Short verdict
Good fit for
Small software companies that need to achieve SOC 2, ISO 27001 or NEN 7510 for clients and want to automate the work.
Less suited to
Anyone who wants to see a price upfront: Comp AI only works with quotes.
Key facts
- No public prices, quote after a conversation
- Standards such as SOC 2, ISO 27001, GDPR and NEN 7510
- Processing in the US, under the Data Privacy Framework
What is Comp AI?
Comp AI is a compliance platform from Bubba AI, Inc. (trading as Comp AI), with headquarters in Aventura near Miami and an office in New York (US). It automatically collects evidence from your systems, writes policy documents, monitors your controls and builds a trust centre for your clients. It works for SOC 2, ISO 27001, GDPR, HIPAA and NEN 7510, among others. The software is open source and on GitHub.
According to the privacy policy, Comp AI is based in the US and data is processed there. The company falls under the EU-U.S. Data Privacy Framework, and there is a data processing agreement for customer data (trycomp.ai/legal/dpa).
Good: one platform for multiple standards, including the Dutch healthcare standard NEN 7510. The code is open, so you can see what it does.
Less good: there are no public prices and no free plan. Whether the audit itself is included in the price depends on your quote.
How much does Comp AI cost?
Starting price
On request
No public prices: you get a quote after a 20-minute conversation, depending on the standards, the size of your team and your deadline.
- No free plan
- No free trial
- The vendor does not say whether this is excl. VAT
Price alert for Comp AI
According to the Comp AI site on . The current plans are on the vendor's site. Has the price changed? Let us know.
The Netherlands check
Useful if you run a business in the Netherlands. "Unknown" means we could not verify it.
Data in the EU: No
An API you build into your product often processes your customers' data. If that data is outside the EU, you have to explain that in your own privacy statement and data processing agreement.
More about data in the EU →Data processing agreement: Yes
If you build an API into your product, the vendor becomes a sub-processor for your customers. Without a data processing agreement you cannot cover that chain.
More about the data processing agreement →Company in the Netherlands: No
A Dutch company falls under Dutch law. For some businesses that matters, for example in a dispute.
Checked on . Something no longer correct? Report an error.
The EU check
Where the company is based, who owns it and where your data is stored. This applies in every European country.
Headquarters: Aventura, United States
Outside the EU and EFTA.
Owner: unknown
We found no source showing who owns the company, or that it is independent.
Comp AI is an American company or has an American parent. That means the US CLOUD Act applies: US authorities can require the company to hand over data, even if it is stored in the EU.
Data in the EU: no
A tool only gets the European badge if both its headquarters and its owner are verifiably in the EU or EFTA. All European software.
Integrations
According to Comp AI itself, at least 580 integrations (source, seen on ).
According to its own site, Comp AI integrates with, among others:
GitHub
Alternatives to Comp AI
- WeaviateFree plan3 of 3 NL checkCompare
- AppSignalFree plan, paid from €18.25 /month excl. VAT3 of 3 NL checkCompare
- PloiFree plan, paid from €8 /month2 of 3 NL checkCompare
- PreprFree plan, paid from €299 /month excl. VAT3 of 3 NL checkCompare
All 12 alternatives to Comp AI →
Comp AI is based outside the EU. 8 European alternatives to Comp AI
User reviews
No reviews yet. Reviews do not count towards our verdict.
Loading…
Something not right?
We check everything on the Comp AI site, but prices and terms change. Do you see an error, or are we missing an alternative? You don't need to log in. We check every report ourselves within 5 working days. How we handle corrections.
Report an error
Suggest an alternative
Frequently asked questions about Comp AI
How much does Comp AI cost?
Comp AI does not list a price on its site; pricing is on request. No public prices: you get a quote after a 20-minute conversation, depending on the standards, the size of your team and your deadline.
Who is Comp AI for?
Comp AI is aimed at SMEs and large companies. Open-source compliance platform that collects evidence and writes policies for SOC 2, ISO 27001 and GDPR.
Does Comp AI store my data in the EU?
No, Comp AI does not store your data in the EU. You can sign a data processing agreement.
Does Comp AI support iDEAL and Peppol?
Comp AI does not support Peppol.
Which banks and tools does Comp AI integrate with?
Comp AI integrates with GitHub, among others.