About Attestvio
Attestvio works the arithmetic of a compliance program and then keeps the record it produces. The free sheets on this site take your own counts, obligations, controls, evidence items, audit samples, incidents, cases and training seats, and return the figures a compliance officer otherwise estimates: reviewer hours, months to a full attestation, audit days, expected gaps and what they cost to close. Every one computes on the page with no account. The paid plan keeps what the sheets describe: each obligation with its controls and the evidence dated against it, each audit with its findings and their remediation, each incident and case with its status, and each period's attestation with the name of whoever signed it.
Why this site exists
This site exists because the arithmetic of a small program is never written down anywhere. A compliance officer can find a thousand words on what an obligation means and nothing on how many reviewer hours their own register will cost this quarter, how many days an audit of that scope takes, or what the gaps it finds will cost to close. Those are small calculations from numbers the business already has, and having them turns a conversation with a firm or a vendor into a negotiation about a figure rather than about how long last year felt.
Who it is for
The compliance officer, or the owner wearing that hat, in a regulated small business whose register is a spreadsheet and whose evidence is a shared drive
Not enterprises buying a governance platform, not consultants running programs for clients, and not anyone who needs to be told what a regulation requires
What it does not do
- No legal advice and no rule text. What a regulation requires of you is a question for your own counsel or the regulator's own material, which every page here links to rather than paraphrases.
- No benchmark rates and no industry averages. Every figure a sheet returns comes from numbers you typed, because a rate borrowed from somebody else's program is the input most likely to be wrong.
- No certification, no attestation and no audit. Attestvio keeps the record an examiner reads and gives no opinion on it; the opinion has to come from a firm that is independent of us and of you.
What is on this site
12 free sheets, each working its figure on the page with no account, and Attestvio Pro that keeps the record. All sheets · Pricing.
- Pci compliance software: Work the PCI evidence items and hours a year, the scan spend, the load on the staff hours available and the hours short.
- It compliance audit: Work a year of IT control tests: the tests, the testing hours, the failures expected, the remediation hours and the annual cost.
- Compliance audit software: Work the samples an audit scope needs, the hours and days, the coverage the days available give and the days short.
- Hipaa compliance software: Work a HIPAA risk analysis: the risk items, the score per item, the assessment hours and the cost, per system and in total.
- GDPR compliance software: Work a GDPR data map's register entries, the hours to map them, the processor agreements to hold and the monthly review load.
- Compliance tracking software: Work the evidence load an obligations register puts on its reviewers: items per attestation, hours, capacity, utilization and the months to a full attestation.
- Hipaa compliance audit: Work a HIPAA audit's evidence items, assessment hours, expected gaps, remediation hours and the all-in cost.
- GDPR compliance audit: Work a GDPR audit's checks, audit hours, expected findings, remediation hours and the all-in cost.
- HR compliance reporting: Work an HR compliance report: the training seats for the year and those outstanding, the acknowledgements required and outstanding, and the training hours.
- Pci dss compliance audit: Work a PCI DSS audit: the line items assessed, the assessment hours, the evidence gaps expected, the remediation hours and the all-in cost.
- Compliance case management software: Work a compliance case backlog: the net cases cleared per month, the months to clear it, the days over target and the closure rate.
- Compliance incident management: Work a month of compliance incidents: triage and investigation hours, escalations and their hours, the total hours and the cost per incident.
What Attestvio Pro keeps
The sheets are free forever. Pro turns them into the record: every obligation with its controls and the evidence collected against them, dated; every audit with its findings and their remediation; every incident and case with its status; every attestation with who signed it; your company name and logo on the printed sheets, no watermark, and an export when the examiner or the auditor asks.
Who answers for it
Joe Ellul-Turner, Founder, Ellul Solutions Ltd.
Reach us
Contact for a question about the product, ask whether Attestvio Pro does a particular thing, Support when something is broken or money is wrong, or hello@attestvio.com. The legal terms are on Terms and Privacy.