SecuryxAI Docs

Complete your onboarding in 15 minutes

Walk through the 10-step wizard: company profile, infrastructure, frameworks, owners, and your first compliance plan.

5 MIN READ

Implement your first control

Controls are security practices you already follow. Mark one as Implemented and add a brief description — that's all auditors need to start.

3 MIN READ

Create and approve your first policy

Policies document your rules. Most frameworks require at least an Information Security Policy approved before certification can begin.

4 MIN READ

Add your first piece of evidence

Evidence is proof that a control works. A screenshot, a PDF, a URL — upload it and link it to the control it supports.

3 MIN READ

Publish your Trust Center

Your Trust Center is a public page showing prospects and customers your security posture. Replace repetitive questionnaire responses with a live, always-accurate page.

4 MIN READ

How the control graph works

SecuryxAI's core differentiator: implement a control once, map it to every framework. When evidence changes, downstream answers auto-flag as stale.

6 MIN READ

Import and complete a security questionnaire

Import a customer's CSV or XLSX questionnaire, let AI match questions to your controls, review, approve, and export — fully answered.

5 MIN READ

Manage third-party vendor risk

Track your vendors, assign risk levels, send automated assessments, and maintain due diligence evidence chains — all in one place.

4 MIN READ

Roles and permissions (RBAC)

Six roles: Owner, Admin, Contributor, Reviewer, Auditor, Viewer. Each has specific permissions across controls, policies, evidence, and settings.

3 MIN READ

Managing evidence expiry

Evidence items have expiry dates. SecuryxAI alerts you 30 days before expiry and marks controls as lacking current evidence when items expire.

3 MIN READ

ISO 27001:2022 — getting certified

ISO 27001 is a global information security management system standard. Understanding the 93 Annex A controls, the SoA, and the audit timeline.

7 MIN READ

SOC 2 — Type I vs Type II and what auditors examine

SOC 2 is the US enterprise standard for service organizations. Type I validates design; Type II validates operating effectiveness over 6–12 months.

6 MIN READ

ISO 42001 — AI management system certification

ISO 42001 is the first international standard for AI management systems. If you build or use AI in your product, this is your competitive differentiator.

6 MIN READ

NIST AI Risk Management Framework (AI RMF 1.0)

The NIST AI RMF organizes AI risk management into 4 functions: GOVERN, MAP, MEASURE, MANAGE. It's voluntary but increasingly cited in US government contracts.

5 MIN READ

GDPR compliance — required documents and key obligations

GDPR applies to any org processing EU personal data. Records of Processing Activities, DPIAs, and data breach notification procedures are the highest-priority documents.

5 MIN READ

Why is my compliance score 0%?

The compliance score starts at 0% because it measures actual implementation, not intention. Your score rises as you implement controls and add evidence.

2 MIN READ

Which frameworks should I start with?

Start with the framework your most strategic customer is asking for. ISO 27001 is the most universal; SOC 2 is required by US enterprise; add AI frameworks if you use or build AI.

3 MIN READ

What can the AI features do?

SecuryxAI's AI assists with questionnaire matching, policy drafting, risk summarization, and control narrative suggestions — always with human review before anything is sent to customers.

3 MIN READ

How does billing work?

SecuryxAI is subscription-based. Trial includes all features for 14 days. After trial, select a paid plan. Annual plans include two months free.

2 MIN READ

Can't log in — common fixes

Most login issues are caused by incorrect passwords, expired sessions, or browser caching. Try these steps before contacting support.

3 MIN READ

I can't see any controls in my catalog

Controls appear after onboarding is complete and frameworks are selected. If your catalog is empty, the most common cause is incomplete onboarding.

2 MIN READ

Team member didn't receive their invitation email

Invitation emails include a temporary password. If they're not received, check spam filters, confirm the email address, and resend from the Team settings page.

2 MIN READ