Solutions · Compliance
New requirements.
Same foundation.
A new regulation should not become a new system. In Paragraf a requirement becomes a Control with an owner, a routine and evidence – next to the contracts and processes it concerns, under the same permissions.
- RegulationNIS2 art. 21.2 d
- ClauseSupplier agreement § 14.2
- OwnerCISO
- RoutineSupplier review, step 3 of 5
- EvidenceSigned with BankID
14 Oct 09:42 · chain unbroken
Controls
See what is missing – and watch it get fixed.
Every Control has an owner and the evidence it needs. When evidence is missing or about to expire, a task goes to the right person, and the Control turns current when the evidence arrives.
- RequirementAn article in NIS2, DORA or GDPR, or a clause in ISO 27001.
- ControlWhat you do to meet it – with an owner.
- TaskAn Obligation Task with a date, recurring when it should be.
- EvidenceA document, a signed review or a completed Form – with its validity.
- ReviewApproved by someone, logged for the auditor.
- Incident reporting within 24 hoursOwner · Security OfficerCurrent
- Supplier security reviewOwner · Head of ProcurementMissing
- Access review, quarterlyOwner · IT ManagerCurrent
- Business continuity testOwner · CISOExpires in 12 days
- Board approval of risk measuresOwner · CEOCurrent
- Security training for staffOwner · HR ManagerMissing
Frameworks
Start with the requirement you have today.
Use the frameworks in Paragraf or add your own requirements and policies. The same Controls can answer several frameworks at once, so the work is done once.
With Luis
Ask what a requirement means. Get the source.
Luis knows your frameworks article by article – NIS2, GDPR, ISO 27001 and more – and your own Controls. He points to the requirement, shows which Controls lack evidence and prepares the tasks – you review before anything is saved.
Compliance that runs, not compliance that waits for the audit.
Owners, routines and evidence keep moving all year – so the audit is a look, not a project.

Compliance is one door. Behind it is the whole house.
Your own processesLuisContracts · Compliance · Processes · FormsThe foundation Explore the foundation →Next step
Fewer systems.
More control.
Book a walkthrough of your systems and requirements. We show you the thread from requirement to proof – with your own requirements.