Security & compliance
engineered by a CISSP.
Ready-made documentation, policies, evidence builders, and assessment frameworks - built by a CISSP / CISM who works as an ISSM at a DoD contractor. Instant download, no seats, no subscription.
Brehon: the CMMC compliance platform
Bigger than a toolkit. Brehon walks a small DoD contractor through all 110 NIST 800-171 controls, captures the evidence, and generates a defensible SPRS score, SSP, and POA&M, all on a dedicated instance that is yours.
The flagship kits
Deepest toolkits with the broadest coverage. Designed to close enterprise deals, pass audits, or ship a production AI voice agent.
SOC 2 for AI Startups
The only SOC 2 prep kit built for AI companies. 12 AI-specific controls, readiness assessment, policies, evidence mapping, and auditor interview prep.
View DetailsVoice AI Agent Deployment Kit
Deploy a production-ready AI voice agent in under 30 minutes. TypeScript server, 5 industry templates, Docker deployment. Complete source code.
View DetailsFractional CISO Engagement Kit
For vCISOs serving AI startups: engagement proposal, monthly report, board briefing, 26-workstream roadmap, meeting agendas, and a 12-domain maturity model, each with a worked example, plus two Excel trackers. Multi-client licence.
View DetailsSecurity Questionnaire Response Kit
85 pre-drafted answers for SIG, CAIQ, and enterprise security questionnaires. Evidence mapping, trust center templates, and response SOP.
View DetailsDental Front Desk Automation Pack
Eight production n8n workflows from two dental practices: instant lead texting, 72-hour follow-up, review requests with a rating gate, two-way SMS inbox. Postgres schema, prompts, email templates, two guides.
View DetailsCMMC 2.0 Evidence Builder
A System Security Plan with an implementation statement, assessment objectives, and evidence for all 110 NIST 800-171 controls, an SPRS scoring workbook, POA&M tracker, and assessment prep. 4 Word documents and 1 Excel workbook.
View DetailsFocused toolkits
Single-purpose bundles for governance, compliance, and enablement. Deploy the policy, use the template, move on.
AI Compliance Toolkit
85-item scored self-assessment covering HIPAA, the EU AI Act, FTC and TCPA, legal ethics, and US state AI laws, with a scoring workbook. Regulatory guide with verified dates and cases, remediation matrix, and four training modules. 3 Word documents and 1 Excel workbook.
View Details → Governance $197AI Governance Policy Bundle
Eight AI governance policies of 1,000 to 1,500 words each (acceptable use, data, ethics, incident response, models, risk, transparency, vendors), a NIST AI RMF and ISO 42001 mapping, and the inventory workbook. 9 Word documents and 1 Excel workbook.
View Details → Deployment $197AI Employee Rollout Kit
Complete playbook for rolling out ChatGPT Enterprise, Copilot, or Claude. Phased rollout plan, shadow AI detection, ROI tracking, training quiz, and internal comms.
View Details → Incident Response $197Incident Disclosure Readiness Kit
Filing-ready disclosure templates for SEC, NIS2, DORA, HIPAA, and state breach laws. 3 tabletop scenarios and evidence chain of custody.
View Details → Privacy $197GDPR AI Compliance Kit
DPIA template with a completed example, Article 22 decision tree, EU AI Act classification worksheet (as amended July 2026), transfer mechanism guide with TIA, and a 30-item checklist with an Excel tracker. 5 Word documents and 1 Excel workbook.
View Details → Vendor Risk $147AI Vendor Security Assessment Kit
60-question scored assessment for evaluating AI vendors. Comparison matrix, DPA checklist, and pre-researched profiles for 7 major providers.
View Details →Quick-reference checklists
Short, high-density references for teams that already know the work but want a structured checklist.
- Architecture AI Architecture Review Checklist 47 pass/fail security checks across 8 categories: data flow, tenant isolation, input and output security, tool calling, model management, logging, and access. Each with how to test it, the evidence to keep, its severity, and its OWASP Top 10 mapping. 1 Word document and 1 Excel tracker. $97
- Hiring AI Startup Security Hiring Kit Job description, 20 interview questions (including AI-specific), weighted evaluation rubric, and red flag guide for hiring your first security person. $97
Free downloads
Instant downloads. No email gate, no upsell. Take what's useful.
Bundles
Save when you buy multiple products together.
AI Startup Essentials
SOC 2 for AI Startups + AI Governance Policy Bundle + Architecture Review Checklist. Everything a seed/Series A AI startup needs to look enterprise-ready.
Enterprise Sales Ready
SOC 2 + Security Questionnaire Kit + AI Vendor Assessment Kit. Close enterprise deals faster with audit-ready documentation and pre-built questionnaire answers.
Full Compliance Library
All 13 security and compliance kits: the compliance and security documents plus the Voice AI kit's TypeScript source. 13 products, 190+ files, 170,000+ words. One purchase.
David A. Moline, CISSP | CISM
Your AI automation, built by someone who secures DoD systems.
Who Built These
Every product is written by a CISSP/CISM-certified security professional who also builds AI systems - voice agents, LLM pipelines, and multi-agent architectures. This combination means the templates reflect both what the auditor needs to see AND how AI systems actually work.