One platform for modern compliance

Q: What frameworks does Constant support?

Constant supports CPS 234 Information Security, Essential Eight, ISO 27001 readiness, NIST CSF 2.0, SOC 2 readiness, and structured Risk Matrix assessments. You can run multiple frameworks within one tenant.

Q: Is Constant only for Essential Eight?

Essential Eight is our most mature framework with deep ACSC maturity mapping, but the platform is built for multiple compliance and risk frameworks used by Australian organisations.

Q: How does Constant differ from a GRC tool?

Constant combines framework-specific assessments, evidence collection, assessor-led review, and Australian onshore hosting in one product - rather than generic policy libraries that require heavy customisation.

Q: Can MSPs use Constant for multiple clients?

Yes. MSP partners use Constant to deliver consistent assessments, evidence collection, and reporting across client portfolios with scalable methodology.

Q: Where is data hosted?

Constant is designed, owned, and operated in Australia with onshore data residency. See our Security page for detail on our security practices.

Assess frameworks, collect evidence, track remediation and report posture.

Designed, owned and operated onshore for Australian organisations.

Book a demo View pricing

See Constant in action

Watch how teams run assessments, link evidence to controls, and stay ready for assessor review without spreadsheet chaos.

From assessment to audit-ready

Constant replaces scattered tools with one workflow for compliance teams, security leaders, and assessors.

Assess

Run structured assessments against your chosen frameworks with clear control guidance and versioning.

Evidence

Collect artefacts automatically or upload manually. Every control links to the proof that demonstrates it.

Remediate

Assign owners, track gaps, and monitor remediation progress across frameworks and business units.

Review

AI accelerates triage while certified assessors validate critical controls and findings.

Report

Dashboards and exports give executives, boards, and auditors a consistent view of posture.

Frameworks supported

Run compliance and risk programs on one platform. Each framework has dedicated guidance, evidence workflows, and reporting.

View

CPS 234 Information Security

Track APRA CPS 234 capability requirements, evidence, and board reporting for regulated entities.

View

Essential Eight

Track ACSC Essential Eight maturity across all eight strategies with evidence and assessor review.

View

ISO 27001

ISO 27001ISO readiness

Prepare for ISO/IEC 27001 certification with structured controls, evidence, and gap tracking.

View

NIST CSF 2.0

NIST CSFOperational CSF

Assess and improve cybersecurity posture using the NIST Cybersecurity Framework 2.0 functions.

View

SOC 2 Readiness

Prepare for SOC 2 Type I and Type II audits with Trust Services Criteria evidence tracking.

Risk assessments (1 framework)

View

Risk Matrix

Risk Assessment

Run structured risk assessments with likelihood and impact scoring, treatment tracking, and reporting.

Compliance that pays for itself

The cost of cyber risk is rising. Visibility is the first step to reducing it.

Up to 0%

Cut the time spent on audits and evidence collection so your team can focus on what matters most.

0x faster

Move from manual spreadsheets to automated workflows and real-time progress tracking.

0% Australian

Your data stays in Australia, protected by Australian owned infrastructure and Australian security experts.

Real-time visibility

Always know your compliance status with live dashboards, automated alerts, and audit-ready evidence on demand.

Platform FAQs

What frameworks does Constant support?

Is Constant only for Essential Eight?

How does Constant differ from a GRC tool?

Can MSPs use Constant for multiple clients?

Where is data hosted?

Start your compliance journey today

Choose the right plan for your organisation. Scale seamlessly as your compliance needs evolve.

Ready to simplify your compliance process?

Book a demo and see constant in action.

Book a Demo Explore More

All Paid Plans Include

Certified assessors
Automated evidence collection
Unlimited assessor reviews
AI-powered pre-reviews

Real-time compliance dashboards
Priority support
Advanced reporting & exports
Single sign-on (SSO)

Audit-ready documentation
Role-based access controls
API & integrations
Australian data residency