> For the complete documentation index, see [llms.txt](https://docs.stoik.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.stoik.io/onboarding/compliance.md).

# Compliance Checklist

The Compliance Checklist is a module in Stoïk Protect that helps you understand which cybersecurity regulations apply to your organisation, and what you need to have in place to meet them. Actions already covered by your Stoïk tools are ticked for you.

## What it covers

* An eligibility check per framework, to determine whether you are in scope and under which category
* A summary of what your category means: supervision, management liability, sanctions and deadlines
* An assessment broken down into concrete actions, mapped to the articles of the regulation
* Automatic ticking of the actions your active Stoïk tools already cover
* A direct link to each tool that would cover a missing action

{% hint style="info" %}
The Compliance Checklist is a self-assessment tool designed to guide you. It is not a legal audit, a certification, or a registration with your national authority.
{% endhint %}

## How it works

{% stepper %}
{% step %}

### Check your eligibility

Confirm a few details about your company. Stoïk pre-fills what it already knows from your insurance contract.
{% endstep %}

{% step %}

### Review your outcome

Stoïk tells you whether the framework applies to you, and what that means in practice.
{% endstep %}

{% step %}

### Complete the assessment

If you are in scope, go through the actions and tick what you already have in place.
{% endstep %}
{% endstepper %}

## Available frameworks

| Framework | Status    |
| --------- | --------- |
| NIS 2     | Available |

## Actions covered by your Stoïk tools

Some actions in an assessment are linked to a Stoïk Protect tool.

* **Tool active**: the action is ticked for you and locked. You see **Stoïk already protects your company**, with a link to the tool.
* **Tool not active**: the action stays open. You see **Stoïk can protect your company**, with a link to set the tool up. You can still tick it yourself if another provider covers it.

All other actions are yours to declare. Stoïk has no visibility over policies, contracts, internal procedures or physical security, so those are always ticked manually.

Your answers are saved automatically as you go. There is no submit button, and you can return to update them at any time.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.stoik.io/onboarding/compliance.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.