Your compliance data never leaves your device.
Local-first. Secure by design.
Every other platform stores your client's security posture on their cloud. We don't. Not by promise — by architecture.
The Irony
You're preparing for a cybersecurity audit. So you upload every vulnerability, every gap, every policy weakness to... someone else's server?
That's a compliance risk disguised as a solution.
ECP stores everything on-device. Your client's device inventory, evidence, gaps, policies — they stay where they belong. With your client.
How It Works
- All data stored locally on your device by default
- Wiki pages, evidence, CSVs — on-device
- Need multi-user collaboration? You can store data on our server — but we strongly advise migrating to a network drive or similar
- Switch between local, server, and network storage at the click of a button
- Your client's attack surface never appears in someone else's database
Still Fully Featured
Local-first doesn't mean limited:
Full CyFun framework (all tiers)
Evidence collection & expiry tracking
Live reports & gap analysis
CSV import with AI-assisted mapping
PDF export for auditors
White-label under your MSP brand
