Self-hosted by design
Run Kompro on Postgres you provision. Your compliance data never leaves your own database or your own network.
Open source · Self-hosted · AGPL v3
Compliance management that stays on your infrastructure
Kompro helps organizations define, assess, and continuously maintain their compliance posture without handing their data to a third party. Framework agnostic, evidence driven, and yours to control.
Everything you need to stay audit ready
One platform for policies, controls, evidence, risk, and audits. Built so your compliance state is the single source of truth.
Framework agnostic
Start from ISO 27001, SOC 2, or GDPR, or model your own structure. Map one control across many frameworks.
Evidence driven
Link evidence to controls and assessments with a full history, so every claim is backed by proof.
Risk and incidents
Track risks, treatment plans, and security incidents in the same system your auditors already trust.
Audit programs
Plan internal and external audits, capture nonconformities, and close corrective actions with a clear trail.
Open source
Licensed under AGPL v3. Inspect the code, modify it, and deploy it yourself with no vendor lock-in.
Why self-host your compliance stack
Compliance data is among the most sensitive information an organization holds. Kompro keeps it within your perimeter.
- You own the database and the credentials.
- No external service sits between you and your evidence.
- Deploy on your own Linux host, or split frontend and API across providers.
- Harden it to your own standards, documented in the project security guide.
The organization's compliance state is the source of truth. Frameworks are just different views over it.
Kompro design principle
Get in touch
Questions about self-hosting, deployment, or the project? Reach out directly.
Contact Me