Audit-ready Terraform. Free for 30 days.
Replace one line in your module source. Get SOC 2, HIPAA, and PCI DSS controls enforced across S3, VPC, EKS, RDS, Lambda, and ALB - before terraform apply.
One line changes it
Before
module "s3_bucket" {
source = "terraform-aws-modules/s3-bucket/aws"
version = "~> 5.0"
bucket = "my-app-data"
}After
module "s3_bucket" {
source = "soc2.compliance.tf/terraform-aws-modules/s3-bucket/aws"
version = "~> 5.0"
bucket = "my-app-data"
}Controls enforced: encryption at rest · public access blocked · versioning enabled · access logging active
How to start
Create account and verify email - then follow the quick start guide
Create an API token
Update module source to soc2.compliance.tf and run terraform init && terraform plan
What's included
35 Terraform Modules
S3, VPC, EKS, RDS, Lambda, ALB, and 29 more. The same module API you use from terraform-aws-modules - with compliance controls enforced.
Browse all modules →36 Compliance Frameworks
SOC 2, HIPAA, PCI DSS, ISO 27001, GDPR, NIS2, FedRAMP, NIST 800-53, and CIS. Catalog controls mapped per framework and enforced by the modules.
Browse frameworks →Private Registry
API token authentication. Point your existing Terraform configuration to soc2.compliance.tf - no other changes required.
What happens at day 30
When the trial ends, the account drops to the Free tier: CIS v6.0 modules, no card required. Already-deployed infrastructure and cached modules continue working.