Frequently Asked Questions
Straight answers on platform capabilities, enterprise security, procurement documentation, data residency, integrations, and support.
Product & Platform
FormaOS is an enterprise compliance operating system designed for regulated industries. It connects governance frameworks, operational controls, evidence collection, and audit defense into a single, unified platform. Unlike document repositories or checklists, FormaOS enforces accountability through structured workflows, immutable audit trails, and compliance visibility.
Security & Compliance
FormaOS is AU-hosted by default, built for Australian-regulated organizations. Additional residency and cross-border handling requirements are reviewed during procurement, and a Data Processing Agreement covering privacy and transfer considerations is published in the Trust Center.
Encryption, tenant isolation, SSO and SCIM, MFA, hosting, backups, exports, and the capabilities we do not have, answered for security reviewers.
Data & Evidence
Every action in FormaOS is automatically logged with full context, who did what, when, and in relation to which control or workflow. Audit trails are immutable and timestamped, providing a complete chain of evidence that satisfies regulatory requirements. You can filter, search, and export audit logs at any time.
Integrations & APIs
FormaOS ships with 20+ integrations across productivity (Jira, Slack, Microsoft Teams), cloud (AWS, Azure, GCP), identity (Okta, Azure AD, Google Workspace), security (Qualys, Tenable), and HRIS tools (BambooHR, Workday). Browse and install connectors from the Integration Marketplace with one-click setup. Enterprise plans include SAML 2.0 SSO.
Pricing & Evaluation
FormaOS starts with a guided compliance plan. We scope frameworks, team structure, evidence volume, audit exposure, and procurement requirements before recommending Foundation, Growth, or Enterprise.
Enterprise & Procurement
FormaOS provides a core enterprise review pack that includes a Data Processing Agreement (DPA), vendor assurance materials, SLA review documentation, and a security review packet covering architecture, encryption, identity governance, and data handling. These materials are shared during evaluation and procurement review, with additional artifacts handled case by case.
How a review runs: what you receive, how long it takes, DPA signing, and what happens next.
Support & Onboarding
All paid plans include structured onboarding covering platform configuration, first framework setup, workflow design, evidence structure, and control ownership. Enterprise onboarding can include additional implementation support for more complex deployments. Timing depends on scope, data readiness, and the number of teams involved.
Still have questions?
Send your question through and you will get a direct answer, or book a walkthrough of the platform against your own frameworks.
