Compliance evidence that collects itself
Mermera keeps you continuously ready for SOC 2, ISO 27001, ISO 20000-1, PCI DSS and HIPAA. It connects to your cloud and your tools, collects evidence on a schedule, and shows which controls pass, which fail and why, long before an auditor asks.
What Mermera does
-
Evidence, collected automatically
Connect AWS, Azure, Google Cloud, your identity provider, source control and ticketing. Each control is checked on a schedule, and the evidence is kept, dated, for your auditor.
-
One set of controls, many frameworks
Work done for SOC 2 counts toward ISO 27001, ISO 20000-1, PCI DSS and HIPAA wherever the controls overlap, so you prove a control once.
-
Always know where you stand
Readiness by framework, policies your people acknowledge, and an auditor portal with the evidence package ready to review.
Find sensitive data in your own cloud
Card numbers and Social Security numbers turn up where nobody put them on purpose: in logs, exports and old buckets. The open-source sensitive data scanner runs inside your own AWS, Azure or Google Cloud account with read-only access and reports where that data is, what kind and how much. Only findings leave your account, never a value. It is free under the Apache 2.0 license, and Mermera turns its findings into evidence for PCI DSS and your privacy controls.
Ask for early access
We are opening Mermera to a small group of teams first. Tell us a little about yours and we will be in touch. Only the email address is required.
Privacy
- What we keep: what you type into this form (email, and if you give them, name, company, role, clouds and your note), the time you asked, and the time you confirmed. No cookies, no analytics, no tracking, nothing from other companies on this page.
- Why: only to contact you about Mermera early access. We do not sell it or share it, and we do not add you to any other list.
- How long: an unconfirmed request is deleted automatically within about a week. A confirmed one is kept until 1 January 2027, then deleted automatically, unless you ask us to remove it sooner.
- How to be removed: use the "Remove my details" link in any email from us, which deletes your record at once, or email us.
- Contact: txp-labs, LLC, chris@txp-labs.com.