Getting Started
Quickstart Coming Soon
Comply is a Python package. Install it, point it at your codebase, and get a compliance posture report in minutes. Package not yet published — check back soon.
Install
pip install bespokeagile-comply Configure
comply init Creates a comply.yaml with your preferred frameworks, jurisdiction, and LLM provider.
Scan
comply scan ./your-project Analyzes your codebase and produces a compliance posture report.
Review
comply dashboard Opens the web dashboard to explore results, drill into controls, and track trends.
Reference
CLI Commands
All commands support --help for detailed usage.
comply scan <path> Run a compliance scan against configured frameworks comply dashboard Launch the web dashboard on localhost:8080 comply report <path> Generate Markdown, SARIF, or JUnit output comply gate CI/CD pass/fail check against configurable rules comply monitor start Start the continuous compliance monitor daemon comply forecast Project compliance trends from scan history comply audit Run the predicate gap audit with evidence classification comply frameworks List available frameworks and control counts comply cicd ingest Import CI/CD test results for Layer 2 evidence Configuration
comply.yaml
Generated by comply init. All settings can also be passed as CLI flags.
frameworks List of framework IDs to scan against (e.g., eu_ai_act, soc2_ai, iso27001) jurisdiction Jurisdiction profile — activates applicable frameworks (eu, us, healthcare, fintech, global) llm_provider LLM provider for evidence analysis (anthropic, openai, gemini, grok, ollama) export_formats Output formats: markdown, sarif, junit evidence_layers Which evidence layers to evaluate: L1 (code), L2 (process), L3 (traffic) gate_rules CI/CD gate thresholds — minimum score, regression tolerance, required frameworks Self-Hosted
Docker Deployment Coming Soon
Run Comply as a persistent service with the web dashboard, continuous monitoring, and CI/CD gate API.
docker run -d \
-p 8080:8080 \
-v ./scans:/data \
-e LLM_PROVIDER=anthropic \
-e ANTHROPIC_API_KEY=$ANTHROPIC_API_KEY \
bespokeagile/comply:latest
The dashboard is available at localhost:8080.
Scan history, gate decisions, and monitor events persist in /data.