Enable and Configure Frameworks
Learn how to enable, configure, and add custom compliance frameworks in Sprinto.
Enabling and configuring frameworks in Sprinto lets you align your compliance efforts with industry standards, regulatory requirements, or internal policies. You can choose from predefined frameworks such as SOC 2, ISO 27001, and PCI DSS, or create a custom framework tailored to your business.
Frameworks selected during your Sprinto plan setup are auto-enabled and appear in the Enabled Frameworks section.
You can edit or disable frameworks later from the Manage Framework menu.
Enable a Predefined Framework
Log in to the Sprinto Dashboard, from the left navigation menu, select Compliance > Frameworks.
In the Available tab, review the list of predefined frameworks.
Click the framework you want to enable.
Review the framework description and criteria overview.
Click Enable framework to add it to your compliance setup.
The framework now appears in your Enabled Frameworks list with its readiness percentage displayed.
Add a Custom Framework Using a Document
If your framework is not available in Sprinto's framework library, you can upload a framework document and use Sprinto AI to extract criteria, identify compliance gaps, and map controls and checks automatically.
Note
This is an on-demand feature. To enable custom frameworks for your organisation, contact the Sprinto Support team. Once enabled, you can create and manage custom frameworks using either the document upload or template upload workflow.
Upload a framework document
Log in to the Sprinto dashboard.
Navigate to Compliance → Frameworks.
Click Add own framework.
Select Upload any document.
Upload your framework document.
Click Next.
Sprinto supports the following file formats:
PDF
DOCX
DOC
CSV
TXT
Configure the framework
Enter the framework details:
Framework name (required)
Description (optional)
Applicable region (optional)
Category (optional)
Click Add framework.
Sprinto creates the framework and uploads the document.
Review extracted criteria
After the document is uploaded, Sprinto AI begins extracting framework criteria from the document.
Wait for the extraction process to complete.
Click Continue beside Extract criteria.
Review the extracted criteria.
Select the criteria you want to include in the framework.
Clear any criteria that should remain out of scope.
Any criteria that are not selected are marked as Out of scope within the framework.
Click Proceed with <number of selected criteria>.
Review compliance drift
Sprinto AI analyses the extracted framework against your existing compliance programme and identifies:
Out-of-line commitment standards
Policy updates
Framework-specific gaps
Click Continue.
Review the identified updates and recommendations.
Click Enable Framework.
Enable the framework
Review the framework details in the confirmation drawer.
Click Enable framework.
The framework is enabled and becomes available within your Sprinto account.
Map controls
Sprinto AI analyses the selected criteria and suggests relevant controls.
Click Continue beside Map controls.
Review the suggested controls.
Select the controls you want to map.
You can:
Accept all suggested controls.
Select only the controls relevant to your framework.
Click Accept and Map.
Map checks
Sprinto AI then suggests checks for the mapped controls.
Review the suggested checks.
Select the checks you want to map.
Optionally use Select all to map all suggested checks.
Click Accept and Map.
Sprinto maps the selected checks to the framework controls.
Manage the framework
After setup is complete, you can:
Review extracted criteria.
Manage control mappings.
Manage check mappings.
Review AI-generated suggestions.
Update framework settings from the framework dashboard.
Sprinto AI continues to assist with framework maintenance by identifying mapping opportunities and compliance drift as your compliance programme evolves.
Add a Custom Framework Using a Template
Use this option when you already have your framework criteria documented and want to import them using Sprinto's framework template.
Create a custom framework
Log in to the Sprinto dashboard.
Navigate to Compliance → Frameworks.
Click Add own framework.
Select Upload template.
Click Next.
Configure the framework
Enter the framework details:
Framework name (required)
Description (optional)
Applicable region (optional)
Category (optional)
Click Add framework.
Sprinto creates the framework and opens the framework setup page.
Enable the framework
Before uploading framework criteria, you must enable the framework.
On the framework page, locate the Setup guide section.
Click Enable beside Enable framework.
In the confirmation drawer, click Enable framework.
The framework status changes to Enabled.
Upload framework criteria
After enabling the framework, upload the completed framework template.
In the Upload template step, click Continue.
Download the template if you have not already completed it.
Upload the completed CSV template.
Sprinto validates the file and displays the imported framework criteria for review.
Review the uploaded entries.
Click Next.
Map controls
Because controls are pre-defined in the uploaded template, Sprinto automatically maps the imported criteria and completes the control mapping step.
You can review the mapped controls from the framework after setup is complete.
Map checks
Sprinto AI analyses the imported controls and recommends relevant checks.
Review the suggested checks.
Select the checks you want to map.
Optionally dismiss suggestions that are not relevant.
Click Accept and Map.
The selected checks are mapped to the framework controls.
Verify policy updates
Sprinto AI reviews your existing policies and identifies any updates required to align with the framework.
Depending on the framework requirements, Sprinto may:
Recommend policy updates.
Request policy acknowledgements.
Indicate that no updates are required.
Review and complete any recommended actions.
Complete framework setup
Click Complete setup.
The framework is now available for use within Sprinto.
Manage framework mappings
After setup is complete, you can:
View imported criteria.
Review mapped controls and checks.
Add additional criteria manually.
Generate additional control mapping suggestions using AI.
Manage framework settings and mappings from the framework dashboard.
Supported template format
The framework template must be uploaded as a CSV file and should contain the framework criteria structure required by Sprinto.
Download the latest template from the Upload template step before preparing your framework data.
Disable a Framework
Log in to the Sprinto Dashboard, from the left navigation menu, select Compliance > Frameworks.
In the Enabled tab, select the framework you wish to disable.
Click Manage Framework.
In the drawer that opens up, click Disable.
Review and map AI-suggested controls
Sprinto AI can suggest controls for framework criteria based on your control library and control templates. Review these suggestions and map the relevant controls directly to framework requirements.
How Sprinto AI suggestions work
Sprinto AI evaluates framework requirements and recommends relevant controls from across your available control sources. Suggestions can include:
Controls currently mapped in your control library
Disabled controls
Controls from the Sprinto control template library, including SDC and SCF templates
Controls that are not yet present in your organisation's control library
When you accept a suggestion, Sprinto automatically maps the selected controls to the relevant framework criteria. This helps accelerate framework onboarding, improve coverage, and reduce the effort required to identify appropriate controls manually.
To review and map AI-suggested controls:
Go to Compliance > Frameworks.
Select the framework you want to review.
In the Control suggestions are ready banner, click Review Suggestions.
In the Review suggestions by Sprinto AI drawer:
Review the controls suggested for each criterion.
Select the checkbox next to the criteria you want to map.
Optional: Select Select all to choose all available suggestions.
Click Accept and Map.
Sprinto maps the selected controls to the corresponding framework criteria and updates the framework coverage accordingly.
Last updated