# Compliance program

Transparency is a core value. This page is generated at build time from our compliance management system — what you see is always current.

Last synced Mar 31, 2026

**Passing controls**  
69% — 202/293

**Overall compliance**  
72% across 4 frameworks

**Requirements met**  
0 /14

## Framework overview

We are working towards ISO 27001, ISO 42001, SOC 2 and GDPR compliance.

### Framework Progress

| Framework                       | Passed | Total | Percentage |
|---------------------------------|--------|-------|------------|
| GDPR                            | 53     | 62    | 85%        |
| ISO 42001 (2023)               | 48     | 70    | 69%        |
| ISO 27001 (2022)               | 49     | 100   | 49%        |
| SOC 2                          | 52     | 61    | 85%        |

### Controls Assigned

**100%**  
293 controls assigned

**69% of Controls Pass**  
**Passing**  
202  
**Pending**  
91  
Total: 293 Controls

## Control categories

Security and compliance controls organized by domain, shown as a visual status grid.

| Control Category                    | Passing | Total |
|-------------------------------------|---------|-------|
| General Controls                    | 70      | 90    |
| Organizational Security             | 24      | 57    |
| Data Management and Protection      | 31      | 33    |
| Monitoring and Incident Response    | 20      | 30    |
| Risk Management                     | 11      | 21    |
| Access Control and Authorization    | 10      | 13    |
| Physical Security                   | 11      | 11    |
| Communications Security             | 6       | 10    |
| Human Resources Security            | 4       | 6     |
| Change Management                   | 5       | 6     |
| Disaster Recovery                   | 3       | 4     |
| Compliance and Audit                | 2       | 4     |
| Vulnerability Management            | 2       | 3     |
| Infrastructure Security             | 2       | 3     |
| Vendor Management                   | 1       | 2     |

## Security measures

Concrete security measures we implement to meet our control objectives.

| Measure Type                | Implemented | In progress | Not started |
|----------------------------|-------------|-------------|-------------|
| TECHNICAL                  | 0           | 0           | 7           |
| ORGANIZATIONAL             | 0           | 0           | 7           |

## Need more information?

Request access to detailed audit reports or get answers to specific compliance questions from our security team.

[Contact security team](mailto:security@arlopass.com)

## Coming soon

We've submitted Arlopass to the browser extension stores and are waiting for approval. Store listings will be available soon — check back shortly.

In the meantime, you can [install from source on GitHub](https://github.com/arlopass/arlopass).