How does it handle HIPAA requirements for PHI?

It outlines mandatory requirements including Business Associate Agreements (BAA), PHI-specific encryption at rest, network isolation via VPCs, and audit logging retention policies.

Can it help with GDPR data residency issues?

Yes, it provides strategies for data localization, European region-locking, and technical workflows for the 'Right to Erasure' and data portability.

Does it support major cloud providers like AWS and Azure?

Absolutely. It includes domain-specific guidance for AWS, Azure, and GCP, covering services like Lambda, S3, RDS, Key Vault, and CloudTrail.

Can this skill help me pass a SOC 2 audit?

Yes, the skill provides specific checklists for encryption, access logging, least-privilege IAM, and change management required for SOC 2 Type II compliance in cloud environments.

Compliance Architecture Expert

Name: Compliance Architecture Expert
Author: anton-abyzov

byanton-abyzov

•

Security & Testing

Designs and validates enterprise-grade cloud architectures that meet SOC 2, HIPAA, GDPR, and PCI-DSS compliance standards.

This skill transforms Claude into a specialized compliance architect capable of guiding the development of secure, regulated software systems. It provides comprehensive checklists, security controls, and implementation patterns specifically tailored for modern cloud and serverless environments. By leveraging this skill, developers can ensure their infrastructure adheres to rigorous industry standards like SOC 2 for SaaS, HIPAA for healthcare, and PCI-DSS for payments, while implementing critical protections such as least-privilege IAM, data residency controls, and immutable audit logging to streamline audit preparation and risk management.

Key Features

01Secure implementation patterns for AWS, Azure, and GCP cloud services

02Frameworks for data residency, PII protection, and right-to-erasure workflows

0313 GitHub stars

04Identification and remediation of common security misconfigurations

05Detailed guidance on encryption standards and key management (KMS/HSM)

06Comprehensive checklists for SOC 2, HIPAA, GDPR, and PCI-DSS compliance

Use Cases

01Hardening a SaaS platform's security controls to prepare for a SOC 2 Type II audit

02Designing a HIPAA-compliant serverless backend for handling sensitive healthcare data

03Implementing GDPR-compliant data residency and automated user deletion procedures

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add anton-abyzov/specweave compliance-architecture

For use in Claude.ai and ChatGPT

Download Skill