zero-trust compliance :: public beta

SigComply

The Non-Custodial Compliance Engine

Open-source, zero-trust, developer-friendly compliance. Evidence without Access. Security-first alternative to centralized platforms.

Get Started Free View on GitHub

$ Free forever for CLI + Git storage | No credit card required

// problem

Getting Certified Creates New Vulnerabilities

  • Third-party data access to your production systems for compliance
  • Long-lived "read-only" API keys create attack vectors
  • Black-box policy checks — you can't audit what they're checking
  • $20k+/year tools that regulated startups can't afford
// solution

Evidence Without Access

  • Zero Data Liability — we never touch your production data
  • Open-Source Logic — audit every policy check as code
  • Cryptographic Proofs — Ed25519 signatures verify evidence integrity
  • Developer Ergonomics — compliance as a unit test, fails your build
// features

Everything You Need for Compliance

Policy as Code

Declarative policy checks run locally in your CI. Compliance as code that you can read, audit, and extend.

Cryptographic Signing

Every evidence file is Ed25519-signed and hashed. Auditors verify raw files against a signed manifest.

Data Sovereignty

Evidence in your private S3/storage. SigComply never sees or touches your raw data.

Auditor-Ready Reports

Generate PDF/CSV exports mapped to SOC 2, ISO 27001 & HIPAA controls. Make auditors happy.

Drift Detection

Automated alerts when evidence collection fails or compliance drifts.

Custom Integrations

Community-driven connectors. Add support for your custom stack easily.

// architecture

Non-Custodial Architecture

01

The Engine (CLI)

Runs policy checks locally in your CI/CD

terminal
$ sigcomply check
✓ Policies pass
✓ Signing evidence files...
02

Sovereign Vault

Your encrypted S3 bucket — evidence never leaves your infrastructure

storage
soc2/aws-mfa/
├── evidence.json
├── manifest.json (signed)
└── envelope.json
03

Compliance Dashboard

Aggregated scores only — no raw evidence, no resource IDs

dashboard
score: 87%
passed: 14 / 16
status: compliant
// integrations

Works With Your Stack

Collect evidence from the tools you already use

AWS
Azure
GCP
GitHub
GitLab
Okta

// More integrations coming soon | Community contributions welcome

// pricing

Start Free, Upgrade When You Need

No credit card required • Cancel anytime

Free

For teams getting started

$0 /forever
  • Full CLI access
  • Git-based evidence storage
  • All integrations
  • Community support
  • Manual evidence management
Download CLI
RECOMMENDED

Pro

For compliance-ready teams

$99 /month

Starts with a free 2-month trial — no credit card required.

Everything in Free, plus:

  • Auditor-friendly PDF/CSV exports
  • Compliance heartbeat monitoring
  • Automated drift detection
  • CCF requirement mapping
  • Priority support
Start Pro Trial

$99/mo vs $20,000+/year for tools like Vanta

Ready to Take Control of Your Compliance?

Start collecting evidence today. No credit card required.

Get Started Free Read the Docs