ISO 27001 is the international standard for information security management systems (ISMS). FreeAI's self-hosted architecture, encryption, access controls, and audit logging map directly to its 93 controls across 14 clauses.
Every control area is addressed through FreeAI's built-in security features and configuration options.
FreeAI enforces a security policy by default: LAN-only bindings, UFW firewall rules, mandatory env vars for secrets, and no hardcoded credentials.
Automated vulnerability scanning via Semgrep, Bandit, Safety, and Trivy. Risk treatment is documented in audit logs for every scan run.
Inline documentation, admin panels with role-based visibility, and audit trails ensure operators understand and follow security procedures.
Sandboxed agent workspaces, file path restrictions, command allowlists, SOPS-encrypted secrets, and TLS for all network traffic.
JSONL audit logs for every agent action, workflow run, and config change. Exportable reports for internal and external audits.
Auto-patch agent applies fixes for critical/high vulnerabilities. Circuit breakers prevent cascading failures. Configuration is version-controlled.
See how FreeAI maps to all major regulatory frameworks.
All Compliance Frameworks