Compliance OS — Meta-Orchestrator — Security & Safety

Compliance OS is a meta-orchestrator that helps compliance teams configure which of 12 supported frameworks apply to their company, compute cross-framework control overlap, simulate internal audits, and consolidate evidence across multiple frameworks. It produces framework selection lists, overlap maps, mock audit reports, and unified evidence checklists with reuse opportunities.

compliance-os claude-code

📂 View skill on GitHub ↗ 🚀 How to use

✨ What it does

Framework selection based on company profile (industry, geography, AI use, etc.) with dependency graph.
Cross-framework control mapping with confidence ratings and evidence-reuse opportunities.
Audit simulation generating 8–15 findings with severity distribution and interview questions.
Unified evidence checklist with reuse-leverage scores and acquisition cost estimates.
Orchestrates per-framework skills without deep-diving into any single framework.

🎯 When to use it

When standing up a multi-framework compliance program and need to determine which frameworks apply.
When planning the annual audit calendar across multiple frameworks.
When preparing for certification stage 1 for a new framework.
When consolidating evidence across multiple frameworks to identify reuse opportunities.

🚀 How to use

Trigger by asking for multi-framework compliance orchestration, such as 'Which frameworks apply to my company?' or 'Map overlaps between ISO 27001 and SOC 2.' Provide a company profile JSON for framework selection, control libraries for overlap mapping, audit scope for simulation, or program config for evidence consolidation. Example prompts:

Run framework_selector.py with my company profile.
Simulate an internal audit for ISO 27001.

📄 Output: Produces framework selection lists, cross-framework overlap maps, mock audit reports, and unified evidence checklists with reuse maps.

📦 Add this skill to Claude Code

# 1. Get the skills repo
git clone --depth 1 https://github.com/alirezarezvani/claude-skills /tmp/claude-skills

# 2. Copy this skill into your project (or ~/.claude/skills for all projects)
mkdir -p .claude/skills
cp -r /tmp/claude-skills/compliance-os/skills/compliance-os .claude/skills/compliance-os

Skill source: compliance-os/skills/compliance-os/SKILL.md

⚠️ Good to know

Does not replace per-framework skills; it orchestrates them. Not a substitute for binding legal advice; novel cross-walks should be reviewed with counsel.

❓ FAQ

What frameworks does Compliance OS support?

It supports 12 frameworks: ISO 27001, ISO 13485, ISO 42001, ISO 14971, EU AI Act, MDR 745, GDPR, SOC 2, FDA QSR, NIST CSF 2.0, NIS2, and HIPAA.

How does Compliance OS decide which frameworks apply?

It uses framework_selector.py with a company profile (industry, geography, AI use, etc.) to rank applicable frameworks and provide a dependency graph.

Can Compliance OS generate mock audit findings?

Yes, audit_simulator.py generates 8–15 finding scenarios with severity distribution matching IIA expectations and interview questions per control.

🤖 Overview, features, install steps and FAQ were generated from the project's SKILL.md on Sep 4, 2026. Always check the original source before running commands.