Manual Ends is the compliance operations platform that replaces binders, spreadsheets, and tribal knowledge with pre-mapped control libraries, one-click evidence collection, and role-based training your team will actually finish.
| ID | Framework | Control | Status |
|---|---|---|---|
| CC1.1 | SOC 2 | Code of conduct acknowledgment | passed |
| CC6.1 | SOC 2 | Logical access — SSO enforcement | passed |
| A.5.15 | ISO 27001 | Access control policy | evidence |
| 164.308(a)(1) | HIPAA | Workforce training records | passed |
| Art. 30 | GDPR | Records of processing activities | queued |
| PCI 7.1 | PCI DSS | Cardholder data — least privilege | passed |
Compliance leaders at 1,840+ regulated companies ship with Manual Ends.
by_the_numbers
First-time SOC 2 Type II pass rate across 612 audits in 2024 — versus a 38% industry baseline.
verified fact · 2024Median auditor cycle in the dedicated Auditor Workspace — down from the 77-day baseline.
median · auditor workspaceAverage employee training completion across the 86 off-the-shelf courses — roughly 3× the 31% LMS industry benchmark.
2024 internal benchmark01 / the platform
Every pillar maps to a capability a compliance leader has to defend in front of an auditor, a regulator, or a board.
Ship SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, NIST CSF 2.0, and the EU AI Act's high-risk tier out of the box. The library refreshes within 48 hours of any regulator-issued update — so your controls are never a quarter behind.
Read-only API integrations into AWS, GitHub, Workday, Okta, Jira, NetSuite, and more. No agents to install, no screenshots to upload. Evidence is collected continuously and packaged for the auditor on demand.
Role-based training in anti-bribery, secure coding, DEI, HIPAA for clinicians, and more — delivered in short, role-relevant modules that employees finish. Auto-generated completion evidence flows straight into the Control Library.
San Francisco · founded 2019 · team of 142
02 / provenance
Manual Ends was founded in 2019 by former Big Four auditors and a Notion engineering lead — people who had spent years on the other side of the conference table, watching teams drown in binders the night before fieldwork.
The platform they built is the one they wished they had as auditors. In 2023, we closed a $42M Series B led by Atlassian Ventures, with Bessemer Venture Partners and First Round Capital participating — capital that let us turn a working audit tool into a full compliance operations platform.
03 / framework_index
Twelve months of coverage across the five frameworks enterprise buyers ask about first. Refresh timestamps reflect the last regulator-issued update ingested by the Control Library.
| Framework | Controls mapped | Auditor-ready evidence | Training courses | Last regulator refresh | Status |
|---|---|---|---|---|---|
| SOC 2 (Type II) | 312 | auto-collected | 14 courses | · 9 days ago | live |
| ISO 27001:2022 | 293 | auto-collected | 11 courses | · 22 days ago | live |
| HIPAA | 184 | auto-collected | 9 courses | · 41 days ago | live |
| GDPR | 147 | auto + manual | 7 courses | · 6 days ago | live |
| PCI DSS v4.0 | 264 | auto-collected | 6 courses | · 61 days ago | live |
| Plus NIST CSF 2.0, EU AI Act high-risk tier, CMMC L2, CCPA, SOX ITGC, NIST 800-53 Rev. 5, and HITRUST CSF — see the full framework index. | |||||
