I use Comp AI to automate our SOC 2 and ISO 27001 compliance, and it really helps manage evidence collection without the manual headache of spreadsheets. I like how it eliminates the manual work of compliance by automating evidence collection, saving so much time in SOC 2 preparation. The 1 on 1 Slack support makes the whole process feel seamless. The real-time compliance tracking dashboard is great for seeing exactly where we stand with SOC 2 or ISO 27001 at any moment without having to wait for an auditor's report. Also, it connects to our entire tech stack and integrates with AWS for infrastructure scanning, GitHub for code controls, and Okta for identity management, which makes collecting evidence for SOC 2 almost entirely automated. The initial setup was very fast, taking only a few minutes, thanks to the white glove team who configured our integrations and customized our policies for us, making us audit-ready for SOC 2 much sooner than we expected. Review collected by and hosted on G2.com.

The UI customization for niche internal policies could be a bit more flexible and also adding more integrations for legacy tools would be a great future update. Review collected by and hosted on G2.com.

I like that Comp AI makes compliance continuous and low-effort. It runs quietly in the background, keeping everything audit-ready and removing the usual stress and last-minute scrambling. What works especially well is how clear and actionable everything is. Comp AI shows exactly what's missing, who owns it, and how to fix it. I really enjoy how smoothly it fits into existing tools and workflows, making compliance feel like part of the day-to-day work rather than a separate, painful project. It's quite easy to set up with guided step-by-step instructions and quick integrations, which helped us get up and running without much effort. Overall, it delivers a lot of value with minimal effort and reduces the stress and overhead of compliance. Review collected by and hosted on G2.com.

One area that could be improved is deeper customization for unique workflows—teams with non-standard setups sometimes need more flexibility in how controls, evidence, or ownership are defined. It could also be better at handling edge cases where tools don’t integrate cleanly, which can still require some manual follow-up. That said, these are more about refinement than fundamentals—the core experience works very well, but added flexibility and broader integrations would make it even stronger. Review collected by and hosted on G2.com.

I use Comp AI for automating cybersecurity and compliance workflows. I really appreciate its automation-first approach to compliance, which seamlessly maps controls to frameworks like SOC 2 and ISO. It automatically collects evidence from integrated tools and maintains audit readiness in one place, reducing manual work significantly and making compliance more manageable. I also like how Comp AI provides clear visibility into compliance progress through its dashboard, and the structured framework mapping and centralized documentation make it easy to track what needs attention. Its ability to integrate with our tech stack for automated evidence collection works well, keeping compliance aligned with everyday workflows. Comp AI centralized everything, automated evidence collection, and made framework management more efficient, which was a big improvement over our previous manual setup. The initial setup was smooth, with most integrations straightforward to configure. Review collected by and hosted on G2.com.

Some advanced features can take time to fully understand, especially for users new to compliance frameworks. Improving onboarding with more guided walkthroughs and deeper in-app explanations would help users get value more quickly. Some advanced features like control customization and framework mapping can feel complex at first. A bit more in-app guidance or quick walkthroughs during onboarding would make it easier to get started. Review collected by and hosted on G2.com.

I find Comp AI incredibly valuable because it removes 80% of the compliance headache when dealing with SOC 2 and ISO 27001. I appreciate that it reduces the complexities involved in using HIPAA, GDPR, and SOC 2 for employees. Comp AI doesn’t feel bloated or overly complex; it presents and solves problems in a straightforward way, which is rare with AI tools. Instead of forcing users to adapt to the tool, it feels like it adapts to the user’s workflow, making it much easier to trust and use in real scenarios. The initial setup is very easy and low-friction, allowing me to start using Comp AI almost immediately without complex configurations. Review collected by and hosted on G2.com.

While the outputs are useful, sometimes it’s not clear why Comp AI gives a particular result or recommendation. A bit more explainability—like brief reasoning, confidence indicators, or sources—would increase trust, especially for important decisions. Review collected by and hosted on G2.com.

I like how Comp AI makes compliance feel manageable without draining our resources. As a small team without a dedicated security or compliance person, I appreciate the automation of heavy lifting tasks, like collecting evidence from tools, keeping everything organized, and alerting us to potential issues. I also like that the initial setup of Comp AI was mostly straightforward, making it simple to connect main integrations like AWS, GitHub, and Slack. It stands out with its automation and open-source aspect, especially compared to more expensive options. Review collected by and hosted on G2.com.

The initial setup took a bit longer than I expected. Connecting all our tools and getting the integrations dialed in required some tweaking, especially since we're using a mix of less common services alongside AWS and GitHub. It wasn't a huge deal, but a few more guided templates or walkthroughs for custom setups would help speed that up. Review collected by and hosted on G2.com.

I find Comp AI quite easy to use, and I appreciate the ability to communicate effectively with them via a shared Slack channel. This lets me and my teammates communicate directly with our key point of contact and their leadership team. I also really like that they are very responsive when I request new features. The initial setup was extremely easy thanks to the intuitive onboarding process, and we were all set in no time. I value the best price to value it offers, and I find it very useful in guiding us through the process of obtaining our ISO 27001 certification. Review collected by and hosted on G2.com.

The software is pretty new and helpful, but at times, the AI agents have been a bit buggy. For example, when I tried to upload a document for a security questionnaire that the AI is supposed to fill out, it didn't work initially. However, the bug was fixed a day later. Review collected by and hosted on G2.com.

The SOC2 process is complex and they made it much easier to manage Review collected by and hosted on G2.com.

Nothing really - but I have to fill the characters here Review collected by and hosted on G2.com.

I like Comp AI a lot for simplifying evidence tracking through automation and integrations. It really helped us manage the compliance process with SOC2 and ISO 27001 by providing structured workflows and making it easier to stay organized. The automation makes the process more manageable and less error-prone compared to fully manual approaches, which saves us a lot of time. Review collected by and hosted on G2.com.

Some setup is needed initially to map controls and evidence correctly, especially for teams new to compliance. Providing clearer onboarding guidance or templates for first-time compliance teams could make the initial setup faster and easier. Review collected by and hosted on G2.com.

I love that Comp AI provides a very white glove experience with incredibly fast response times from their agents, which truly enhances the user support experience. The entire user experience was seamless, making the process smooth and efficient. The automated event and evidence gathering capabilities are particularly impressive, positioning Comp AI as a cutting-edge company that simplifies complex compliance tasks such as SOC 2 and HIPAA attestations. Additionally, Comp AI has greatly helped in gathering evidence, significantly reducing manual overhead, and freeing me to focus on my day-to-day operations without worrying about compliance documentation. The initial setup of Comp AI was super easy, which saved me a lot of time and effort. Review collected by and hosted on G2.com.

I think their security review could be a bit more comprehensive for things like the pen test. There's maybe more that they could do in this area, which might be available only in a higher pay package. Review collected by and hosted on G2.com.

Comp AI has been great for us. The platform is simple to use, which takes a lot of the stress out of SOC 2. Their new AI features handle a bunch of the tedious work in the background, so the whole process feels lighter. The white glove support is a big part of why it works so well too. They helped us get our policies in place and handled communication with the auditors, which saved a lot of time. It also integrates cleanly with the tools we already use like AWS, and many other services. And the price is very reasonable, which makes getting through SOC 2 far less painful than I expected. Review collected by and hosted on G2.com.

Nothing comes to mind Review collected by and hosted on G2.com.