Safeguard Docs

All frameworks

Every one of the 373 frameworks in Safeguard's library, grouped by region.

Safeguard's framework library has 373 frameworks. Each links to its page: what a scan checks, its controls, its policy templates and its automated tests. How coverage works: Compliance frameworks.

Americas (107)

FrameworkCountry or scopeSector
Anguilla Data Protection Act 2020AnguillaPrivacy
Antigua and Barbuda Data Protection Act 2013Antigua and BarbudaPrivacy
Argentina PDPL (Law 25.326)ArgentinaPrivacy
Aruba Personal Data Protection OrdinanceArubaPrivacy
Bahamas Data Protection Act 2003BahamasPrivacy
Barbados Data Protection Act 2019BarbadosPrivacy
Belize Data Protection Act 2021BelizePrivacy
Bermuda Personal Information Protection Act 2016BermudaPrivacy
Bolivia Supreme Decree 1793BoliviaPrivacy
Brazil LGPDBrazilPrivacy
British Virgin Islands Data Protection Act 2021British Virgin IslandsPrivacy
Canada CPPACanadaPrivacy
Canada PIPEDACanadaPrivacy
Cayman Islands Data Protection Act 2017Cayman IslandsPrivacy
CCPA / CPRAUnited StatesPrivacy
Chile Law 19.628ChilePrivacy
CMMC 2.0United StatesDefense
Colombia Law 1581ColombiaPrivacy
Colorado CPAUnited StatesPrivacy
Connecticut CTDPAUnited StatesPrivacy
COPPAUnited StatesPrivacy
Costa Rica Law No. 8968 on Personal DataCosta RicaPrivacy
Cuba Law 149/2022 on Personal Data ProtectionCubaPrivacy
Curacao Personal Data Protection OrdinanceCuracaoPrivacy
Delaware PDPAUnited StatesPrivacy
DFARS 252.204-7012United StatesDefense
Dominica National ICT / Privacy FrameworkDominicaPrivacy
Dominican Republic Law No. 172-13 on Personal DataDominican RepublicPrivacy
Ecuador Organic Law on Personal Data ProtectionEcuadorPrivacy
El Salvador Cybersecurity and Information Security Law 2024El SalvadorGovernment
El Salvador Personal Data Protection Law 2024El SalvadorPrivacy
Falkland Islands Data Protection OrdinanceFalkland IslandsPrivacy
FCRA / FACTAUnited StatesFinance
FDA 21 CFR Part 11United StatesHealthcare
FDA Medical DeviceUnited StatesHealthcare
FedRAMPUnited StatesCloud
FERPAUnited StatesEducation
FFIEC CATUnited StatesFinance
FIPS 140-3United StatesGovernment
FISMAUnited StatesGovernment
Florida Digital Bill of RightsUnited StatesPrivacy
FTC Safeguards RuleUnited StatesFinance
GLBAUnited StatesFinance
Greenland Data Protection ActGreenlandPrivacy
Grenada National ICT / Privacy FrameworkGrenadaPrivacy
Guatemala Ley de Acceso a la Informacion PublicaGuatemalaPrivacy
Guyana Data Protection Act 2023GuyanaPrivacy
Haiti National Privacy FrameworkHaitiPrivacy
HIPAA / HITECHUnited StatesHealthcare
HIPAA Security RuleUnited StatesHealthcare
HITRUST CSFUnited StatesHealthcare
Honduras Ley de Transparencia (Habeas Data)HondurasPrivacy
Illinois BIPAUnited StatesPrivacy
Indiana CDPAUnited StatesPrivacy
Iowa CDPAUnited StatesPrivacy
Jamaica DPAJamaicaPrivacy
Maryland MODPAUnited StatesPrivacy
Massachusetts 201 CMR 17.00United StatesPrivacy
Mexico LFPDPPPMexicoPrivacy
Minnesota CDPAUnited StatesPrivacy
Montana CDPAUnited StatesPrivacy
Montserrat National ICT / Privacy FrameworkMontserratPrivacy
NDAA Section 889United StatesDefense
NERC CIPUnited StatesEnergy
New Hampshire DPAUnited StatesPrivacy
New Jersey CDPAUnited StatesPrivacy
Nicaragua Law No. 787 on Personal DataNicaraguaPrivacy
NIST AI RMFUnited StatesAI
NIST CSF 2.0United StatesGovernment
NIST CSF 2.0 (Full)United StatesGovernment
NIST Privacy FrameworkUnited StatesPrivacy
NIST SP 800-161United StatesGovernment
NIST SP 800-171United StatesDefense
NIST SP 800-207United StatesGovernment
NIST SP 800-218AUnited StatesAI
NIST SP 800-37 RMFUnited StatesGovernment
NIST SP 800-53United StatesGovernment
NIST SP 800-63United StatesGovernment
NIST SP 800-66 r2United StatesHealthcare
NIST SP 800-82United StatesEnergy
NIST SSDFUnited StatesGovernment
NY DFS 23 NYCRR 500United StatesFinance
NY SHIELD ActUnited StatesPrivacy
Oregon OCPAUnited StatesPrivacy
Panama Law No. 81 of 2019 on Personal DataPanamaPrivacy
Paraguay Law No. 6534/2020 on Personal DataParaguayPrivacy
Peru Law 29733PeruPrivacy
Puerto Rico Act 111-2005 / US FrameworksPuerto RicoPrivacy
Quebec Law 25CanadaPrivacy
Saint Kitts and Nevis Data Protection Act 2018Saint Kitts and NevisPrivacy
Saint Lucia Data Protection ActSaint LuciaPrivacy
Saint Vincent National ICT / Privacy FrameworkSaint Vincent and the GrenadinesPrivacy
SOC2 Type 1United StatesGeneral
SOC2 Type 2United StatesGeneral
SOX ITGCUnited StatesFinance
StateRAMPUnited StatesCloud
Suriname National Privacy FrameworkSurinamePrivacy
Tennessee TIPAUnited StatesPrivacy
Texas TDPSAUnited StatesPrivacy
Trinidad and Tobago Data Protection Act 2011Trinidad and TobagoPrivacy
TSA Pipeline Security DirectivesUnited StatesEnergy
Turks and Caicos Data Protection OrdinanceTurks and CaicosPrivacy
Uruguay Law 18.331UruguayPrivacy
Utah UCPAUnited StatesPrivacy
Venezuela Constitutional Habeas DataVenezuelaPrivacy
Virginia CDPAUnited StatesPrivacy
Washington My Health My Data ActUnited StatesHealthcare

Europe (76)

FrameworkCountry or scopeSector
Aland Finnish Data Protection ActAlandPrivacy
Albania Law No. 9887 on Protection of Personal DataAlbaniaPrivacy
Andorra Qualified Law 29/2021 on Personal Data ProtectionAndorraPrivacy
Armenia Law on Protection of Personal DataArmeniaPrivacy
Austria Data Protection Act (DSG)AustriaPrivacy
Azerbaijan Law on Personal DataAzerbaijanPrivacy
Belarus Law No. 99-Z on Personal Data ProtectionBelarusPrivacy
Belgium Data Protection Act 2018BelgiumPrivacy
Bosnia and Herzegovina Law on Protection of Personal DataBosnia and HerzegovinaPrivacy
BSI IT-GrundschutzGermanyGovernment
BSI TR-03183-2GermanyGovernment
Bulgaria Personal Data Protection ActBulgariaPrivacy
Croatia Act on Implementation of the GDPR 2018CroatiaPrivacy
Cyprus Law 125(I)/2018CyprusPrivacy
Czechia Act No. 110/2019 on Personal Data ProcessingCzechiaPrivacy
Denmark Data Protection Act 2018DenmarkPrivacy
ENISA Good PracticesEuropean UnionGovernment
Estonia EISA / ISKEEstoniaGovernment
ETSI EN 303 645European UnionIoT
EU AI ActEuropean UnionAI
EU Cyber Resilience ActEuropean UnionGovernment
EU Cybersecurity ActEuropean UnionGovernment
EU Data ActEuropean UnionPrivacy
EU Digital Markets ActEuropean UnionPrivacy
EU Digital Services ActEuropean UnionPrivacy
EU DORAEuropean UnionFinance
EU eIDAS RegulationEuropean UnionGovernment
EU NIS2 DirectiveEuropean UnionGovernment
EU PSD2European UnionFinance
Faroe Islands Data Protection ActFaroe IslandsPrivacy
Finland Data Protection Act (1050/2018)FinlandPrivacy
France ANSSI RGSFranceGovernment
GDPREuropean UnionPrivacy
GDPR Article 25European UnionPrivacy
Georgia Law on Information SecurityGeorgiaGovernment
Georgia Law on Personal Data Protection 2023GeorgiaPrivacy
Gibraltar Data Protection Act 2004GibraltarPrivacy
Greece Law 4624/2019GreecePrivacy
Guernsey Data Protection Law 2017GuernseyPrivacy
Holy See Data Protection FrameworkHoly See (Vatican)Privacy
Hungary Act CXII of 2011 (Infotv)HungaryPrivacy
Iceland Act on Data Protection No. 90/2018IcelandPrivacy
Ireland Data Protection Act 2018IrelandPrivacy
Isle of Man Data Protection Act 2018Isle of ManPrivacy
Italy ACN CybersecurityItalyGovernment
Jersey Data Protection Law 2018JerseyPrivacy
Kosovo Law No. 06/L-082 on Protection of Personal DataKosovoPrivacy
Latvia Personal Data Processing Law 2018LatviaPrivacy
Liechtenstein Data Protection Act (DSG) 2018LiechtensteinPrivacy
Lithuania Law on Legal Protection of Personal DataLithuaniaPrivacy
Luxembourg Data Protection Law of 1 August 2018LuxembourgPrivacy
Malta Data Protection Act (Cap. 586) 2018MaltaPrivacy
Moldova Law No. 133 on Personal Data ProtectionMoldovaPrivacy
Monaco Law No. 1.165 on Personal DataMonacoPrivacy
Montenegro Law on Personal Data ProtectionMontenegroPrivacy
Netherlands NEN 7510NetherlandsHealthcare
North Macedonia Law on Personal Data Protection 2020North MacedoniaPrivacy
Norway NSM Basic PrinciplesNorwayGovernment
Poland KSC ActPolandGovernment
Portugal Law No. 58/2019PortugalPrivacy
Romania Law No. 190/2018RomaniaPrivacy
Russia Federal Law 152-FZ on Personal DataRussiaPrivacy
Russia Federal Law 187-FZ on Critical Information InfrastructureRussiaGovernment
San Marino Law 171/2018 on Data ProtectionSan MarinoPrivacy
Serbia Law on Personal Data Protection 2018SerbiaPrivacy
Slovakia Act No. 18/2018 on Personal Data ProtectionSlovakiaPrivacy
Slovenia Personal Data Protection Act (ZVOP-2)SloveniaPrivacy
Spain ENS (RD 311/2022)SpainGovernment
Sweden Data Protection Act (2018:218)SwedenPrivacy
Switzerland revFADPSwitzerlandPrivacy
TISAXGermanyAutomotive
UK Cyber EssentialsUnited KingdomGovernment
UK GDPR / DPA 2018United KingdomPrivacy
UK NCSC CAFUnited KingdomGovernment
Ukraine Law on Basic Principles of Cyber Security 2017UkraineGovernment
Ukraine Law on Protection of Personal Data (2297-VI)UkrainePrivacy

Asia-Pacific (62)

FrameworkCountry or scopeSector
Afghanistan National Privacy FrameworkAfghanistanPrivacy
Australia ACSC ISMAustraliaGovernment
Australia Essential EightAustraliaGovernment
Australia Privacy ActAustraliaPrivacy
Australia SOCI ActAustraliaGovernment
Bangladesh Cyber Security Act 2023BangladeshGovernment
Bhutan ICM Act 2018 (Data Protection)BhutanPrivacy
Brunei Personal Data Protection Order 2025BruneiPrivacy
Cambodia E-Commerce Law 2019 (Data Protection)CambodiaPrivacy
China Cybersecurity LawChinaGovernment
China Data Security LawChinaPrivacy
China MLPS 2.0ChinaGovernment
China PIPLChinaPrivacy
DPRK National Data FrameworkNorth KoreaPrivacy
Fiji Cybercrime Act 2021FijiGovernment
Fiji National ICT / Privacy FrameworkFijiPrivacy
French Polynesia Loi Informatique et LibertesFrench PolynesiaPrivacy
Guam Data Breach Law / US FrameworksGuamPrivacy
Hong Kong PDPOHong KongPrivacy
India CERT-InIndiaGovernment
India DPDP ActIndiaPrivacy
Indonesia PDP LawIndonesiaPrivacy
Japan APPIJapanPrivacy
Japan ISMAPJapanCloud
Japan METI SBOM GuidelinesJapanGovernment
Kazakhstan Law on Personal Data and its ProtectionKazakhstanPrivacy
Kiribati National ICT / Privacy FrameworkKiribatiPrivacy
Korea ISMS-PSouth KoreaPrivacy
Kyrgyzstan Law on Personal InformationKyrgyzstanPrivacy
Laos Law on Electronic Data Protection 2017LaosPrivacy
Macau PDPAMacauPrivacy
Malaysia PDPAMalaysiaPrivacy
Maldives National Privacy FrameworkMaldivesPrivacy
Marshall Islands National ICT / Privacy FrameworkMarshall IslandsPrivacy
MAS TRMGSingaporeFinance
Micronesia National ICT / Privacy FrameworkMicronesiaPrivacy
Mongolia Law on Personal Data Protection 2021MongoliaPrivacy
Myanmar Law Protecting Privacy and Security of Citizens 2017MyanmarPrivacy
Nauru National ICT / Privacy FrameworkNauruPrivacy
Nepal Individual Privacy Act 2018NepalPrivacy
New Caledonia Loi Informatique et LibertesNew CaledoniaPrivacy
New Zealand NZISMNew ZealandGovernment
Pakistan PDPBPakistanPrivacy
Palau National ICT / Privacy FrameworkPalauPrivacy
Papua New Guinea Cybercrime Code Act 2016Papua New GuineaGovernment
Philippines Data Privacy ActPhilippinesPrivacy
Samoa National ICT / Privacy FrameworkSamoaPrivacy
Singapore Cybersecurity ActSingaporeGovernment
Singapore PDPASingaporePrivacy
Solomon Islands National ICT / Privacy FrameworkSolomon IslandsPrivacy
South Korea PIPASouth KoreaPrivacy
Sri Lanka Personal Data Protection Act No. 9 of 2022Sri LankaPrivacy
Taiwan PDPATaiwanPrivacy
Tajikistan Law on Protection of Personal DataTajikistanPrivacy
Thailand PDPAThailandPrivacy
Timor-Leste National Privacy FrameworkTimor-LestePrivacy
Tonga National ICT / Privacy FrameworkTongaPrivacy
Turkmenistan Law on Information about Private LifeTurkmenistanPrivacy
Tuvalu National ICT / Privacy FrameworkTuvaluPrivacy
Uzbekistan Law on Personal DataUzbekistanPrivacy
Vanuatu National ICT / Privacy FrameworkVanuatuPrivacy
Vietnam Decree 13/2023VietnamPrivacy

Middle East & Africa (76)

FrameworkCountry or scopeSector
Algeria Law No. 18-07 on Protection of Personal DataAlgeriaPrivacy
Angola Law No. 22/11 on Protection of Personal DataAngolaPrivacy
Bahrain PDPLBahrainPrivacy
Benin Digital Code 2018 (Personal Data)BeninPrivacy
Botswana Data Protection Act 2018BotswanaPrivacy
Burkina Faso Law No. 010-2004 on Personal DataBurkina FasoPrivacy
Cameroon Law 2010/012 on CybersecurityCameroonGovernment
Cape Verde Law No. 133/V/2001 on Personal DataCape VerdePrivacy
Chad Law No. 007/PR/2015 on Protection of Personal DataChadPrivacy
Congo Law 29-2019 on Data ProtectionRepublic of the CongoPrivacy
Cote d'Ivoire Law No. 2013-450 on Personal DataCote d'IvoirePrivacy
DR Congo Digital Code 2023 (Personal Data)DR CongoPrivacy
Egypt PDPL (Law 151/2020)EgyptPrivacy
Eswatini Data Protection Act 2022EswatiniPrivacy
Ethiopia Personal Data Protection Proclamation 1321/2024EthiopiaPrivacy
Gabon Law No. 001/2011 on Protection of Personal DataGabonPrivacy
Ghana Data Protection ActGhanaPrivacy
Guinea Law L/2016/037 on Data ProtectionGuineaPrivacy
Iran Computer Crimes Law 2009IranGovernment
Iraq National Privacy FrameworkIraqPrivacy
Israel INCDIsraelGovernment
Jordan PDP LawJordanPrivacy
Kenya Data Protection Act 2019KenyaPrivacy
Kuwait Cybersecurity LawKuwaitGovernment
Lebanon Law 81LebanonPrivacy
Lesotho Data Protection Act 2011LesothoPrivacy
Madagascar Law No. 2014-038 on Protection of Personal DataMadagascarPrivacy
Malabo Convention (AU) - BurundiBurundiPrivacy
Malabo Convention (AU) - Central African RepublicCentral African RepublicPrivacy
Malabo Convention (AU) - ComorosComorosPrivacy
Malabo Convention (AU) - DjiboutiDjiboutiPrivacy
Malabo Convention (AU) - Equatorial GuineaEquatorial GuineaPrivacy
Malabo Convention (AU) - EritreaEritreaPrivacy
Malabo Convention (AU) - GambiaGambiaPrivacy
Malabo Convention (AU) - Guinea-BissauGuinea-BissauPrivacy
Malabo Convention (AU) - LiberiaLiberiaPrivacy
Malabo Convention (AU) - LibyaLibyaPrivacy
Malabo Convention (AU) - MozambiqueMozambiquePrivacy
Malabo Convention (AU) - NamibiaNamibiaPrivacy
Malabo Convention (AU) - Sao TomeSao Tome and PrincipePrivacy
Malabo Convention (AU) - Sierra LeoneSierra LeonePrivacy
Malabo Convention (AU) - South SudanSouth SudanPrivacy
Malabo Convention (AU) - SudanSudanPrivacy
Malawi Data Protection Act 2024MalawiPrivacy
Mali Law No. 2013-015 on Protection of Personal DataMaliPrivacy
Mauritania Law 2017-020 on Data ProtectionMauritaniaPrivacy
Mauritius Data Protection Act 2017MauritiusPrivacy
Morocco Law 09-08MoroccoPrivacy
Niger Law No. 2017-28 on Protection of Personal DataNigerPrivacy
Nigeria NDPR / NDPANigeriaPrivacy
Oman PDPLOmanPrivacy
Palestine Data Protection FrameworkPalestinePrivacy
Qatar PDPLQatarPrivacy
Rwanda Law No. 058/2021 on Protection of Personal DataRwandaPrivacy
SAMA Cybersecurity FrameworkSaudi ArabiaFinance
Saudi Arabia NCA ECCSaudi ArabiaGovernment
Saudi PDPLSaudi ArabiaPrivacy
Senegal Law No. 2008-12 on Protection of Personal DataSenegalPrivacy
Seychelles Data Protection Act 2003SeychellesPrivacy
Sierra Leone Cyber Security and Crime Act 2021Sierra LeoneGovernment
Somalia Data Protection Act 2023SomaliaPrivacy
South Africa POPIASouth AfricaPrivacy
Syria Cybercrime Law No. 20 of 2022SyriaGovernment
Syria National Privacy FrameworkSyriaPrivacy
Tanzania Cybercrimes Act 2015TanzaniaGovernment
Tanzania Personal Data Protection Act 2022TanzaniaPrivacy
Togo Law No. 2019-014 on Protection of Personal DataTogoPrivacy
Tunisia Organic Law No. 2004-63 on Personal DataTunisiaPrivacy
Turkey KVKKTurkeyPrivacy
UAE NESA IA StandardsUnited Arab EmiratesGovernment
UAE PDPLUnited Arab EmiratesPrivacy
Uganda Data Protection and Privacy Act 2019UgandaPrivacy
Yemen National Privacy FrameworkYemenPrivacy
Zambia Cyber Security and Cyber Crimes Act 2021ZambiaGovernment
Zambia Data Protection Act No. 3 of 2021ZambiaPrivacy
Zimbabwe Cyber and Data Protection Act 2021ZimbabwePrivacy

International (41)

FrameworkCountry or scopeSector
CIS Controls v8InternationalGeneral
Common Criteria (CC)InternationalGeneral
CSA Cloud Controls MatrixInternationalCloud
CSA STARInternationalCloud
CycloneDX VEXInternationalSupply Chain
DO-326AInternationalAerospace
GxP (GMP/GLP/GCP)InternationalHealthcare
IEC 62304InternationalHealthcare
IEC 62443InternationalEnergy
IEC 62443-4-2InternationalEnergy
in-totoInternationalSupply Chain
ISO 22301InternationalGeneral
ISO 28000InternationalSupply Chain
ISO 31000InternationalGeneral
ISO/IEC 20000InternationalGeneral
ISO/IEC 21434InternationalAutomotive
ISO/IEC 27001InternationalGeneral
ISO/IEC 27002:2022InternationalGeneral
ISO/IEC 27005InternationalGeneral
ISO/IEC 27017InternationalCloud
ISO/IEC 27018InternationalCloud
ISO/IEC 27032InternationalGeneral
ISO/IEC 27035InternationalGeneral
ISO/IEC 27701InternationalPrivacy
ISO/IEC 29147InternationalGeneral
ISO/IEC 42001InternationalAI
ISO/IEC 5962 (SPDX)InternationalGeneral
MITRE ATT&CKInternationalGeneral
O-TTPS / ISO 20243InternationalSupply Chain
OpenChain ISO 5230InternationalOpen Source
OpenSSF ScorecardInternationalOpen Source
OWASP ASVSInternationalApplication Security
OWASP CycloneDX BOMInternationalApplication Security
OWASP MASVSInternationalApplication Security
OWASP SCVSInternationalApplication Security
OWASP Top 10InternationalApplication Security
PCI DSS 4.0 (Full)InternationalFinance
PCI DSS v4.0InternationalFinance
SLSA Supply ChainInternationalSupply Chain
SWIFT CSCFInternationalFinance
UNECE WP.29InternationalAutomotive

Internal (11)

FrameworkCountry or scopeSector
CISA KEV CorrelationInternalSupply Chain
Component HealthInternalSupply Chain
Crypto Algorithm AuditInternalGeneral
Dependency AgeInternalSupply Chain
Duplicate DetectionInternalSupply Chain
License ObligationsInternalOpen Source
Provenance ChainInternalSupply Chain
Supply Chain Risk ScoreInternalSupply Chain
Transitive DepthInternalSupply Chain
Typosquatting DetectionInternalSupply Chain
VEX ReadinessInternalSupply Chain

Approvals

Every compliance decision that waits for a person, who may make it, and why assistants and auditors cannot make it for you.

Abbreviations and Descriptions

Glossary of terms used in Safeguard documentation

On this page

Americas (107)Europe (76)Asia-Pacific (62)Middle East & Africa (76)International (41)Internal (11)