Resources
Templates, Samples and Tools
Free compliance templates, worked samples and checklists from the nank.ai team. Use them to start your SOC 2, ISO 27001, ISO 27701, ISO 42001 or HIPAA program, then tailor them to how your business runs.
How to use these resources
Each template is a starting point, not a finished control. Replace the placeholders, match the text to what your team does, and get the owner of each process to approve it. Your auditor tests what you do, not what the template says.
Policy and procedure templates
Editable Word documents that map to the framework requirements most auditors ask for first.
Information Security Policy
The top-level policy that sets scope, roles and management commitment for your security program.
Incident Response Plan
Roles, severity levels, escalation paths and breach notification steps for Canada and the United States.
Vendor Risk Management Procedure
How to assess, approve and review the suppliers that touch your data, with a review schedule.
Samples
Worked examples that show what a finished document looks like, so you know what you are aiming for.
Sample Statement of Applicability
A completed ISO 27001:2022 SoA for a SaaS company, with a reason for each included and excluded control.
Sample Risk Register
Risks scored for likelihood and impact, each traced to a treatment, an owner and a control.
Sample SOC 2 Readiness Roadmap
A month-by-month plan from gap assessment to the start of the Type II observation window.
Tools and checklists
Checklists and worksheets you can work through with your team in an afternoon.
83 controls auditors commonly test, across 13 areas, with the evidence they ask for. Tick off your progress online or download the Excel workbook.
ISO 27701:2025 Transition Checklist
32 steps in five phases to move a 2019 certificate to the 2025 edition before the 31 October 2028 deadline.
HIPAA Risk Analysis Worksheet
A worksheet that walks through the risk analysis the HIPAA Security Rule requires.
AI System Impact Assessment
A template to assess how an AI system affects people and groups, as ISO 42001 requires.
Need something that is not here?
Tell us which template or tool would help your team, and we will prioritize it. Write to [email protected]. For guides on each framework, browse the Compliance Library.
Want a roadmap built for your business?
Templates get you started. Our free readiness assessment shows exactly what your business needs for SOC 2, ISO 27001 or HIPAA, with scope, timeline and effort.