verified_user
Standardful
domain

Finance & Banking

(42 standards)

Industries: Finance & Banking

ISO/IEC 27001:2022Active

ISO/IEC 27001:2022

Information security management systems — Requirements

Global
SOC 2 Type IIActive

SOC 2 Type II

Service Organization Control 2 — Trust Services Criteria

United StatesGlobal
GDPRActive

GDPR

General Data Protection Regulation (EU) 2016/679

European UnionEuropean Economic Area
PCI DSS 4.0Active

PCI DSS 4.0

Payment Card Industry Data Security Standard

Global
CCPA/CPRAActive

CCPA/CPRA

California Consumer Privacy Act & California Privacy Rights Act

United States
LGPDActive

LGPD

Lei Geral de Proteção de Dados Pessoais — Brazil General Data Protection Law

Brazil
PIPLActive

PIPL

Personal Information Protection Law — 中华人民共和国个人信息保护法

China
ISO/IEC 27017:2015Active

ISO/IEC 27017:2015

Information technology — Security techniques — Code of practice for information security controls based on ISO/IEC 27002 for cloud services

Global
ISO/IEC 27018:2019Active

ISO/IEC 27018:2019

Information technology — Security techniques — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors

Global
ISO/IEC 27701:2019Active

ISO/IEC 27701:2019

Security techniques — Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management — Requirements and guidelines

Global
ISO/IEC 42001:2023Active

ISO/IEC 42001:2023

Information technology — Artificial intelligence — Management system

Global
ISO 9001:2015Active

ISO 9001:2015

Quality management systems — Requirements

Global
ISO 31000:2018Active (Guidelines - Not Certifiable)

ISO 31000:2018

Risk management — Guidelines

Global
EU AI ActActive

EU AI Act

Regulation (EU) 2024/1689 — Artificial Intelligence Act

European UnionEuropean Economic Area
ISO 22301:2019Active

ISO 22301:2019

Security and resilience — Business continuity management systems — Requirements

Global
NIST CSF 2.0Active

NIST CSF 2.0

Cybersecurity Framework 2.0 — Framework for Improving Critical Infrastructure Cybersecurity

United StatesGlobal
DORAActive

DORA

Digital Operational Resilience Act — EU Regulation (EU) 2022/2554

European UnionEuropean Economic Area
NIS2 DirectiveActive

NIS2 Directive

Directive (EU) 2022/2555 — Measures for a High Common Level of Cybersecurity Across the Union

European UnionEuropean Economic Area
SOXActive

SOX

Sarbanes-Oxley Act of 2002 — U.S. Public Company Accounting Reform and Investor Protection Act

United StatesGlobal
ISO/IEC 20000-1:2018Active

ISO/IEC 20000-1:2018

Information technology — Service management — Part 1: Service management system requirements

Global
ISO 37001:2016Active

ISO 37001:2016

Anti-bribery management systems — Requirements with guidance for use

Global
CSA STARActive

CSA STAR

Cloud Security Alliance Security, Trust, Assurance and Risk Program

Global
Cyber EssentialsActive

Cyber Essentials

UK Government-Backed Cyber Security Certification Scheme

United Kingdom
SWIFT CSPActive

SWIFT CSP

SWIFT Customer Security Programme — Customer Security Controls Framework

Global
ISO/IEC 27002:2022Active

ISO/IEC 27002:2022

Information security, cybersecurity and privacy protection — Information security controls

Global
ISO 37301:2021Active

ISO 37301:2021

Compliance management systems — Requirements with guidance for use

Global
NYDFS 23 NYCRR 500Active

NYDFS 23 NYCRR 500

New York Department of Financial Services — Cybersecurity Requirements for Financial Services Companies

United States
PDPA (Singapore)Active

PDPA (Singapore)

Personal Data Protection Act 2012 — Singapore Data Protection Law

Asia PacificSingapore
APPIActive

APPI

Act on the Protection of Personal Information — 個人情報の保護に関する法律

Asia PacificJapan
PIPEDAActive

PIPEDA

Personal Information Protection and Electronic Documents Act — Canadian Federal Privacy Law

Canada
HITRUST CSFActive

HITRUST CSF

HITRUST Common Security Framework — Healthcare-Focused Certifiable Security & Privacy Framework

United StatesGlobal
NIST AI RMF 1.0Active (Voluntary Framework)

NIST AI RMF 1.0

AI Risk Management Framework — NIST AI 100-1

United StatesGlobal
CSRDActive

CSRD

Corporate Sustainability Reporting Directive — Directive (EU) 2022/2464

European UnionEuropean Economic Area
IFRS S1 / IFRS S2Active

IFRS S1 / IFRS S2

ISSB Sustainability Disclosure Standards — General and Climate-related Disclosures

Global
MiCAActive

MiCA

Markets in Crypto-assets Regulation — Regulation (EU) 2023/1114

European UnionEuropean Economic Area
Colorado AI ActActive

Colorado AI Act

SB24-205 — Consumer Protections for Artificial Intelligence

United States
SOC 1 Type IIActive

SOC 1 Type II

Service Organization Control 1 — Internal Controls over Financial Reporting (SSAE 18)

United StatesGlobal
EU AMLA & AML PackageActive

EU AMLA & AML Package

AML Authority and AMLR/AMLD6 — Regulations (EU) 2024/1620, 2024/1624 and Directive (EU) 2024/1640

European UnionEuropean Economic Area
FATF Travel RuleActive

FATF Travel Rule

FATF Recommendation 16 — Information Sharing for Wire and Virtual Asset Transfers

Global
India DPDP ActActive

India DPDP Act

Digital Personal Data Protection Act 2023 and DPDP Rules 2025

Asia PacificIndia
EU ESG Ratings RegulationActive

EU ESG Ratings Regulation

Transparency and Integrity of ESG Rating Activities — Regulation (EU) 2024/3005

European UnionEuropean Economic Area
US Corporate Transparency ActActive

US Corporate Transparency Act

Beneficial Ownership Information Reporting — 31 U.S.C. 5336 and 31 CFR 1010.380

United States