Automate your compliance.
Reduce your risks.
SAUDITER.BJ structures your GRC approach: adaptive self-assessment, smart cross-mapping, encrypted evidence vault and a dedicated auditor workspace. ISO 27001, PCI DSS, APDP, GDPR, PSSIE and more.
No bank card · 30-day Freemium free trial · Sovereign hosting on quotation
Dashboard
Demo Organization
82%
Overall score
146
Evidence
12.4m
FCFA saved
Compliance radar
Progress by framework
Work done once, valid everywhere
A single technical control satisfies several requirements of several frameworks at once. You document once, you are covered everywhere.
Adaptive self-assessment
- Guided questionnaire, one step per control
- PASS/FAIL verdict and 0-100% maturity score
- Gaps prioritized by risk level
Centralized evidence
- One piece of evidence linked to N controls, without duplication
- SHA-256 fingerprint and AES-256-GCM encryption
- Versioning and automatic expiry alerts
Read-only workspace
- PBC list and evidence-by-evidence review
- Timestamped threads and sampling
- One-click export of the complete file
Five phases, a controlled journey
From scoping to continuous compliance, each step genuinely reduces your documentation workload.
Scoping
Scope, systems, target frameworks and ROI estimate in FCFA.
Gap analysis
Maturity score, prioritized gaps, cost of the gap vs cost of remediation.
Remediation
Pre-filled policies, evidence collection, auditor simulation.
Formal audit
External auditor workspace, traceable review, export of the complete file.
Continuous compliance
Automatic re-evaluation when evidence expires, real-time alerts.
Built to withstand a regulator's scrutiny
Compliance cannot be prepared on a platform whose own security is approximate.
AES-256-GCM envelope encryption
Each organization has its own data key, itself protected by a master key - never stored in clear text.
Tamper-proof audit log
Entries chained by SHA-256 hash: any tampering breaks the chain and triggers a verifiable alert.
Granular permissions (RBAC)
System and custom roles, permissions computed on every request - a revocation takes effect immediately.
Strict multi-organization isolation
No request crosses organizational boundaries - isolation is structural, not just in the application.
Configurable sovereign hosting
Self-contained on-premises deployment (Docker Compose) and pluggable local AI provider, for sovereignty constraints.
Strictly read-only external auditor
An invariant enforced at platform level, regardless of the permissions granted by each organization.
The frameworks of your ecosystem
International and local, cross-mapped from the creation of your first control.
ISO/IEC 27001 2022
International
PCI DSS 4.0
International
APDP Law 2009-09
Benin
GDPR 2016/679
European Union
PSSIE Decree 2021-550
Benin
HIPAA - Security Rule Security Rule
United States (international reference for health data)
FSSNQ v1.0
Benin
NIST Cybersecurity Framework 2.0
International
ISO 9001 2015
International
All features
Compare line by line what each plan covers to choose the one that fits your needs.
| Feature | Freemium (30 days) | Pro | Enterprise |
|---|---|---|---|
| Users included | 1 | 10 | Unlimited |
| Accessible frameworks | 1 (ISO 9001) | 9 (all) | 9 (all) |
| Evidence vault | 500 MB | 50 GB | Unlimited |
| Adaptive self-assessment & cross-mapping | |||
| Prioritized risk mapping | |||
| Dashboard & maturity score | |||
| Immutable audit log (hash chain) | |||
| Granular permissions (RBAC) | |||
| AES-256-GCM encryption per organization | |||
| Exportable PDF report | |||
| Document drafting (standard templates) | |||
| Premium document templates | — | ||
| AI assistant | Limited | Full | Full |
| External auditor workspace | — |
Frequently asked questions
Answers to the questions we are asked most often.
No. SAUDITER.BJ is a compliance preparation tool: it structures your approach, maps your controls and prepares your file, but it does not issue any certification and does not replace an accredited external auditor. The final certification decision always lies with a third-party body.
Ready to structure your compliance?
Create your organization in a few minutes and start your first self-assessment.