Licensed tool · Buy online or start a free pilot
A unified assurance assessment for cyber security, privacy and regulatory compliance — from scoping workshop to a prioritised improvement roadmap and a board-ready report.
NorthX harmonises the controls of the frameworks you select into one assessment. Teams score implementation, maturity and residual risk on evidence, agree findings, turn them into a roadmap of owned, dated actions — Quick Wins, Short Term and Long Term — and export the deliverables, all in one place and saved to their account. AI helps at every step with the model you choose — or with ready-made prompts you can copy into any assistant.
ISO 27001, NIST CSF, ISR (DESC Dubai), IA Standards, GCAA, ADICS, the UAE CSC government and CII policy packs, UAE PDPL, DIFC and ADGM data protection, and CBUAE technology-risk profiles — harmonised into one control set.
Record applicability, implementation, current and target maturity, inherent and residual risk, observations and the evidence behind each rating — with an evidence register that tracks what has been accepted.
Overview dashboard, risk–maturity map, heatmap and priority control domains make it easy to challenge inconsistent ratings before the findings are agreed.
Capture findings with severity and rationale, then accountable actions with owners and dates, sorted into Quick Wins, Short Term and Long Term horizons.
Executive and detailed PowerPoint decks, a detailed Word report, print-to-PDF, CSV registers for controls, findings, actions and mappings, and JSON import and export for backup.
Connect the model you prefer — OpenAI, Anthropic Claude, xAI Grok, Google Gemini, OpenRouter, Groq, Mistral, DeepSeek or any OpenAI-compatible endpoint — with your own key, saved encrypted to your account. Get a scope check, workshop plan, interview questions, evidence review, draft gaps and findings, suggested actions, a consistency check, the executive summary and board talking points. Every helper also gives you a prompt to copy into any approved assistant, and nothing is applied until you review it.
Overview. Pick the frameworks and regulatory packs in scope; NorthX harmonises them into one control set and tracks maturity, residual risk and evidence. AI help is one click away at every step.
Screens show sample data from a fictional organisation.
Licensing
Buy Professional or Team and pay online — access is switched on straight away and each named user is emailed a sign-in link. Or ask for a free 14-day pilot.