Template
Compliance Platform Selection Scorecard
Preview + scoring rubric · Updated 2026-07-15
Use this scorecard to evaluate any compliance automation platform objectively. Score each capability 0–3 and total out of 12. Below 8 is an evidence-collection tool; 8+ is a genuine compliance system. The reasoning behind the rubric is in How to Evaluate a Compliance Automation Platform.
The four capabilities (score 0–3 each)
| Capability | 0 | 1 | 2 | 3 |
|---|---|---|---|---|
| Evidence capture | None | Manual upload | Automated collection | Source-captured, tamper-evident |
| Control enforcement | None | Documents policy | Detects drift | Prevents non-compliant state |
| Framework mapping | None | One framework | Multiple, re-collected | Map once, reuse everywhere |
| Consumption | None | PDF export | Static portal | Scoped live access per consumer |
Interpreting the total
- 0–5: a document store with a dashboard. Expect to do the real work yourself.
- 6–8: solid collection; verify who engineers the underlying controls.
- 9–12: a genuine compliance system; still confirm it reaches your actual stack.
Knowledge Graph
What this relates to
Related concepts
What to do next