Open Source Compliance & Risk Management Tools
A curated collection of the best open source tools for managing regulatory compliance and business risks.
Managed compliance for SOC 2, ISO 27001, HIPAA, and more
Stars
1,405Last commit
4 hours agoLicense
MIT
Compliance management platform where dedicated compliance officers handle your entire program, from risk assessments to audit coordination, with automated evidence collection.
Open Source Alternative to:
Continuous compliance automation for SOC 2, ISO 27001 & more
Stars
316Last commit
4 hours agoLicense
Apache-2.0
Automates evidence collection, control tracking, and audit reporting across SOC 2, ISO 27001, NIST 800-53, GDPR, and 12+ other frameworks in one platform.
Open Source Alternative to:
Get audit-ready for SOC 2, ISO 27001, HIPAA, and GDPR
Stars
2,004Last commit
5 days agoLicense
AGPL-3.0
AI-driven compliance platform that automates evidence collection, policy generation, and continuous monitoring across 580+ integrations for SOC 2, ISO 27001, HIPAA, and GDPR.
Open Source Alternative to:
AI agents that transform merchant risk decisions at scale
Stars
2,437Last commit
12 days agoLicense
Unknown
Reduce fraud, accelerate underwriting, and maintain compliance with AI-driven merchant risk intelligence for PSPs, banks, and fintechs.
Open Source Alternative to:
Build privacy-compliant cookie banners with full control
Stars
1,919Last commit
13 hours agoLicense
Apache-2.0
Open source consent management framework for modern web apps. Framework-agnostic, fully customizable, and performance-first with no vendor lock-in.
Open Source Alternative to:
Generate legal policies directly from TypeScript code
Stars
165Last commit
19 days agoLicense
Apache-2.0
Open-source policy-as-code framework that lets developers create privacy policies, terms of service, and legal agreements using TypeScript with built-in GDPR/CCPA compliance.
Open Source Alternative to:
c15t – Open-source cookie banner, built for control and lightening fast modern web apps.
c15t