# Comp AI - Documentation ## Guides ### Get Started - [Welcome to Comp AI](https://www.trycomp.ai/docs/introduction.md): Comp AI documentation for compliance automation, evidence collection, policies, integrations, Trust Centers, device compliance, and the public API. - [AI Policy Editor](https://www.trycomp.ai/docs/ai-policy-editor.md): Use AI to edit and improve organizational policies for SOC 2, ISO 27001, and GDPR compliance - [Automated Evidence](https://www.trycomp.ai/docs/automated-evidence.md): Automate recurring SOC 2, ISO 27001, HIPAA, and GDPR evidence collection from connected systems with Comp AI. - [Browser Automations](https://www.trycomp.ai/docs/browser-automations.md): Let Comp AI sign in to your vendors' web apps on a schedule — including two-factor authentication — and capture audit evidence automatically. - [Comp AI Device Agent](https://www.trycomp.ai/docs/device-agent.md): Install the Comp AI Device Agent to monitor endpoint encryption, antivirus, password policy, and screen-lock compliance. - [Security Questionnaire](https://www.trycomp.ai/docs/security-questionnaire.md): Automatically answer vendor security questionnaires with approved policies, knowledge base documents, and Comp AI review workflows. - [Security Questionnaire Extension](https://www.trycomp.ai/docs/security-questionnaire-extension.md): Answer security questionnaires directly on the vendor's page — the Chrome extension drafts answers from your Comp AI policies and inserts the ones you approve. - [Penetration Tests](https://www.trycomp.ai/docs/penetration-tests.md): Create AI-assisted penetration test runs, track security findings, and download Markdown or PDF report deliverables. #### MCP - [MCP Connector](https://www.trycomp.ai/docs/mcp-connector.md): Connect any AI assistant to Comp AI with one URL and a sign-in — no install, no API key. The hosted, recommended way to use the Comp AI MCP. - [MCP Server](https://www.trycomp.ai/docs/mcp-server.md): Drive your Comp AI compliance program from any AI assistant — Claude Desktop, Cursor, ChatGPT, Codex, Gemini, VS Code, Windsurf — using just your Comp AI API key. #### Trust - [Trust Access](https://www.trycomp.ai/docs/trust-access.md): Manage Trust Center access requests, NDAs, reviewer grants, audit trails, and shared compliance resources in Comp AI. ## Cloud Tests ### Cloud Test Guides - [Cloud Tests](https://www.trycomp.ai/docs/cloud-tests/index.md): Continuously assess your cloud posture by connecting AWS, Azure, and GCP to Comp AI. - [AWS Cloud Tests](https://www.trycomp.ai/docs/cloud-tests/aws.md): Connect your AWS account with a read-only IAM role to run continuous cloud security checks, and add an optional second role to apply fixes from Comp AI. - [Azure Cloud Tests](https://www.trycomp.ai/docs/cloud-tests/azure.md): Connect Microsoft Azure to Comp AI over OAuth (or a service principal) to run continuous cloud security checks against Microsoft Defender for Cloud. - [GCP Cloud Tests](https://www.trycomp.ai/docs/cloud-tests/gcp.md): Connect Google Cloud Platform to Comp AI over OAuth so findings from Security Command Center flow into your compliance posture. ## Integrations ### Platform Overview - [Integrations](https://www.trycomp.ai/docs/integrations/index.md): Extensible platform for building compliance check integrations ### Integration Guides - [Aikido Security](https://www.trycomp.ai/docs/integrations/aikido.md): Connect Aikido to automate security evidence in Comp AI - [GitHub](https://www.trycomp.ai/docs/integrations/github.md): Connect GitHub to automate code security evidence in Comp AI ### Developer Guides - [Writing Integrations](https://www.trycomp.ai/docs/integrations/writing-integrations.md): Step-by-step guide to creating integration manifests and checks - [Authentication Reference](https://www.trycomp.ai/docs/integrations/authentication.md): Complete guide to all authentication types supported by the integration platform - [Variables Reference](https://www.trycomp.ai/docs/integrations/variables.md): Complete guide to user-configurable variables in checks - [Writing Checks Reference](https://www.trycomp.ai/docs/integrations/checks.md): Complete guide to writing compliance checks - [Contributing Integrations](https://www.trycomp.ai/docs/integrations/contributing.md): Guidelines for contributing new integrations to the platform ### Self-Hosting - [Docker Self-Hosting](https://www.trycomp.ai/docs/self-hosting/docker.md): Deploy Comp with Docker Compose using per-service environment files - [Environment Reference](https://www.trycomp.ai/docs/self-hosting/env-reference.md): Complete environment variable reference for Docker self-hosting - [OAuth Configuration for Self-Hosters](https://www.trycomp.ai/docs/integrations/oauth-setup.md): Platform admin guide to enabling OAuth integrations - [API Reference (442 pages)](https://www.trycomp.ai/docs/_llms/api-reference.md): Documentation for API Reference. ## OpenAPI Specs - [openapi](/docs/openapi.json) ## Optional - [Join us on Discord](https://discord.gg/compai) > The links below point to documentation indexes. Follow each `/_llms/` index recursively until you reach documentation pages. ## Indexes - [API Reference (442 pages)](https://www.trycomp.ai/docs/_llms/api-reference.md): Documentation for API Reference. - [API Reference / Reference (441 pages)](https://www.trycomp.ai/docs/_llms/api-reference/reference.md): Documentation for API Reference / Reference. - [API Reference / Reference / Integrations (45 pages)](https://www.trycomp.ai/docs/_llms/api-reference/reference/integrations.md): Documentation for API Reference / Reference / Integrations. - [API Reference / Reference / Policies (37 pages)](https://www.trycomp.ai/docs/_llms/api-reference/reference/policies.md): Documentation for API Reference / Reference / Policies. - [API Reference / Reference / Trust Portal (34 pages)](https://www.trycomp.ai/docs/_llms/api-reference/reference/trust-portal.md): Documentation for API Reference / Reference / Trust Portal. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.