Skip to main content

CODITECT Compliance Core

Compliance automation and evidence collection framework for SOC 2, ISO 27001, HIPAA, and custom compliance programs.

Overview​

Part of the CODITECT platform, this module provides:

  • Control Graph Service - Dynamic compliance control mapping and tracking
  • Evidence Collection Engine - Automated evidence gathering from integrated systems
  • Agent Orchestration - Multi-agent workflows for compliance automation
  • Trust Center - Public-facing compliance documentation portal
  • Integration Framework - Connectors for GRC tools (Vanta, Drata, Secureframe)

Quick Start​

# Clone with CODITECT framework
git clone --recurse-submodules https://github.com/coditect-ai/coditect-compliance-core.git

# Verify distributed intelligence
ls -la .coditect  # Should point to ../../core/coditect-core
ls -la .claude    # Should point to .coditect

# Access CODITECT agents, commands, skills
ls .coditect/agents/
ls .coditect/commands/
ls .coditect/skills/

Architecture​

Based on comprehensive design documents:

  • Product Definition - 01-product-definition-prompt.md
  • Requirements - 02-product-requirements-prompt.md
  • Software Design - 03-software-design-document-prompt.md
  • Technical Design - 04-technical-design-document-prompt.md
  • ADRs - Architecture Decision Records (05-09)
  • Implementation - Build prompts (10-20)

Features​

Compliance Frameworks Supported​

  • SOC 2 Type I/II
  • ISO 27001:2022
  • HIPAA
  • PCI DSS
  • Custom compliance programs

Evidence Collection​

  • GitHub (commits, PRs, code reviews)
  • Jira (tickets, workflows, change management)
  • Slack (communications, approvals)
  • AWS/GCP (infrastructure, access logs)
  • Google Workspace (access controls, audit logs)
  • Custom integrations via API

Automation Capabilities​

  • Continuous control monitoring
  • Automated evidence mapping
  • Gap analysis and remediation workflows
  • Audit preparation automation
  • Real-time compliance dashboards

Development​

Prerequisites:

  • Python 3.10+
  • PostgreSQL 14+
  • Redis 7+
  • Docker + Docker Compose

Local Setup:

# Install dependencies
pip install -r requirements.txt

# Configure environment
cp .env.example .env
# Edit .env with your settings

# Run migrations
python manage.py migrate

# Start services
docker-compose up -d

# Run development server
python manage.py runserver

Documentation​

  • User Guides - See .coditect/docs/02-user-guides/
  • Architecture - See .coditect/docs/03-architecture/
  • API Reference - See docs/api/
  • Deployment - See .coditect/docs/07-deployment/

Distributed Intelligence​

This repository uses CODITECT's distributed intelligence architecture:

.coditect -> ../../../.coditect -> ../../core/coditect-core
.claude -> .coditect

Benefits:

  • Shared AI agents across all CODITECT projects
  • Consistent automation workflows
  • Centralized skill library
  • Unified documentation

Access Components:

  • Agents: .coditect/agents/
  • Commands: .coditect/commands/
  • Skills: .coditect/skills/
  • Scripts: .coditect/scripts/

Contributing​

  1. Read .coditect/docs/02-user-guides/USER-BEST-PRACTICES.md
  2. Follow .coditect/docs/02-user-guides/COMPONENT-ACTIVATION-GUIDE.md
  3. Create feature branch: git checkout -b feature/description
  4. Commit changes: git commit -m "feat: description"
  5. Push branch: git push origin feature/description
  6. Create Pull Request

License​

Proprietary - AZ1.AI INC

Contact​

Owner: AZ1.AI INC Lead: Hal Casteel, Founder/CEO/CTO Repository: https://github.com/coditect-ai/coditect-compliance-core

Part of: CODITECT Platform Framework: CODITECT Core Last Updated: December 9, 2025