Cookie preferences

Choose which cookies RuleFix may use on this browser. You can change this at any time from “Cookie settings” in the footer. Details are in our Cookie Policy.

Strictly necessaryAlways onKeep you signed in, protect sign-in and GitHub connections against forgery, remember choices you make on purpose (like collapsing the sidebar) and remember this cookie choice. The site can't work without them, so they're always on.Supabase sign-in session, rf_consent, rf_sidebar, rf_gh_state, rf_signup_consent.
PreferencesWould remember optional settings that make the site more convenient, without you asking each time.We don't currently set any preference cookies. If we add some, they stay off unless you switch this on.
AnalyticsWould help us understand how the site is used, such as which pages are visited, so we can improve it.We don't currently use analytics cookies or analytics scripts.
MarketingWould measure or personalise advertising on other sites.We don't currently use marketing or advertising cookies, and we never sell your data.

Compliance
Developers
Pricing
Docs

Sign in Get started

Product

Overview
MCP Server
IDE Extensions
CI/CD
RuleFix Agent
Integrations
Changelog

Compliance
Developers
Pricing
Docs

Sign in Get started

Compliance

Comply everywhere
you build.

Rule packs translate regulations and standards into concrete code checks, fixes and evidence — so engineers know exactly what to change.

Frameworks

8 frameworks, one workflow.

DPDPIndiaConsent, notice, rights, retention and more.5+ code checks
GDPREuropeLawful basis, data rights, transfers and more.5+ code checks
SOC 2GlobalSecurity, availability, confidentiality.5+ code checks
HIPAAUSPHI protection and safeguards.5+ code checks
PCI DSSGlobalPayments data security.5+ code checks
ISO 27001GlobalInformation security management.5+ code checks
CCPAUS · CaliforniaConsumer rights and opt-outs.5+ code checks
LGPDBrazilLegal bases and data subject rights.5+ code checks

How mapping works

From regulation to pull request.

Requirements
Each framework is broken into engineering requirements.
Rules
Requirements map to code rules with clear pass/fail criteria.
Evidence
Fixes and checks are recorded against the controls they satisfy.

Regulators & standards bodies

Straight from the source.

Primary texts and guidance for every framework. RuleFix is not affiliated with these bodies.

DPDP
- Ministry of Electronics and IT (MeitY), Government of India
- CERT-In, Government of India
GDPR
- EUR-Lex, Publications Office of the EU
- European Data Protection Board (EDPB)
SOC 2
- AICPA & CIMA
HIPAA
- U.S. Department of Health & Human Services (HHS)
- U.S. Department of Health & Human Services (HHS)
PCI DSS
- PCI Security Standards Council
ISO 27001
- International Organization for Standardization (ISO)
CCPA
- State of California Department of Justice — Office of the Attorney General
- California Privacy Protection Agency (CPPA)
LGPD
- Presidência da República, Brazil
- ANPD, Government of Brazil

RuleFix helps engineering teams implement and evidence technical controls. It is not legal advice and does not by itself make an organisation compliant or certified. Framework summaries are simplified — consult qualified counsel or auditors for your obligations.

Ship AI-powered products
that are compliant by design.

Join developers building with RuleFix.

Get started for free Talk to us

Compliance engineering for the AI era.

Product

Overview
MCP Server
IDE Extensions
CI/CD
Integrations
Changelog

Compliance

DPDP
GDPR
SOC 2
HIPAA
All frameworks

Developers

Docs
API reference
Examples
Developer hub

Company

About
Careers
Contact
Security

Legal

All legal
Privacy
Terms
Cookies
Acceptable use
DPA
Sub-processors
Refunds
Grievances

© 2026 RuleFix, a Vinkura product. All rights reserved. Third-party names and logos are trademarks of their owners, shown to indicate compatibility only.

Privacy
Terms
Cookies
Grievances
Cookie settings