Company · Compliance

Compliance, mapped.

A live matrix of the frameworks Natton.ai operates within. For evidence packs + auditor letters, contact our compliance team.

Framework	Scope	Status	Audit
SOC 2 Type II	Security · Availability · Confidentiality	Current	Annual · Big-4 auditor
ISO 27001:2022	Information security management	Current	Annual · accredited body
HIPAA · BAA	ePHI handling for healthcare engagements	BAA available	Internal annual
GDPR	Data subject rights, lawful basis, DPIA	Aligned	DPO + external counsel
DPDP (India)	Consent + cross-border + grievance	Aligned	Internal quarterly
PCI DSS	Card data handling in voice + chat agents	PCI mode	QSA on engagement
IEC 62443	OT cybersecurity for manufacturing deployments	Aligned	Per-engagement
AI Verify (SG)	Independent AI assessment framework alignment	Aligned	Per-engagement
NIST AI RMF	AI risk management — govern, map, measure, manage	Aligned	Per-engagement
EU AI Act	High-risk system documentation + monitoring	Evidence pack	Per-engagement
WCAG 2.2 AA	Accessibility on UI surfaces + assistive-tech testing	Aligned	Internal + external

By industry

Vertical-specific compliance.

Healthcare

HIPAA · DPDP · GDPR · FDA SaMD · ICH GCP · ISO 13485

BFSI

PCI DSS · RBI · SEBI · SR 11-7 · ISO 27001

Legal

Attorney-client privilege · ABA AI guidance · ISO 27001

Retail

PCI DSS · GDPR · DPDP · DSA (EU)

Public Sector

DPDP · AI Verify · NIST RMF · EU AI Act · WCAG 2.2

Manufacturing

IEC 62443 · ISO 27001 · ISO 9001 · IATF

Talk to a solutions architect — get a pilot scoped in 48 hours.