PolicyProof

PolicyProof is a web app (with lightweight desktop agent) that helps SMBs and startups survive compliance audits by continuously collecting evidence that policies are actually followed. Instead of writing yet another policy document, it connects to the tools companies already use (Google Workspace/Microsoft 365, GitHub, Jira, AWS) and maps real activity to common controls (SOC 2, ISO 27001-lite, HIPAA-lite). It generates an evidence library with timestamps, screenshots/log exports, and change history, then produces auditor-friendly packets per control. It also flags “paper compliance” gaps (e.g., access reviews not happening, MFA not enforced, dormant accounts) and assigns tasks with due dates. This is a combination traditional + AI app: AI helps classify artifacts, draft narratives, and answer auditor questions, but the core value is reliable integrations and immutable evidence trails.