nowfound

AI · August 4, 2026

Ex-Deloitte auditor open-sourced the whole SOC 2 method for your AI

The complete Chiaro methodology for SOC 2 readiness and audit. Controls, criteria, evidence standards, and every judgment call, published so you can check it. - Chiaro-HQ/methodology

Ex-Deloitte auditor open-sourced the whole SOC 2 method for your AI launched on August 4, 2026 with 36 votes, #653 of 23,274 launches that month and more than 95% of that year's launches.

Visit github.com ↗Alternativestop 3% of August 2026

In plain words

This open-source project provides a complete SOC 2 compliance methodology for AI systems, created by a former Deloitte auditor. It offers frameworks and documentation for implementing security and compliance controls specifically designed for AI applications. The resource is hosted on GitHub and available for developers and organizations building AI systems who need structured guidance on meeting SOC 2 standards without proprietary tools or consulting fees.

written from the facts on this page · September 2026

From the sources

This is the complete Chiaro methodology for SOC 2 readiness and audit: the control library we test against, the criteria each control maps to, the evidence we accept, and the rules the collection runs under. Readiness and the examination run on the same framework, so the bar a company prepares against is the bar the examination applies. It is published because the alternative to showing your work is asking people to take it on faith, and a compliance industry that ran on faith is why anyone is reading this. The attributes carry 552 worked examples of a judgment call between them, each recording a verdict an AI reached, the verdict that was correct, and why. They exist to calibrate judgment,…from github.com

Does a similar job

all alternatives →
  • Comp AI2025 · trycomp.ai · ▲612

    Hey HN, We’re the founders of Comp AI (https://github.com/trycompai/comp), an open source alternative to Drata & Vanta. Our goal is to help 100,000 companies get compliant with frameworks like SOC 2, ISO 27001 and GDPR over the next five years. To support that goal, we’re trying to make the platform as self serve as possible - so founders who’ve never been through the process can start to get compliant at any stage. Any feedback is appreciated

  • Comply2018 · strongdm.com · ▲105

    Everything you need to complete SOC2 (Open Source)

  • Control2021 · ▲168

    Accelerate and automate security & SOC2 compliance for free

  • Conduct, open-source guardrails for LLM and MCP tool callsAug 2026 · github.com · ▲22

    Runtime governance for AI agents. Allow, warn, or block every model and tool call before it commits. Hash-chained audit for every decision. Compliance packs for SOC 2, HIPAA, PCI DSS, EU AI Act, SR 11-7, and FDA CSA. Apache 2.0. - sseshachala/conductai

  • DSALTANov 2025 · dsalta.com · ▲48

    AI Agents for SOC2/ISO27001/GDPR — Vanta & Drata alternative

  • Compliance AIJun 2026 · compliance.cyberglobal.ai · ▲4

    AI audit reports for SOX, SOC 2, and ISO 27001

More ai this month

the category →
  • Video model that turns script into viral social media videos

    AI · 18d ago · spira.ai

  • The browser where Claude Code and Codex work beside you

    AI · 18d ago · rill.love

  • Kolibri is Aleph Alpha

    AI · 20d ago · tej.as

  • Paintings by AI models: programs run through a simulation of oil paint.

    AI · 21d ago · stillwet.art

  • A real-time world model you can explore and change

    AI · 30d ago · world.pixverse.video

  • Beam.win▲378

    Run AI agents on one Mac and use its windows on another

    AI · 5d ago · beam.win

Source: Show HN post ↗

Launched alongside, August 2026

the whole month →
  • TL

    Life & fun · Aug 2026 · louisabraham.github.io

  • Hey Noah▲656

    A proactive AI executive assistant for founders

    AI · Aug 2026 · heynoah.io

  • Hey HN, We recently built Clipto. It’s a tool that lets you search over terabytes of video, audio, and images on your computer, without relying on the cloud. Motivation: we probably all had this similar experience, we know a moment exists in a video or audio, but finding it takes hours scrubbing the timeline. You can send all the media to process in the cloud, but it’s slow, expensive and raises privacy concerns. So we decided to build our own on-device media search engine. How it works (high level): 1. We ingest video, audio, image; normalize formats via ffmpeg; run content analysis to…

    Work · Aug 2026 · clipto.com

  • Hello HN! I found that picking out plausible but diverse skin tones for my digital art and game development projects was kind of difficult, and I got curious about if there was a way to define a color space that made it easy. I've built a color picker and procedural generation algorithm based on the space as well as a bunch of other fun js features and demos throughout the page that use the equations. If you find it interesting, I have lots of explanations of how I built it and what properties the space has. The methodology might be a bit shaky, but hopefully the result is as helpful for…

    Life & fun · Aug 2026 · toneyalexander.github.io

  • AdAnt AI▲620

    Claude for viral, high-converting social ads

    AI · Aug 2026 · adant.ai

  • Astute▲606

    Automate your B2B brand going viral, with new media creators

    AI · Aug 2026 · company-app.joinastute.com