Is it really free?
Yes. You can run a full SOC 2, ISO 27001, or HIPAA program — controls, readiness scoring, the evidence vault, tasks, and the exportable auditor pack — at no cost, with no purchase required. It's open, self-service signup.
Do I need to be an intSignal customer?
No. Sign up with email, Google, or Microsoft and use the workspace for free. If you later buy services, they attach to the same account and your compliance data stays exactly where it is — no migration.
Which frameworks are supported?
SOC 2 (Trust Services Criteria), ISO 27001 (Annex A / ISMS), and HIPAA (Security & Privacy Rule safeguards). One engine serves all three; see Choosing a framework.
How is my evidence protected?
The workspace is a separately isolated system: its own service, database (least-privilege credentials), private encrypted storage, encryption keys, and tamper-evident audit log. Tenant isolation is enforced deny-by-default, and a portal or global admin has no implicit access to your evidence. Full detail: Security & isolation.
Can an intSignal admin see my files?
Not casually. Access to tenant evidence is gated, least-privilege, and logged — it isn't a side effect of being a portal admin. Break-glass access is itself audited.
What file types and sizes can I upload?
The vault enforces a strict type and size allow-list and scans every upload for malware. Common evidence formats — PDFs, images, documents, config exports — are supported. Files are encrypted at rest and reachable only through short-lived signed links.
Can I use it for more than one framework?
Yes. The frameworks overlap heavily, so evidence you collect for one often satisfies the others. Work them in whatever order fits your business.
Can I export or delete everything?
Yes. Export any time via the audit pack, and delete your data and account entirely (right to erasure). Export first if you want a copy.
Can intSignal just run our compliance for us?
Yes. Our team can operate the program end to end as a managed / virtual-CISO engagement — mapping controls, gathering evidence, and preparing you for the audit. Talk to sales, or read the two ways to get compliant.
How do I get started?
Create a free account at portal.intsignal.com/compliance, then follow Getting started.