Module · Document compliance
The module links a framework’s requirements to the controls actually applied, to the evidence available and to the gaps still to be addressed. It lets you track the action plan and prepare a report for an audit or a management review.
Understand the risk. Take back control. Stay the course.
Hosted in France by Scaleway · Mistral AI (EU) · to prepare for and document GDPR, NIS 2 and DORA.
Frameworks and obligations only have operational value if they translate into responsibilities, controls, evidence and decisions that are followed up. A stack of documents that is never applied is not compliance: it is one more risk. Galyct Pro links each requirement to a real practice and to a usable record, so that your documentation reflects your organisation, and stands up in an audit.
Covered, explained, and above all linked to decisions, because a cyber decision must be explainable after the fact.
Information security management system: from the statement of applicability to the evidence. We align the structuring practices (policies, controls, indicators, management review, continual improvement) without turning certification into a bureaucratic monster.
Request a demo →The European directive greatly extends the number of organisations subject to obligations, essential and important entities, across some eighteen sectors. Risk analysis and management, hygiene measures, supply chain security, incident notification, continuity, and stronger accountability for management.
Request a demo →Applicable since 17 January 2025, the regulation imposes a demanding framework on the financial sector (and its ICT providers): ICT risk management, notification of major incidents, resilience testing, third-party risk management (register, clauses, exit) and sharing of threat information.
Request a demo →Record of processing activities, impact assessments, oversight of processors and notification of a breach within the deadline, without cosmetic compliance. We keep a record of decisions, approvals and exceptions rather than piling up decorative documents.
Request a demo →Two concrete capabilities to turn a regulatory obligation into material you can present, and to react without improvising on the day a breach occurs.
Document what you do, not the other way round.
React within the deadline, without destroying the evidence.
Proportionate steering: formal enough to be defensible, simple enough to be genuinely applied by the teams.
Compliance reduces improvisation, improves traceability and makes trade-offs easier. On its own, it does not guarantee that no incident will occur. No result is guaranteed: what we commit to is usable material and traceable decisions.
The applicable obligations must be confirmed according to the activity, the sector, the contracts and the legal context. Software does not decide your regulatory scope for you.
Compliance can incorporate audit findings, but it does not replace technical checks when they are needed. The two complement each other; neither replaces the other.
A useless document, or one that is never applied, sometimes increases the risk instead of reducing it. We only produce the evidence and policies strictly useful for steering.
Galyct Pro informs the trade-offs; accepting residual risk and allocating resources are matters for management. The responsibility remains yours, and so does the traceability.
A 30-minute live demo on the frameworks that apply to you: ISO 27001, NIS 2, DORA, GDPR. Or start on your own with the free executive diagnosis. No commitment.
