Compliance Review

Evaluate your application against industry-specific regulatory requirements. This review translates dense compliance frameworks into concrete, testable technical checks — and validates them through browser-based testing. Non-compliance can result in severe fines, legal action, and loss of business.

When to use

Use /shiplight:compliance-review when:

• Building applications for regulated industries (healthcare, finance, government)
• Preparing for a compliance audit (SOC 2, HIPAA, PCI-DSS)
• Adding payment processing or health data features
• Expanding to GDPR-regulated markets
• After infrastructure or architecture changes that affect data handling

Standards Referenced

• HIPAA — Health Insurance Portability and Accountability Act (Technical Safeguards §164.312)
• SOC 2 — Service Organization Control (Trust Service Criteria)
• PCI-DSS v4.0 — Payment Card Industry Data Security Standard
• GDPR — General Data Protection Regulation (Technical Measures)