# compliance-specialist

A Claude Code subagent for compliance reviews, risk work, audit preparation, and security governance.

- subagent · `type=agent` · Claude Code · 1052 installs
- Author: davila7
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/agents/security/compliance-specialist.md
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/agents/compliance-specialist

## What it does

\`compliance-specialist` reviews regulatory obligations and maps them to security controls. It covers SOX, GDPR, HIPAA, PCI-DSS, and SOC 2, while supporting risk evaluation, policy work, audit evidence, and governance tasks.

The subagent can produce gap assessments, risk registers, control matrices, policy documents, requirement mappings, and training material. Its configuration grants `Read`, `Write`, `Edit`, and `Bash`, so it can inspect and change files and run commands. That access should be considered before using it in a project. Its workflow includes framework mapping, impact review, control documentation, and audit preparation.

## Install

### Claude Code (native platform)

1. **claude-code-templates**
```bash
npx claude-code-templates@latest --agent security/compliance-specialist
```

2. **Manually: put the files in place**
- File: `.claude/agents/compliance-specialist.md` — For all projects use ~/.claude/agents/. Claude delegates by the description field or an @-mention

### Codex

**Manually: put the files in place**
- File: `.codex/agents/compliance-specialist.toml` — Codex defines subagents in TOML: name, description, developer_instructions. Move the Markdown text into developer_instructions by hand. For all projects use ~/.codex/agents/

### Cursor

**Manually: put the files in place**
- File: `.cursor/agents/compliance-specialist.md` — Cursor also reads .claude/agents/

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/davila7/claude-code-templates/tree/HEAD/cli-tool/components/agents/security/compliance-specialist.md

## When to use it
- map SOX, GDPR, HIPAA, PCI-DSS, or SOC 2 requirements
- identify gaps in security controls
- prepare evidence for an audit
- build a risk register with mitigation actions
- write security policies and procedures

## Example prompts
- Assess this project against SOC 2 and write a gap report.
- Prepare an audit evidence package and a control matrix.
- Draft security policies and a risk register for this project.

## Similar
- [compliance-os](https://affpapa.org/en/nevibecode/skills/compliance-os.md) — skill · 33 installs
- [compliance-auditor](https://affpapa.org/en/nevibecode/agents/compliance-auditor.md) — subagent · 421 installs
- [security-compliance-audit](https://affpapa.org/en/nevibecode/skills/security-compliance-audit.md) — skill · 665 installs
- [awesome-claude-code-security-compliance-suite](https://affpapa.org/en/nevibecode/skills/awesome-claude-code-security-compliance-suite.md) — skill · 730 installs
- [sparkfinderoven-security-compliance-skills](https://affpapa.org/en/nevibecode/skills/sparkfinderoven-security-compliance-skills.md) — skill · 759 installs
- [gdpr-compliance](https://affpapa.org/en/nevibecode/skills/gdpr-compliance.md) — skill · 365 installs

From the same set: [davila7/claude-code-templates](https://affpapa.org/en/nevibecode/by/davila7/claude-code-templates.md) — 361 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md