RegProof

RegProof is a web app (with optional Slack/Teams integration) that helps small and mid-sized companies stay audit-ready by continuously collecting, organizing, and timestamping compliance evidence. Instead of building a full GRC platform, it focuses on the ugly middle: mapping controls to real artifacts (policies, tickets, access logs, vendor docs), reminding owners, and generating an “evidence pack” on demand for SOC 2, ISO 27001, HIPAA, or internal audits. It connects to common systems (Google Workspace/Microsoft 365, Jira, GitHub, AWS) to pull lightweight proofs and flags gaps when evidence is stale or missing. It also includes a simple risk register and exception workflow so teams can document why something isn’t perfect yet. The goal is not to replace auditors or legal counsel; it’s to reduce scramble time and prevent failed audits due to missing documentation.