Ciphrix

Ciphrix is a Melbourne-based compliance automation company that helps organisations manage security, risk and compliance requirements using artificial intelligence (AI). Founded by former AWS security leaders, the company provides a platform that supports organisations in achieving and maintaining compliance across multiple regulatory and industry frameworks.

Its capabilities include:

• compliance automation
• AI-powered policy generation
• risk assessment and management
• evidence collection and review
• supplier and third-party risk assessment
• security questionnaire responses
• audit preparation and support
• multi-framework compliance management.

The platform uses AI agents to assist with compliance activities that are traditionally manual and time intensive. These agents can:

• generate policies and documentation
• assess risks and controls
• collect and organise compliance evidence
• review suppliers and third-party risks
• prepare responses to security questionnaires.

Ciphrix supports frameworks including:

• ISO 27001
• SOC 2
• Essential Eight
• IRAP
• HIPAA
• GDPR
• quality management systems (QMS).

The company helps businesses configure compliance programs, connect existing systems and establish ongoing governance processes. By centralising controls, evidence, risks and audits within a single platform, Ciphrix helps organisations reduce administrative effort, improve visibility of their compliance posture and accelerate readiness for certification, audits and customer assessments.

All AI-generated outputs remain subject to human review and decision-making, supporting responsible and controlled use of AI within security and compliance operations.