Compliance

Enterprise compliance scaffolding and framework checks (GDPR, HIPAA, SOC 2, ISO 27001).

my add compliance --frameworks gdpr,soc2
my compliance setup --frameworks gdpr,soc2
my compliance check
my compliance check --dry-run
my compliance check --frameworks gdpr,hipaa

Frameworks

| Framework | Key checks | |-----------|------------| | gdpr | Privacy policy, data retention, subject rights | | hipaa | PHI access control, audit logging, breach readiness | | soc2 | Access controls, change management, monitoring | | iso27001 | ISMS policy, risk assessment, asset inventory |

What gets scaffolded

| Artifact | Path | |----------|------| | Service | src/compliance/compliance.service.ts | | Policies | src/compliance/policies/*.policy.ts | | Checks | src/compliance/checks/ | | Documentation | src/compliance/documentation/ | | Docs | COMPLIANCE.md |

Filesystem signals

my compliance check auto-detects project artifacts to upgrade check statuses:

• privacy-policy.md, COMPLIANCE.md, SECURITY.md, AUDIT.md
• src/audit, src/privacy, src/security

Missing required documentation marks related checks as failed. The report is written to COMPLIANCE_REPORT.md (override with --output).

Configuration

Frameworks are loaded from .myclirc.json:

{
  "extensions": {
    "complianceFrameworks": ["gdpr", "soc2"]
  }
}