Repolode
Submit
trycompai

trycompai/comp

Open-source compliance platform that automates evidence collection, policies and controls for SOC 2, ISO 27001, HIPAA and GDPR.

Open-source alternative to:VantaDrata

View on GitHubWebsite
Stars
2,046
Forks
440
Open issues
48
Last commit
10 days ago

What is it?

Comp AI is a compliance platform aimed at helping companies get through frameworks such as SOC 2, ISO 27001, HIPAA and GDPR. It covers evidence collection, policy management and control implementation, with AI assisting the workflow.

The project is built as a TypeScript monorepo using Next.js, Prisma with PostgreSQL, Tailwind CSS and Turborepo. It includes a main app, a customer-facing portal and an API, and publishes shared packages such as the database layer, email templates, a Redis-based key-value helper and a UI component library to npm.

Local setup requires Node.js, Bun and PostgreSQL, plus several third-party services: Google OAuth for sign-in, Upstash Redis, Trigger.dev for background jobs and Resend for email. The core is licensed under AGPLv3, while the enterprise directory (/ee) uses a commercial license.

Key features

  • 01Automates evidence collection for compliance audits
  • 02Manages policies and implements controls for SOC 2, ISO 27001, HIPAA and GDPR
  • 03Includes a customer-facing portal alongside the main app
  • 04Built on Next.js, Prisma, PostgreSQL and Turborepo
  • 05Publishes reusable packages such as @trycompai/ui to npm

Use cases

  • Startups preparing for a SOC 2 or ISO 27001 audit
  • Teams that want to self-host their compliance tooling and keep data in their own infrastructure
  • Developers looking for a reference TypeScript monorepo built with the T3-style stack

Quick start

  1. 1

    Clone the repo

    git clone https://github.com/trycompai/comp.git
  2. 2

    Navigate to the project directory

    cd comp
  3. 3

    Install dependencies using Bun

    bun install
  4. 4

    Start the database, run migrations, then run all apps

    cd packages/db && bun run docker:up && bun run db:migrate

Things to know

  • Requires Node.js, Bun, Postgres, and several cloud services (Trigger.dev, Google OAuth, Upstash Redis, Resend) to run fully.
  • Licensed under AGPLv3, and parts of the code (the /ee directory) are under a commercial license.
  • Self-hosted deployment docs for Docker and Vercel are marked as coming soon.

Topics

#compliance#soc2#iso27001#gdpr#nextjs#prisma#security#turborepo#ai#audit

FAQ

What is comp?
Open-source compliance platform that automates evidence collection, policies and controls for SOC 2, ISO 27001, HIPAA and GDPR. Comp AI is a compliance platform aimed at helping companies get through frameworks such as SOC 2, ISO 27001, HIPAA and GDPR. It covers evidence collection, policy management and control implementation, with AI assisting the workflow.
Is comp free to use? What license does it have?
comp is open source under the AGPL-3.0 license. Check the license terms before using it in commercial products.
Is comp still maintained?
Actively maintained. The last commit to comp was on Oct 9, 2026.
What can I use comp for?
Startups preparing for a SOC 2 or ISO 27001 audit Teams that want to self-host their compliance tooling and keep data in their own infrastructure Developers looking for a reference TypeScript monorepo built with the T3-style stack
How do I install comp?
Clone the repo: git clone https://github.com/trycompai/comp.git Navigate to the project directory: cd comp Install dependencies using Bun: bun install Start the database, run migrations, then run all apps: cd packages/db && bun run docker:up && bun run db:migrate
Where can I get comp?
The source code and installation instructions are on GitHub: https://github.com/trycompai/comp

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects