Short verdict
Good fit for
Small software companies that need to achieve SOC 2, ISO 27001 or NEN 7510 for clients and want to automate the work.
Less suited to
Anyone who wants to see a price upfront: Comp AI only works with quotes.
Key facts
- No public prices, quote after a conversation
- Standards such as SOC 2, ISO 27001, GDPR and NEN 7510
- Processing in the US, under the Data Privacy Framework
What is Comp AI?
Comp AI is a compliance platform from Bubba AI, Inc. (trading as Comp AI), with headquarters in Aventura near Miami and an office in New York (US). It automatically collects evidence from your systems, writes policy documents, monitors your controls and builds a trust centre for your clients. It works for SOC 2, ISO 27001, GDPR, HIPAA and NEN 7510, among others. The software is open source and on GitHub.
According to the privacy policy, Comp AI is based in the US and data is processed there. The company falls under the EU-U.S. Data Privacy Framework, and there is a data processing agreement for customer data (trycomp.ai/legal/dpa).
Good: one platform for multiple standards, including the Dutch healthcare standard NEN 7510. The code is open, so you can see what it does.
Less good: there are no public prices and no free plan. Whether the audit itself is included in the price depends on your quote.
How much does Comp AI cost?
Starting price
On request
No public prices: you get a quote after a 20-minute conversation, depending on the standards, the size of your team and your deadline.
- No free plan
- No free trial
- The vendor does not say whether this is excl. VAT
Price alert for Comp AI
According to the Comp AI site on . The current plans are on the vendor's site. Has the price changed? Let us know.
The Netherlands check
Useful if you run a business in the Netherlands. "Unknown" means we could not verify it.
Data in the EU: No
An API you build into your product often processes your customers' data. If that data is outside the EU, you have to explain that in your own privacy statement and data processing agreement.
More about data in the EU →Data processing agreement: Yes
If you build an API into your product, the vendor becomes a sub-processor for your customers. Without a data processing agreement you cannot cover that chain.
More about the data processing agreement →Company in the Netherlands: No
A Dutch company falls under Dutch law. For some businesses that matters, for example in a dispute.
Checked on . Something no longer correct? Report an error.
Integrations
According to Comp AI itself, at least 580 integrations (source, seen on ).
According to its own site, Comp AI integrates with, among others:
GitHub
Alternatives to Comp AI
- ZernioFree plan1 of 3 NL checkCompare
- FirecrawlFree plan1 of 3 NL checkCompare
- KnockFree plan1 of 3 NL checkCompare
- Context.devFree plan1 of 3 NL checkCompare
All 5 alternatives to Comp AI →
Comp AI is based outside the EU. 1 European alternative to Comp AI
User reviews
No reviews yet. Reviews do not count towards our verdict.
Loading…
Something not right?
We check everything on the Comp AI site, but prices and terms change. Do you see an error, or are we missing an alternative? You don't need to log in. We check every report ourselves within 5 working days. How we handle corrections.
Report an error
Suggest an alternative
Frequently asked questions about Comp AI
How much does Comp AI cost?
Comp AI does not list a price on its site; pricing is on request. No public prices: you get a quote after a 20-minute conversation, depending on the standards, the size of your team and your deadline.
Who is Comp AI for?
Comp AI is aimed at SMEs and large companies. Open-source compliance platform that collects evidence and writes policies for SOC 2, ISO 27001 and GDPR.
Does Comp AI store my data in the EU?
No, Comp AI does not store your data in the EU. You can sign a data processing agreement.
Does Comp AI support iDEAL and Peppol?
Comp AI does not support Peppol.
Which banks and tools does Comp AI integrate with?
Comp AI integrates with GitHub, among others.