TinyGRC Compliance
Simplifying Governance, Risk, and Compliance.
TinyGRC is an app for the Atlassian Confluence that helps you track basic compliance and visualize overall performance. Track SOC2, PCI, ISO 27001, NIST CSF, NIST 800-53, and HIPAA compliance efforts among others.
How to Track SOC 2 Evidence in Confluence (Without a New Tool)
A practical 4-step workflow for collecting, organizing, and sharing SOC 2 evidence in Confluence — where it already lives — without adding another GRC platform. ... Read more
Release 4.0
A new version, 4.0 in Atlassian Cloud built on the new Atlassian infrastructure. TinyGRC brings Governance, Risk, and Compliance into the Confluence you already use. Most GRC platforms ask your team to leave the tools they live in and re-enter everything into a new dashboard. TinyGRC is different — it works inside Confluence, right next to the work the evidence comes from. What you can do with TinyGRC: Track multiple standards — SOC 2, ISO 27001 (2022), HIPAA, PCI, FedRAMP, NIST CSF, and NIST 800-53 r5 — each with its own controls and progress. ... Read more
SOC 2 vs HIPAA vs ISO 27001: Which Do You Actually Need?
SOC 2, HIPAA, and ISO 27001 get conflated constantly — but they answer different questions. A quick decision guide: who is asking you, and how much of the evidence you can reuse. ... Read more
Preparing for a SOC 2 Audit: A Practical Checklist
From scoping to the report: the phases of a SOC 2 audit, what documents auditors actually request in the PBC list, and how to keep every piece of evidence organized and current. ... Read more