Ad
Learn more

Open Source Compliance & Risk Management Tools

A curated collection of the best open source tools for managing regulatory compliance and business risks..

Managed compliance for SOC 2, ISO 27001, HIPAA, and more
  • Stars

    Stars growing over the last 30 days1,503
  • Last commit

    2 days ago
  • License

    MIT
Compliance management platform where dedicated compliance officers handle your entire program, from risk assessments to audit coordination, with automated evidence collection.

Open Source Alternative to:

Continuous compliance automation for SOC 2, ISO 27001 & more
  • Stars

    Stars growing over the last 30 days337
  • Last commit

    22 hours ago
  • License

    Apache-2.0
Automates evidence collection, control tracking, and audit reporting across SOC 2, ISO 27001, NIST 800-53, GDPR, and 12+ other frameworks in one platform.

Open Source Alternative to:

Get audit-ready for SOC 2, ISO 27001, HIPAA, and GDPR
  • Stars

    Stars growing over the last 30 days2,086
  • Last commit

    4 days ago
  • License

    AGPL-3.0
AI-driven compliance platform that automates evidence collection, policy generation, and continuous monitoring across 580+ integrations for SOC 2, ISO 27001, HIPAA, and GDPR.

Open Source Alternative to:

Build privacy-compliant cookie banners with full control
  • Stars

    Stars growing over the last 30 days2,020
  • Last commit

    2 days ago
  • License

    Apache-2.0
Open source consent management framework for modern web apps. Framework-agnostic, fully customizable, and performance-first with no vendor lock-in.

Open Source Alternative to:

AI agents that transform merchant risk decisions at scale
  • Stars

    2,450
  • Last commit

    1 month ago
  • License

    Unknown
Reduce fraud, accelerate underwriting, and maintain compliance with AI-driven merchant risk intelligence for PSPs, banks, and fintechs.

Open Source Alternative to:

Generate legal policies directly from TypeScript code
  • Stars

    165
  • Last commit

    4 days ago
  • License

    Apache-2.0
Open-source policy-as-code framework that lets developers create privacy policies, terms of service, and legal agreements using TypeScript with built-in GDPR/CCPA compliance.

Open Source Alternative to: