https://auditly.to/blog Guides on compliance audits, the frameworks behind them, and how Auditly works. en Sat, 05 Sep 2026 09:00:00 GMT https://auditly.to/blog/eu-ai-act-timeline https://auditly.to/blog/eu-ai-act-timeline Sat, 05 Sep 2026 09:00:00 GMT The regulation phases in over three years. Which obligations are already live, which arrive in August 2026, and what a company that builds or buys AI should have done by each date. guide eu-ai-act eu ai https://auditly.to/blog/iso-42001-explained https://auditly.to/blog/iso-42001-explained Tue, 01 Sep 2026 09:00:00 GMT The first certifiable standard for managing AI. What it asks for, how it relates to ISO 27001 and the EU AI Act, and what an audit against it actually checks. guide iso-42001 ai https://auditly.to/blog/dora-explained https://auditly.to/blog/dora-explained Fri, 28 Aug 2026 09:00:00 GMT The Digital Operational Resilience Act has applied since January 2025. Its five pillars, who it reaches, and the evidence an auditor asks for under each. guide dora eu financial-services https://auditly.to/blog/soc-2-type-1-vs-type-2 https://auditly.to/blog/soc-2-type-1-vs-type-2 Tue, 25 Aug 2026 09:00:00 GMT The two report types test different things over different periods. When a Type I is the right first step, when it is wasted money, and how the observation window works. guide soc-2 us https://auditly.to/blog/iso-27001-2022-what-changed https://auditly.to/blog/iso-27001-2022-what-changed Fri, 21 Aug 2026 09:00:00 GMT The 2022 edition restructured Annex A into four themes and 93 controls and added eleven new ones. The transition deadline has passed; here is what a current audit expects to see. guide iso-27001 https://auditly.to/blog/gdpr-dpia-when-and-how https://auditly.to/blog/gdpr-dpia-when-and-how Tue, 18 Aug 2026 09:00:00 GMT Article 35 makes a data protection impact assessment mandatory for high-risk processing. The nine criteria regulators use, the structure of a defensible assessment, and what an audit checks. guide gdpr eu privacy https://auditly.to/blog/audit-readiness-checklist https://auditly.to/blog/audit-readiness-checklist Fri, 14 Aug 2026 09:00:00 GMT What to do in the three months before an ISO or SOC 2 audit, week by week, so the auditor's first request list is answered before it arrives. guide iso-27001 soc-2 checklist https://auditly.to/blog/how-escrow-audit-engagements-work https://auditly.to/blog/how-escrow-audit-engagements-work Tue, 11 Aug 2026 09:00:00 GMT Why we put money in the middle of every Auditly engagement, what a milestone is, and what happens when the two sides disagree. product escrow contracts https://auditly.to/blog/iso-certification-cycle https://auditly.to/blog/iso-certification-cycle Fri, 07 Aug 2026 09:00:00 GMT An ISO certificate is not one audit but a three-year cycle of them. What each stage checks, how nonconformities are graded, and how to keep a certificate rather than just win one. guide iso-27001 iso-42001 https://auditly.to/blog/nis2-dora-cra-which-applies https://auditly.to/blog/nis2-dora-cra-which-applies Tue, 04 Aug 2026 09:00:00 GMT Three EU cyber laws with overlapping vocabulary and different scopes. How to tell which applies to your organisation, and where they stack. guide nis2 dora cra eu https://auditly.to/blog/auditor-independence https://auditly.to/blog/auditor-independence Sun, 02 Aug 2026 09:00:00 GMT Independence rules decide who is allowed to sign your certificate. Understanding them before you buy saves an engagement. guide independence iso-17021 https://auditly.to/blog/iso-27001-vs-soc-2 https://auditly.to/blog/iso-27001-vs-soc-2 Sun, 02 Aug 2026 09:00:00 GMT The two frameworks answer different questions and are checked in different ways. Here is how to tell which one your customers are asking for. guide iso-27001 soc-2 https://auditly.to/blog/nis2-who-is-in-scope https://auditly.to/blog/nis2-who-is-in-scope Sun, 02 Aug 2026 09:00:00 GMT The directive applies by sector and company size, and it reaches suppliers who never read it. A practical way to work out whether it applies to you. guide nis2 eu https://auditly.to/blog/what-auditors-ask-for https://auditly.to/blog/what-auditors-ask-for Sun, 02 Aug 2026 09:00:00 GMT The evidence requests that arrive in week one of most engagements, what each is really testing, and how to have it ready. guide audit-preparation evidence https://auditly.to/blog/choose-an-auditor https://auditly.to/blog/choose-an-auditor Sat, 18 Jul 2026 09:00:00 GMT A practical framework for evaluating and selecting an auditor for your next compliance engagement. guide compliance https://auditly.to/blog/introducing-auditly https://auditly.to/blog/introducing-auditly Sat, 18 Jul 2026 09:00:00 GMT Why we are building a marketplace that matches companies with vetted auditors. announcement product