Agentic compliance
Map once. Comply everywhere. Run easy.Compliance, from your first ISO 27001 or SOC 2 to a complete GRC program.
Our agents identify what applies to you and get it done. You make the calls.
ISO 27001 · SOC 2 · TISAX® · NIS2 · DORA · CRA · EU AI Act · ISO 42001 · GDPR
TWork
Overview
Frameworks
Tasks
Gap Audit
Questionnaires
Compliance
Evidence
Policies
Risks
Assets
Access Reviews
Vendors
Manage
Connections
Reports
Settings
Acme Inc.
Agent Control
Evidence Agent
Queued
Microsoft Entra ID · MFA report
Gap Audit Agent
Queued
Weekly run · ISO 27001:2022
Policy Agent
Queued
AI governance policy
Questionnaire Agent
Queued
Customer security review
Agent details
Select an agent to see its work.
Gap Audit AgentISO 27001:2022
Access controlPolicy and Entra ID roles match
MetAccess rightsQuarterly access review overdue
GapFix readyReview prepared from Entra ID, sent to team leads
Information backupNo restore test in the last 12 months
GapFix readyRestore test planned, runbook drafted
Awareness training12 people overdue
GapFix readyReminders sent, due within 7 days
TeddyGap Audit Agent
×Can you fix these gaps, or tell me more about them?
Today’s audit found 3 gaps:
- Access rightsQuarterly access review overdue
- Information backupNo restore test in 12 months
- Awareness training12 people overdue
3 gapsWorking
Collecting the findings from the gap audit
Checking evidence and owners
Drafting a fix for each gap
I have a fix for each gap. Want me to show you the solutions?Yes, show meNot now
Yes, show me.
Ask Teddy…
Send
Agents
Agents that do the compliance work, with you in charge
GetTeddy's agents run the recurring work inside your connected systems. Every output is versioned and traceable, so your auditor can follow it.
Certification Agent
Your path to a first ISO 27001 or SOC 2 Type II, step by step
Gap Audit Agent
A complete gap audit in minutes, daily or weekly
Evidence Agent
Collects evidence on schedules and maps it to every control
Policy Agent
Drafts policies from your real systems, in the languages your teams work in
Certification Agent
Explains what to do next and tracks every open step until the auditor arrives.
Learn more
Gap Audit Agent
Audits your whole company in minutes, daily or weekly, so new gaps surface right away instead of once a year.
Learn more
Evidence Agent
Pulls evidence from your cloud, identity and HR tools and flags anything stale.
Learn more
Policy Agent
Writes policies that match how you actually work, and flags drift.
Learn more
Agent ControlAvailable
Live across this workspace
New mission
ChatTask queueContext
Quick actions
Brief mePriorities before the audit
Run gap auditRecheck controls and evidence
Plan my workBatch the highest-impact tasks
Review AI agentsOwners, grants and kill switches
Run a gap audit on ISO 27001 and tell me what needs me.
Starting the Gap Audit Agent on ISO 27001:2022.
Gap Audit AgentRunningDone
Reading 121 controls
Checking evidence from 6 connected tools
Comparing with last week’s run
2 gaps found. 2 tasks created, 1 needs your approval.Open tasksReview
Ask Teddy, or tell it what to do…Run a gap audit on ISO 27001 and tell me what needs me.
Send
Why not just a chatbot?A chatbot writes documents.
A chatbot writes documents.
It doesn’t get you through the audit.
ChatGPT or Claude can draft a policy set in an afternoon. But they don’t know your systems, contradict themselves from one document to the next and link to no evidence. An audit needs a guided path, and someone who knows what an auditor accepts.
Generic chatbotGetTeddy
Generic textWritten from your real systems
Documents contradict each otherOne consistent program
No evidenceEvidence linked to every control
You are on your ownA compliance engineer helps you prepare for the audit
What GetTeddy does for you
For your first certificate and for programs across many frameworks.
Startups
Your first ISO 27001 or SOC 2 without a compliance team. Agents scope it, build the controls and get you ready for the auditor, so you can close the bigger deals.
Learn more →ISO 27001SOC 2TISAX®
Mid-Market
Several frameworks, one small team. Map your company once and let agents keep every framework current, from NIS2 to the next customer questionnaire.
Learn more →NIS2ISO 27001GDPR
Enterprise
Every entity on one control set. Continuous gap audits across subsidiaries and frameworks, with every result reviewable and attributable.
Learn more →DORACRAEU AI Act
Also built for CISOsSaaS companiesAI companiesLegal teams
Why GetTeddy
GetTeddy was built by former CISOs and GRC managers who ran compliance programs for years: audits, frameworks, questionnaires and the board update. The agents take on the recurring work, so your team can focus on the decisions only people can make.
Meet the founders →How we protect your data →How it works
One model of your company. Every regulation mapped onto it.
Describe your company once. GetTeddy maps every framework that applies and reuses each control and piece of evidence across all of them.
Map once
One company model
Comply everywhere
Multiple frameworks, one control set
Controls
Policies
Evidence
Contracts
Integrations
Connected to the stack you already run
GetTeddy collects evidence from your cloud, identity, HR and developer tools, so agents work on real data. Missing a system? GetTeddy offers custom integrations.
FAQ
Questions CISOs ask us
What the agents do, who approves their work and how your data is protected.
What is GetTeddy?
GetTeddy is an agentic compliance platform. It builds one model of your company, maps every regulation that applies and runs the recurring work with AI agents: evidence, gap audits, policies, questionnaires and contract reviews.
Which frameworks does GetTeddy cover?
ISO 27001, SOC 2, TISAX®, NIS2, DORA, CRA, the EU AI Act, ISO 42001 and GDPR, all on one control set. When you add a framework, GetTeddy starts from the coverage you already have.
What do the agents do on their own?
They collect evidence, run gap audits, draft policies, answer questionnaires and review contracts. Every task is labelled as automated, agent-drafted and human-approved, or yours.
What stays with my team?
Every decision. Scope, risk acceptance, policy approval, answers sent to customers and management sign-off always stay with a named person.
How is GetTeddy different from a compliance checklist tool?
Checklist tools track the work. GetTeddy's agents do it. One company model and one control set cover security, privacy, AI and product rules together, so nothing is done twice.
How do you protect my data?
With tenant isolation, encryption in transit and at rest, and a public subprocessor list. Our security page explains every measure in detail.
Do you train AI models on my data?
No. Your data is never used to train models.
Can I see what the agents did?
Yes. Every agent run is recorded in the action log with its inputs, its output and the person who approved it, so auditors can trace each result back to its source.
Can I control what each agent may do?
Yes. You set an owner, the permissions and a kill switch for every agent.
Which systems does GetTeddy connect to?
Identity providers, cloud platforms, HR systems, code repositories and device management. If a system you run is not on the list, GetTeddy offers custom integrations.
How does onboarding work?
A compliance engineer sets up your workspace with you, connects your systems and imports your existing documents. The agents start working as soon as the first systems are connected.
Can I switch from another tool?
Yes. GetTeddy imports your controls, policies and evidence from Vanta, Drata or spreadsheets, and a compliance engineer leads the cutover.
How is GetTeddy priced?
By how much work the agents take on, from one framework to multi-entity programs. Book a demo and we’ll prepare a quote for your setup.
Do I still need an auditor?
Yes. For ISO 27001, an accredited certification body decides on certification. For SOC 2, a licensed CPA firm issues the report. GetTeddy prepares the audit package and gives your auditor structured access to the evidence.
How do I get started?
Book a demo. We look at your setup together and show the agents working on your frameworks.