builder
Build any assessment, your way
Enactia’s own templates stay locked and up to date. Copy one to tailor it, or build your own questionnaire from scratch for internal audits, maturity reviews or sector-specific checks.
- Sections, partitions and answer types: short text, long text, single or multiple selection, with optional or mandatory explanations.
- Conditional logic: show, skip or default questions based on an answer or a gap response.
- Priority and maturity models: use CMM-style levels out of the box or define your own.
- Controls mapping: link questions to framework controls so answers update control status automatically.
- Excel import: upload a template, or a whole assessment completed offline.
Gap analysis → risks & actions
Turn every gap into a tracked risk or action
Each answer carries a gap response: gap, partial, no gap or not applicable. Those responses feed conformity in the Compliance Universe and drive what happens next, so nothing stays buried in a spreadsheet.
- Auto-raised risks: rules create a risk with title, description, recommendation and level the moment an answer or gap matches.
- Recommended actions catalogue: predefined remediation cross-mapped to controls across frameworks, plus your own.
- Actions & Tasks: assign, prioritise and follow up every action across all assessments in one view.
- Risk propagation: risks flow to the linked departments, processes, assets and organisation.
Evidence & collaboration
Collect evidence once. Reuse it everywhere.
Upload a file or link one from the Document Repository. A single document can support many questions, and every assessment keeps its own Documents tab ready for the auditor.
- Bulk upload and classification by drag and drop, then map files to the right questions.
- Live policy links that always show the current version from Policy Management.
- Comments, evidence requests and discussions on every question, with email and in-app notifications.
- External consultants and vendors join through the portal with question-level access, and vendor users don’t consume your user licences.
Approvals, audit trail & reports
Audit-ready from the first answer
Every answer, upload and decision is logged. When the assessment is done, approvals run in sequence and the result is locked, so what you show the auditor is exactly what was approved.
- Multi-level approval cycles such as manager then director, or self-approval for simple processes.
- Per-question audit trail and a summary of who answered what, and when.
- Branded reports with your organisation’s logo, charts, responses, risks and actions, exported to PDF or HTML.
- Assessment history so each cycle builds on the last one.
Key features
Everything you need to run compliance assessments
Designed by cybersecurity and data protection experts for CISOs, DPOs, internal auditors and the consultants who support them.
Assessment templates library
65+ templates for ISO standards, national privacy laws and sector cybersecurity rules, filterable by industry and country.
Questionnaire builder
Build your own templates with sections, partitions, conditions, priority and maturity.
Gap analysis
Per-question gap responses that feed conformity across every mapped framework.
Maturity assessment
CMM-style or custom maturity levels with insights by area and section.
Risk assessment
Raise risks manually or automatically from answers, linked to Enterprise Risk Management.
Evidence management & mapping
Upload, link and reuse documents and live policies across questions.
Workflows & approval cycles
Sequential approval levels, locking on approval and justified reopening.
Multi-user access control
Owner, editor, viewer and approver roles, down to individual sections and questions.
Conformity monitoring
Dashboards for status, progress, conformity per framework and gaps over time.
Ticketing & tasks
Turn recommendations into assigned actions with priorities and due dates.
Notifications & alerts
Email and in-app alerts for assignments, comments, approvals and status changes.
Multiple jurisdictions
EU, UK, US, GCC, India and APAC requirements in one place, with cross-border templates.
Simple, honest licensing
Every feature included. No tiers, no add-ons.
Many GRC platforms split each module into Basic, Pro and Enterprise plans, then charge extra for workflows, AI or reporting. Enactia doesn’t. Subscribe to a module and your whole team gets every feature in it, from day one.
- Full access to every module feature, with nothing locked behind a higher plan.
- New features included as they’re released, at no extra cost.
- Pay only for the modules you choose, and add more whenever you’re ready.
Compliance Assessments featuresFeature-tiered pricingEnactia
Assessment templates libraryIncludedIncluded
Custom questionnaire builder & conditional logicHigher tierIncluded
Multi-level approval workflowsHigher tierIncluded
Evidence management & live policy linksAdd-onIncluded
Auto-raised risks & action trackingHigher tierIncluded
Enactia AI recommendationsPaid add-onIncluded
Branded reports & exportsLimitedIncluded
New features as they shipOften extraIncluded
One module subscription. Every feature. Unlimited assessments.
Scope
Assess your organisation, departments, processes and assets
Link each assessment to what it covers, so findings and risks land in the right place. Running a group, many subsidiaries or client portfolios as an MSP, vCISO or vDPO? The global organisation filter scopes every assessment, dashboard and report to the organisation you’re working in.
Organisation
Group-wide or per-entity programmes, with organisation branding on reports.
Departments
Delegate sections to the teams that own the answers.
Processes
Tie privacy and security assessments to the processing activities in your ROPA.
Assets
Assess systems and applications and see their risk position update.
65+
ready-made assessment templates
50+
frameworks and laws cross-mapped
Up to 80%
less compliance effort
∞
assessments included with the module
Enactia AI
AI that helps you assess faster
Built into the platform and grounded in your own GRC data, from the first question to the final report.
Recommended actions
Suggested improvements based on each response and the gaps found.
Ask Enactia about your data
Ask in plain language about controls, compliance status, risks or vendors and get summaries, insights and reports.
Cross-mapping
Answer once and let mapped controls carry the result across overlapping frameworks.
Complete platform or modular
Works with every Enactia module
Start with Compliance Assessments or run the whole GRC programme. Your choice.
Compliance Universe
Monitor conformity per framework, fed by your gap responses.
Enterprise Risk Management
Risks raised in assessments land in your registers.
Policy Management
Link live policies to the questions they answer.
Vendor & Third Party
Bring vendors and consultants into assessments via the portal.
Document Repository
One evidence store shared across all modules.
Ticketing & Tasks
Follow remediation through to closure.
FAQ
Compliance assessments, answered
What is the Compliance Assessments module?
Compliance Assessments is the Enactia module that replaces spreadsheets and email with structured, questionnaire-based assessments against a framework or regulation. It records gaps, maturity, evidence and approvals for each requirement, raises risks and actions from the answers, and reports conformity across frameworks.
Do I pay extra for advanced features?
No. Unlike platforms that split each module into feature tiers or sell workflows, AI and reporting as add-ons, Enactia gives you full access to every feature of the modules you subscribe to, including new features as they’re released. You only choose which modules you need.
Which frameworks and regulations can I assess against?
More than 65 ready-made templates, including ISO/IEC 27001:2022, ISO/IEC 42001, ISO 22301, SOC 2, NIST CSF 2.0, PCI DSS 4.0, HIPAA, DORA, NIS2, GDPR, CPRA, PIPEDA, India DPDP, KSA PDPL, NCA ECC, SAMA, UAE IAR (NESA), DIFC and ADGM. You can also build your own.
Can I run an ISO 27001 gap analysis or internal audit?
Yes. Enactia includes ISO/IEC 27001:2022 templates for implementation (with ISO/IEC 27002:2022 controls), self-assessment and internal audit, and the Statement of Applicability. Gap responses update conformity and raise risks where controls are missing.
Can external consultants or vendors contribute?
Yes. With Vendor & Third Party Management enabled, you can invite external users as editors or viewers on specific sections or questions. They work through the external portal, and vendor users don’t consume your user licences.
Can I import assessments from Excel?
Yes. You can import a questionnaire template from a structured Excel file, or upload an assessment that was completed offline in a spreadsheet.
Is there a limit on the number of assessments?
No. Subscribers to the Compliance Assessments module can run unlimited assessments, and reuse past ones to start each new cycle with previous answers.
Governance, Risk & Compliance made simple
Every module feature included, no tiers or add-ons. Up to 80% less compliance effort across 50+ frameworks.
Evidence looks good. Can you add the approval log for the last review?