Strike Graph is a compliance management platform that helps organisations obtain and maintain security and privacy certifications. It supports a security programme with the organisation's own frameworks, controls and evidence, automates tasks using AI and integrations that collect evidence from other systems, and shows progress on dashboards. It also offers risk management, questionnaires, audits, third-party risk and a trust center. Frameworks mentioned include SOC 2, ISO 27001, ISO 42001, HIPAA, DORA, GDPR, PCI DSS and TISAX. It is used through a web portal.
Strike Graph, Inc. is based in the United States and is therefore subject to US jurisdiction, including the CLOUD Act. The company does not publish where customer data is hosted, and its privacy policy only says that data may be stored and processed outside the user's own country. The GDPR appears on the website as a framework the platform supports, but a data processing agreement should be requested separately. Because the platform holds evidence about an organisation's security posture, it is sensible to establish in advance where that data is stored.