Frequently asked questions

Prova is an AI-powered GRC (governance, risk, and compliance) platform. We automate evidence collection, control monitoring, risk management, and audit preparation across frameworks like SOC 2, ISO 27001, HIPAA, GDPR, and PCI DSS.

Out of the box: SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, NIST 800-53, NIST CSF, CCPA, SOX ITGC, FedRAMP, CIS Controls, and ISO 22301 — plus custom frameworks. See the Frameworks page for the full list.

Most teams using Prova reach audit-readiness for SOC 2 or ISO 27001 in 6–12 weeks. The exact timeline depends on the maturity of your existing controls and the scope of your environment.

No. Prova prepares your evidence and posture so the audit itself is fast and predictable. You still engage an independent auditor for the formal opinion.

We are aligned with SOC 2 Type II and ISO 27001. All data is encrypted in transit and at rest, access is least-privilege, and integrations are read-only by default. See our Security page for more.

Yes — request a demo and we will run through the platform with you in about 20 minutes. We do not require a contract to get a live walkthrough.

Pricing scales with the number of frameworks you operate and the size of your environment. See the Pricing page or contact us for a tailored quote.

Email support@provahq.io or use the contact form. We respond within one business day.