Compliance Mapping Template

# Compliance Mapping

## Framework Scope

- Frameworks: SOC 2 / ISO 27001 / GDPR-Light / Customer questionnaire
- Product or service in scope:
- Owner:

## Mapping Table

| Control Area | Framework Reference | Internal Control Or Artifact | Evidence | Gap | Owner | Notes |
|--------------|---------------------|------------------------------|----------|-----|-------|------|
| Access control | SOC 2 CC6 / ISO A.5 | Access review plan | Link to evidence | None | Name | |
| Risk management | ISO 27001 | Exception register | Link to register | Partial | Name | |
| Privacy | GDPR-Light | Data classification matrix | Link to matrix | Open | Name | |

## Notes

- `GDPR-Light` here means a practical product checklist for privacy-related engineering controls, not legal advice or formal compliance coverage.
- Customer-specific mappings should reference the exact questionnaire or control list used in the deal process.