Access and compliance

The right access for each person, and the proof for every rule.

Decide who may do what, require a second sign-in check, and hold risky changes for a second person to approve. Every control is mapped to the rules you must meet, so one piece of evidence can serve several frameworks, and the pack an auditor asks for is built in minutes.

Book a briefing Take a look

Four-eyes on risky changesOne control, many frameworksEvidence packs on request

Which controls each regulation asks for and what is missing — **Compliance.** Seeing which controls each regulation asks for, which are missing, and what is due.Sample data

**Compliance.** Seeing which controls each regulation asks for, which are missing, and what is due.Sample data

People and access

Who may do what, and why.

See everyone in the organisation, what their role allows and why someone cannot reach something. Risky changes wait for a second person.

People

Everyone in one list
Second checks enforced
Sessions ended remotely

Everyone in the organisation and who has no second check — **People.** Seeing everyone in the organisation, and who has no second check.Sample data

**People.** Seeing everyone in the organisation, and who has no second check.Sample data

Frameworks

One control, many rules met.

Each control is mapped to the rules it meets in GDPR, the EU AI Act, NIS2, DORA and ISO standards. Evidence is collected automatically where possible, and the register of AI uses is kept up to date.

Controls across frameworks

Mapped once
Evidence reused
Gaps shown

Which rules one control meets — **Controls across frameworks.** Seeing which rules one control meets, so one piece of evidence serves five frameworks.Sample data

**Controls across frameworks.** Seeing which rules one control meets, so one piece of evidence serves five frameworks.Sample data

Evidence and legal holds

Ready when the auditor asks.

Build the evidence pack an auditor asks for, and check that an older one still holds. Place a legal hold and export exactly what it covers.

Evidence packs

Built from live records
Sealed when issued
Checked later

Building the evidence pack an auditor asked for — **Evidence packs.** Building the pack the auditor asked for, and checking an older one still holds.Sample data

**Evidence packs.** Building the pack the auditor asked for, and checking an older one still holds.Sample data

In an emergency

Break-glass access, short and witnessed.

When something must be fixed urgently, an administrator can be given full access for a short time, with a second person watching and every step recorded. AI agent access can be frozen across the organisation in one move.

Time-limited full access
A second person required
AI agent access frozen in one move

One hour of full reach with a second person — **Break-glass.** Getting one hour of full access to a database at night, with a second person watching.Sample data

**Break-glass.** Getting one hour of full access to a database at night, with a second person watching.Sample data

Questions

About access and compliance.

Which frameworks are mapped?

GDPR, the EU AI Act, NIS2, DORA, ISO/IEC 27001 and ISO/IEC 42001, among others. Your own policies can be added too.

Can we use our company sign-in?

Yes. People sign in with your existing identity provider, and second checks can be required for everyone.

Go deeper

Book a briefing

Build your next evidence pack here.

Tell us what your auditor asked for last time. We will show how Nexus builds it.

Book a briefing Governance