Documentation
Seven steps from an empty workspace to compliance checks that run on a schedule and on every push.
How Gorilli Compliance connects to GitHub, email and your websites.
Sign up and create a workspace for your company. Invite teammates as owners, admins, members or viewers depending on what they need to change.
Add your legal entity, contacts, what personal data you process and the sub-processors you use. Scans use the profile to decide which controls apply, and generated documents are drafted from it.
Connect the websites, GitHub repositories and policy documents you want checked. Websites are scanned over HTTPS; repositories need a GitHub token, which is stored encrypted.
Start a scan from the dashboard. Each check runs against controls mapped to GDPR, ePrivacy, the Cyber Resilience Act, web-security and repository-hygiene baselines, and Italian website obligations.
Open the posture score for each framework and work through its findings. Findings that appeared since the previous scan carry a "new since last scan" badge.
Open fix pull requests on GitHub for repository findings such as missing SECURITY.md or CODEOWNERS files. Generate policy documents, such as a privacy policy, cookie policy or incident response plan, then review, version and approve them.
Schedule daily or weekly scans and enable the GitHub push webhook so every push is checked. Owners and admins get an email when a passing check starts failing.
Want a walkthrough with your own website and repositories?