Know exactly where you stand against every framework you need.
Manually mapping policies against ISO 27001, GDPR, NIS2, or SOC 2 in a spreadsheet takes days and goes stale the moment a framework updates. BastionIQ's AI reviews your actual documents and tells you the gaps in minutes.
Compliance frameworks move faster than manual reviews can keep up.
Point-in-time spreadsheet audits are slow, inconsistent between reviewers, and outdated the moment a policy or a framework changes. Most teams only find the gaps when a customer questionnaire or an actual auditor finds them first. BastionIQ turns assessment into something you can rerun whenever a policy changes, not just once a year under deadline pressure.
Bastion Assess covers 15 frameworks your auditor, insurer, or regulator cares about.
From document upload to gap analysis
Choose a framework
Select from 15 frameworks, including ISO 27001:2022, ISO 22301, NIST CSF 2.0, NIS2, SOC 2, Cyber Essentials and PCI DSS v4.0.
AI reviews your documents
BastionIQ's AI reads the documents you upload and compares them against the framework's requirements.
Get a gap analysis
Get a maturity score, gaps ordered by severity and prioritised recommendations, all in plain English rather than audit-speak.
Reassess after every change
Update the policy, rerun the assessment, and see the gap close. No fixed annual cycle.
What Bastion Assess includes
15 supported frameworks
ISO 22301, ISO 27001:2022, ISO 27031, NIST CSF 2.0, NIST SP 800-34, NIST SP 800-53 Rev 5, NIS2 Directive, Cyber Essentials, NCSC Cyber Assessment Framework, GDPR Article 32, PCI DSS v4.0, SOC 2, COBIT 2019, BCI Good Practice Guidelines, DRII Professional Practices.
AI-driven gap analysis
Automated comparison of your actual documents against framework requirements, not a generic checklist.
Maturity score
A maturity score for each assessment, so you can see where you stand against the framework at a glance.
Prioritised recommendations
Gaps ordered by severity, with specific, prioritised recommendations and no compliance jargon to decode.
Rerun anytime
Reassess after every policy update to confirm the gap actually closed.
Feeds your evidence pack
Assessment results link directly into the same audit trail as your Plans and Vault documents.
anytime
Reassess as often as you need, not once a year.
Bastion Assess is included in every paid plan. Rerun it after every policy change, every framework update, or every new customer questionnaire. The cost of a compliance gap found by an auditor is always higher than the cost of finding it yourself.
Find your gaps before your auditor does.
Bastion Assess is included in every paid plan. Built-in AI is included, or you can connect your own Anthropic key.