Small-business compliance without the consultant price
Answer a few questions about your business and receive a personalized compliance program, actionable risk score, professional policy documents, employee training, evidence tracking, and ongoing compliance monitoring.
Veteran-owned & operated in the USAFree assessment. No credit card. About 15 minutes.
Four steps to a working program
No engagement letter, no 90-page framework you'll never read.
Step 1
Answer guided questions
Plain-language intake about your industry, workforce, data, technology, and AI use. "I don't know" is always an acceptable answer.
Step 2
See a transparent score
A published, weighted model turns your answers into category scores. The same answers always produce the same result.
Step 3
Generate your documents
Personalized policies, plans, and checklists built from controlled templates — versioned and ready for your approval.
Step 4
Train and track
Assign short employee training, capture completion records, and keep evidence organized for insurers and customers.
What gets scored
Every category is weighted, and each finding names the control behind it.
- Governance
- Access Control
- Passwords and Authentication
- Devices
- Data Protection
- Backups
- Incident Response
- Employee Training
- Vendor Risk
- AI Use
- Privacy Practices
- Policy Coverage
- Business Continuity
Built for the work after the score
Cybersecurity readiness
Access control, backups, patching, email security, and incident preparedness.
AI governance
Set rules for approved tools, prohibited data, disclosure, and human review.
Evidence vault
Store screenshots, invoices, attestations, and training records against each control.
29 documents, not one generic policy
Your plan unlocks a full library of policies, plans, and checklists — each one written from your own answers and versioned for approval.
Information Security Policy
Policy
Acceptable Use Policy
Policy
AI Acceptable Use and Governance Policy
Policy
Password and Authentication Policy
Policy
Access Control Policy
Policy
Data Classification and Handling Policy
Policy
Privacy and Data Protection Policy
Policy
Remote Work Policy
Policy
Bring Your Own Device Policy
Policy
Incident Response Plan
Plan
Business Continuity Plan
Plan
Backup and Recovery Policy
Policy
Vendor Management Policy
Policy
Records Retention Policy
Policy
Employee Offboarding Checklist
Checklist
New Employee Security Checklist
Checklist
Cyber Insurance Readiness Checklist
Checklist
Government Contractor Readiness Checklist
Checklist
Vendor Security Questionnaire
Form
Security Incident Report Form
Form
Annual Compliance Review Checklist
Checklist
AI Tool Inventory
Inventory
Technology Asset Inventory
Inventory
Data Inventory
Inventory
Risk Register
Inventory
Cybersecurity Awareness Plan
Plan
Email and Communications Policy
Policy
Social Media Policy
Policy
Mobile Device Policy
Policy
Employee training your team will actually finish
8 short courses, 137 minutes total, with quizzes, pass/fail records, and certificates you can hand to an insurer or customer.
Security Awareness Basics
The core habits that stop most small-business breaches: passwords, updates, locking devices, and reporting.
20 min · Annual · pass at 80%
Phishing & Social Engineering
Spot fake invoices, payment-change requests, and impersonation before money moves.
18 min · Annual · pass at 80%
Data Handling & Privacy
Classify information correctly, share it safely, and keep only what you need.
22 min · Annual · pass at 80%
Responsible AI Use at Work
Use AI tools productively without leaking data or shipping unreviewed output.
16 min · Annual · pass at 80%
Incident Reporting & Response Roles
Know what an incident is, who to call, and what to do in the first hour.
15 min · Annual · pass at 80%
Remote Work & Personal Devices
Keep home offices, phones, and public networks from becoming the weak link.
14 min · Annual · pass at 80%
Payment Card Handling Basics
Handle cards without expanding your compliance burden.
12 min · Annual · pass at 80%
Manager Compliance Duties
Onboarding, offboarding, approvals, and evidence — the manager's compliance checklist.
20 min · Annual · pass at 80%
Start free, upgrade when it earns it
Free Assessment
$0
See where you stand in about 10 minutes.
- • One basic compliance assessment
- • Limited compliance score
- • Your top three risks
- • Preview of recommended actions
Starter
$49 one-time
A complete first compliance program you can act on today.
- • Full assessment with all categories
- • Detailed risk report by severity
- • Starter policy pack
- • 30-day action plan
Professional
$79 per month
Ongoing compliance management for a growing team.
- • Full policy library
- • Compliance Mission Control
- • Continuous compliance score
- • Training for up to 10 users
ComplianceAnvil provides educational information, organizational tools, templates, and workflow assistance. It is not a law firm, and use of the platform does not create an attorney-client relationship. Nothing here guarantees regulatory compliance, insurance approval, certification, contract awards, or protection from cyber incidents. Requirements vary by jurisdiction and industry; you remain responsible for professional review and implementation.