ComplyB4

ComplyB4 provides a SaaS platform focused on PCI DSS compliance assessment and management. Its products are aimed at Qualified Security Assessors (QSAs), Internal Security Assessors (ISAs), merchants, and acquirers. The main product, QIA (Assessment Platform), automates the production of PCI SSC-licensed SAQ and ROC documents, including AOC. It includes AI-assisted document review that maps evidence to PCI DSS requirements, dynamic questionnaire descoping based on a merchant's environment, dynamic evidence collection, automated reminders and tracking, and built-in QA, review and sign-off workflows. Role-based client and assessor portals and embedded Stripe payments are also offered. The second product, CAM+ (Compliance Annual Management), is currently in an early access programme. It supports continuous PCI DSS compliance management with a compliance dashboard and heatmaps, a RACI workflow engine for control-level ownership, an AI-assessed evidence repository, notification and escalation engine, an immutable audit trail, and native integration so QIA assessment outputs feed into CAM+. The roadmap lists portfolio views, advanced reporting, white-label portals, automated control testing, an API connector framework, and multi-framework support. The platform is delivered as SaaS with no installation required, and the company offers a 30-day free trial and demos.