SOC 2 NIST CSF HIPAA Notion workspace Free

GRC US Starter

A free introduction to the US Compliance Workspace. Three core databases with realistic seed data — enough to see how an operational GRC workspace actually works before you commit. No credit card. No lock-in.

3
Core databases
Free
No credit card
Notion
Duplicate & go
US
SOC 2 & HIPAA scope
Get free on Notion Marketplace →

What’s inside the Starter

The Starter includes three of the ten databases from the full US Compliance Workspace — the core you need to run a first readiness assessment and see how everything links together.

Compliance requirements
A selection of SOC 2 Trust Services Criteria and HIPAA safeguards pre-mapped, with gap status and priority views.
Risk register
Cybersecurity and operational risks with likelihood x impact scoring and basic treatment tracking.
Incident register
A starter incident log with NIST CSF response phases and HIPAA breach-notification timelines.

Also included: realistic seed data (MedFlow Technologies scenario) · a simple dashboard view · a short getting-started guide.

Up and running in minutes

01

Get it from Notion Marketplace

Open the Starter on Notion Marketplace and duplicate the workspace into your own Notion account in one click.

02

Explore the seed data

The workspace ships with a realistic pre-populated scenario so you can see how requirements, risks and incidents link together.

03

Run a first readiness check

Open the Compliance Requirements database, mark each control status, and watch the dashboard update automatically.

Frequently asked

Is the Starter really free?

Yes. The GRC US Starter is free, with no credit card required. It is a genuine working subset of the full US Compliance Workspace, not a time-limited trial.

Do I need a paid Notion account?

No. Notion's free plan is sufficient for a single user. For team collaboration you may need Notion Plus — check Notion's current plan limits.

Does this make my organisation SOC 2 or HIPAA compliant?

No. SOC 2 certification requires an independent audit, and HIPAA compliance is an ongoing operational requirement. The Starter helps you organise and track readiness — it does not replace an audit or constitute certification.

Where is my data stored?

Entirely in your own Notion workspace. AltShift has no access to the data you enter into the Starter.

Ready to try it? GRC US Starter — free on Notion Marketplace. No credit card required.

Get free on Notion Marketplace →

Delivered as a Notion workspace — requires an active Notion account. Notion is a trademark of Notion Labs, Inc. AltShift is not affiliated with or endorsed by Notion Labs, Inc. SOC 2 is a service mark of the American Institute of Certified Public Accountants.