Benchmarks and playbooks
Import CIS Benchmarks by product, NIS2, CAN/DGSI 104 and best-practice playbooks, or build your own checks and framework groups.
Compliance status clients can see for themselves
Compliance checks, evidence and risks clients can see
MSP team view
Clients see their compliance score, failed checks, evidence and the risks you share in their branded portal. Your team imports benchmarks or drafts checks with AI, runs them on a schedule and tracks each gap until it is fixed.
Used by MSPs including
What changes for your clients
The problem
Clients don't know where they stand on compliance until an auditor asks for proof
In MSPortal
Each check records its status, your notes and the uploaded evidence, grouped by the framework it belongs to
The outcome: Clients go into an audit knowing which checks pass and what evidence backs each one
The problem
Clients wait months after onboarding before they see anything about their compliance
In MSPortal
Import industry benchmarks and best-practice playbooks, or describe what to check and let AI draft the checks for your review, then schedule recurring runs
The outcome: Clients see their first compliance results early in the engagement, then fresh results every run
The problem
Clients hear that a check failed but not what it means for the business
In MSPortal
Failed checks can go into a risk register with likelihood, impact, an owner and a treatment plan, and you choose which risks clients see
The outcome: Clients know which gaps matter most and what is being done about each one
“We run a hospitality-first MSP, so the client experience has to match that standard — and MSPortal delivers it. One branded destination for tickets, compliance, and reporting, all syncing straight into HaloPSA with no copy-paste and no chaos. The compliance dashboards and AI-generated reports have made our client conversations noticeably sharper, and onboarding new accounts is dramatically smoother. It's become part of how we deliver, not just another tool in the stack.”
What's included
Benchmarks, AI-drafted checks, weighted scores and a risk register clients can see.
MSP team view
AI-drafted checks
Describe what you want to check. AI proposes a plan, drafts the checks once you approve it, and you pick which ones to save. AI can also translate checks into 15 languages.
MSP team view
Weighted compliance scoring
Scores weigh each check by scope, criticality and priority, then map to an A to F grade you configure.
Client-facing dashboards
Clients see their score, grade, failed and overdue checks, your public notes and shared files. Private notes stay with your team.
From failed check to fix
Open a ticket or Planner item from a failed check, or add it to the risk register. AI drafts a client-ready note with business impact and remediation steps.
Compliance in QBRs
Add score, progress over time, open gaps and a risk matrix to client reports, and schedule them with an approval step before they send.
At a glance
- CIS Benchmarks, NIS2, CAN/DGSI 104, best-practice playbooks and your own checks in one workspace
- Liongard metrics and CIPP Microsoft 365 standards update matching checks automatically
- A risk register with likelihood, impact, owners and treatment plans
- Clients book their own compliance reviews on your calendar
What compliance frameworks does MSPortal support?
You can import CIS Benchmarks by product with Level 1 and Level 2 profiles, NIS2, CAN/DGSI 104, and best-practice playbooks. Use of CIS Benchmark content is subject to your CIS licensing. For HIPAA, SOC 2 or an internal standard, build your own checks or have AI draft them from a description. MSPortal tracks checks and evidence. It does not certify compliance.
How does AI help build compliance checks?
Describe what you want to check. AI proposes a plan, and after you approve it, drafts up to 40 checks. You choose which ones to save. AI can also rewrite a single check, translate checks into 15 languages, and draft a client-facing note with a summary, business impact and remediation steps. Review AI text before you rely on it, because a drafted check does not show that a requirement is met.
Can clients see their compliance status?
Yes. Clients see their score and grade, pass and fail counts, overdue checks, public notes, shared files and any risks you approve for them. You can hide individual checks, and private notes are never sent to client users. If you give a client role write access, those users can update check status and upload evidence.
How does compliance scoring work?
Each check is weighted by scope (company, location or device), criticality and priority. Statuses can give partial credit, and statuses such as N/A can be left out. Scores map to A to F grades. The weights and grade thresholds apply to your whole portal, and each client gets its own score from its open compliance runs.
Can I include compliance data in business review reports?
Yes. The report builder has compliance blocks for score overview, breakdown by group, progress over time and non-compliance items, plus risk blocks for the register, matrix and exposure trend. You can schedule these reports and require approval before each one sends.
Explore related features
Show clients where they stand on compliance
See a client's compliance dashboard, a failed check turned into a tracked risk, and the report that goes into their QBR.