Compliance mapping

MrProbe, by QDEX Consulting (Chennai, India), is an enterprise AI agent assurance platform for red teaming and functional evaluation.

MrProbe maps findings to controls. The headline number is 30 frameworks, split in the product constants as 13 global and 17 country-specific. The named labels shown in the marketing families are OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS, ISO/IEC 42001, GDPR, UK GDPR, CCPA / CPRA, HIPAA, India DPDP, Japan APPI, PIPEDA · Law 25, Singapore PDPA, Brazil LGPD, Korea PIPA, KSA PDPL, PCI DSS v4, SOX, GLBA, FedRAMP, FFIEC, EU AI Act, NIS2, DORA, UAE PDPL, DIFC DPL, ADGM DPR, MAS TRM, BACEN. That named list has 28 entries. This page does not invent names to force the two counts to match.

ISO/IEC 42001 is one of those named labels. The site footer says “Aligned” next to it. Aligned means the product maps controls. It does not mean QDEX Consulting or MrProbe holds an ISO 42001 certificate. Do not read this page as that claim.

ISO 27001 is described on the existing footer as certified. SOC 2 is described as a target the company is working toward. Those sentences are already on the site. This page does not upgrade either of them.

Jurisdictions in the product: United States, European Union, United Kingdom, India, Japan, China, Singapore, United Arab Emirates, Canada, Australia, Brazil, South Korea, Saudi Arabia, Indonesia, South Africa, Türkiye. Sub-regions the product calls out are the US states plus DC, UAE federal plus DIFC and ADGM, and Canada federal plus Quebec, Alberta, and British Columbia. A jurisdiction being in the list means the PII probes and the linked frameworks exist in the product. It is not a statement that a regulator has endorsed MrProbe.

Professional and Enterprise plan rows in the billing catalogue list framework keys such as owasp, nist, hipaa, gdpr, pci_dss, eu_ai_act, sox, iso27001, mitre_atlas, and others. Free and Starter list owasp. Buyers should match the tier to the frameworks they need instead of assuming every tier maps every name.

The longer control-by-control notes live in the docs at /docs/compliance. CSA STAR still has to be updated in the CSA login. This website cannot change that listing by itself.

When you cite a framework, cite the control the finding mapped to and the verdict on that finding. Do not turn a mapped label into a certificate. ISO/IEC 42001 stays in the mapped list. The footer already says aligned, not certified, for that standard. If a buyer needs a name that is not in the named list of 28, say so plainly instead of stretching the headline of 30 to cover it. The docs page is the place for the control notes. The pricing page shows which tiers even list those framework keys. Bring the finding, the control, and the verdict. Leave the certificate language out.