GDPR
In force
DPC enforcement of SMEs is accelerating. Article 30 records, Article 32 controls, and breach-readiness evidence are no longer optional for any data controller using Azure.
See your NIS2 and DORA compliance posture without touching your Azure estate.
Continuous Azure compliance.
Audit-ready evidence.
Zero infrastructure changes.
Stylised illustration of the Equalis OpsReg dashboard showing compliance score and rule evaluations.
CRO-registered Irish entity · EU-incorporated · Read-only by design · Managed Identity only · No stored customer credentials
Built for scale
437
Compliance rules
5
Frameworks
39
Azure resource types
7 years
Evidence retention
Built for EU regulatory obligations:
GDPR · ISO 27001 · NIS2 · DORA · PCI-DSS
The regulatory pressure on Azure-resident SMEs is now.
Three frameworks, three distinct enforcement clocks. None of them are theoretical.
NIS2
Transposition deadline October 2026
Member states are transposing NIS2 into national law on a tight calendar. Essential and important entities face direct supervisory reach and personal liability for management bodies.
DORA
In force since January 2025
Mandatory for financial entities and ICT third-party providers. Continuous operational resilience evidence — not annual audits — is the regulatory expectation.
Continuous Azure compliance monitoring. Zero infrastructure changes.
Equalis OpsReg reads your Azure subscription metadata, evaluates it against 437 compliance rules, and produces evidence. It does not — under any failure mode — touch your infrastructure.
Equalis OpsReg does
- Evaluate Azure resources against compliance rules every scan
- Produce timestamped pass/fail evidence per rule per resource
- Export PDF reports ready for regulator submission
- Read your Azure subscription metadata via Resource Graph
Equalis OpsReg does not
- Modify, configure, or change any Azure infrastructure
- Hold write permissions on customer subscriptions
- Connect to anything outside your Azure subscription
- Store data outside Azure North Europe and West Europe
- Hold persistent customer credentials anywhere
Inform, Don't Act. Read-only forever.
One platform. Continuous regulatory compliance.
Equalis OpsReg evaluates your live Azure surface against 437 deterministic rules and turns every scan into tamper-evident, regulator-ready evidence.
Regulatory Compliance Automation
437
deterministic rules
437 rules across five frameworks, evaluated against your live Azure surface. Every evaluation produces a tamper-evident record.
- GDPR · ISO 27001 · NIS2 · DORA · PCI-DSS
- 39 Azure resource types covered
- On-demand PDF evidence export
Framework coverage.
NIS2 and DORA framework coverage on Azure infrastructure — purpose-built for the EU regulatory window.
82 NIS2 rules. 81 DORA rules. Both EU regulatory frameworks, fully covered.
| Framework | Rules | Status |
|---|---|---|
| GDPR | 74 | In force |
| ISO 27001 | 90 | Annex A controls |
| NIS2 | 82 | Transposition Oct 2026 |
| DORA | 81 | In force since Jan 2025 |
| PCI-DSS | 110 | v4.0 controls |
| Total | 437 | Across 39 Azure resource types |
Evidence for regulators, not dashboards for engineers.
Every rule, every resource, every scan. Timestamped. Attributed. Audit-ready.
PASS
NIS2 · Art. 21(2)(d)
Storage account public access disabled
stoacctprod01
sub-a1b2c3d4-finance-prod
Pricing.
Two plans. Everything included in both — the only difference is how many Azure subscriptions you cover.
Frequently asked
What Azure access do you require?
Read-only access via Managed Identity. We never store customer credentials. The platform reads Azure subscription metadata via Resource Graph and produces evidence — nothing else.
Do you make changes to my Azure environment?
No. Equalis OpsReg is read-only forever. Inform, Don't Act. The platform cannot modify, configure, or change any Azure resource under any circumstance.
How long does onboarding take?
Under five minutes from sign-up to first scan. Self-serve, no procurement, no agents, no infrastructure changes.
Connected to your first Azure subscription in minutes. Read-only forever.
Step 1
Sign up
self-serve, no procurement
Step 2
Connect a subscription
read-only, no agents
Step 3
First evidence in minutes
timestamped PDF