RDS GoSOC AI
C3PAOs · SOC 2 CPA firms · ISO certification bodies · FedRAMP 3PAOs · PCI QSAs

We're independent of you. You're independent of us.

RDS GoSOC AI is an AI security operations and compliance platform that organizations use to prepare for and track their own compliance work. It covers 27 frameworks. If you'd like to see it, ask for a demo. There's nothing to buy and nothing to sign up to.

  • ✓RDS does not assess or certify anyone
  • ✓No cost, fee, commission or referral arrangement, in either direction
  • ✓Clients choose their own assessor

Request a demo

It's free. We reply by email to find a time.

Where we stand

We don't assess or certify anyone.
The platform's scores are an organization's own readiness estimates. They are not an assessment result and don't stand in for your judgment.
No money moves, in either direction.
There is no cost, fee, commission or referral arrangement with assessment firms. Talking to us is free, and we don't pay you for introductions.
We're not asking you to sell, supply or recommend the platform.
As we read the CMMC Code of Professional Conduct v2.0, Example A.2, a C3PAO supplying tools to a client cannot assess that client for Level 2 for three years. We won't put you in that position.
Other programs have their own independence rules.
AICPA rules for SOC 2, ISO/IEC 17021-1 for certification bodies, FedRAMP for 3PAOs and the PCI QSA program each set their own limits. Check with your compliance lead for what applies to your firm.
Clients choose their own assessor.
We don't steer clients to any firm. Authorized C3PAOs are listed on the Cyber AB Marketplace.
There's no assessor login.
A demo is a walk-through, so you know what the platform is if a client mentions it. Nothing in it gives you access to any organization's data.

The 27 frameworks

Each one is a control catalog an organization can self-assess against. Covering a framework means the catalog is there. It doesn't mean an organization meets that framework.

US defense and federal

  • CMMC 2.0 Level 1
  • CMMC 2.0 Level 2
  • CMMC 2.0 Level 3
  • FedRAMP Low (partial)
  • FedRAMP Moderate (partial)
  • FedRAMP High (partial)
  • DoD STIG Readiness (General Purpose OS SRG)
  • NIST SP 800-53 Rev 5 (AI-relevant subset)

General security and sector

  • NIST Cybersecurity Framework 2.0
  • SOC 2 Trust Services Criteria
  • ISO/IEC 27001:2022 Annex A
  • PCI DSS v4.0
  • HIPAA Security Rule

AI

  • EU AI Act
  • ISO/IEC 42001:2023
  • NIST AI Risk Management Framework 1.0
  • NIST AI 600-1 Generative AI Profile

EU and African privacy and security

  • NIS2 Directive
  • GDPR
  • Rwanda Law N° 058/2021
  • South Africa POPIA
  • Kenya Data Protection Act, 2019
  • Nigeria Data Protection Act, 2023
  • African Union Malabo Convention

Operational technology

  • IEC 62443-3-3
  • NIST SP 800-82 Rev. 3
  • NERC CIP

Know an MSP or consultant in this space?

Our partner program is for MSPs and compliance consultants only. Assessment firms aren't eligible, and nothing is paid for passing the page along.