Comp AI was able to simply these overcomplicated frameworks into only a simple handful of tasks. Because of this we were able to get compliant significantly quicker than we thought and had much less headache than many of our colleagues told us to expect. Review collected by and hosted on G2.com.

More frameworks needed! They only have a couple, I know they are still new, but definitely need to add some more. Review collected by and hosted on G2.com.

I use Comp AI to manage and maintain our security and compliance requirements, mainly for SOC 2, ISO 27001, and GDPR. It solves one of our biggest challenges by making compliance simple, fast, and reliable. I like that things are automated and effortless. Review collected by and hosted on G2.com.

The initial setup of Comp AI was a bit difficult, but once it's done, it’s fine. Review collected by and hosted on G2.com.

I really like how simple and intuitive Comp AI is. It makes compliance easier to understand and manage, even for someone without deep compliance expertise. Review collected by and hosted on G2.com.

The initial setup takes a bit of time to fully understand, especially for first-time users, but it becomes easier once everything is configured. Review collected by and hosted on G2.com.

supports major standards like SOC 2, ISO 27001, HIPAA and GDPR in one place, which is helpful if you are dealing with more than one framework Review collected by and hosted on G2.com.

Integrations are still limited, so connecting every internal tool or data source may need manual workarounds Review collected by and hosted on G2.com.

The open source approach is honestly refreshing in a space dominated by expensive enterprise solutions. being able to self-host gave us complete control over our data, which was huge for our security team. The AI-powered evidence collection saved us weeks of manual work and it automatically gathered screenshots and documentation across our AWS infrastructure without us having to babysit the process Review collected by and hosted on G2.com.

Setting up the self-hosted version took more technical know-how than expected. while the documentation is decent, you definitely need someone comfortable with containerization and server management to get it running smoothly. The community around it is growing but still pretty small compared to established players, so finding solutions to edge cases sometimes means waiting for responses or figuring things out yourself Review collected by and hosted on G2.com.

The fact that it's open-source is huge for me. I can actually see what's happening under the hood and even contribute fixes when I run into issues. That's pretty rare in the compliance space where everything is usually locked down. Review collected by and hosted on G2.com.

Since it's new, there's not much of a community yet. The core team responds quickly, but there aren't many plugins or integrations available. You'll probably need to build custom stuff Review collected by and hosted on G2.com.

Modern, intuitive UI, world-class support, and generally a much better product that Drata (which we switched over from). Review collected by and hosted on G2.com.

Can't think of anything, we absolutely love Comp AI at Dub! Review collected by and hosted on G2.com.

Finally, a compliance platform that delivers on the "easy setup" promise, and I love that it's open-source. Not perfect, but way better than the alternatives I've tried. Open source feels right - it is refreshing after dealing with black-box compliance tools. Plus, there's something reassuring about not being locked into a proprietary system. Review collected by and hosted on G2.com.

The trust portal domains seems broken after you add and then remove your domain. Review collected by and hosted on G2.com.

As a founder, I need comp decisions to be fast, fair, and defensible - Comp AI delivers all three. It gives us real-time market benchmarks, helps avoid internal guesswork, and builds trust with clients Review collected by and hosted on G2.com.

The only challenge we’ve faced is tailoring our integrations - Rest everything works well. Review collected by and hosted on G2.com.

Very simple policies that are not bloated with nonsense. Very responsive team. Review collected by and hosted on G2.com.

Although everything is very good with them, certain features like the trust portal could be improved to simplify SOC2 such as downloading PDF's of the compliance certificates. However, these seem to already be on the roadmap so should not be a problem long-term. Review collected by and hosted on G2.com.