Bring together all internal regulations, certifications, and controls
Manage internal policies, certifications, and control records alongside your HR and IT asset data.
Contact Us
Adoption and security
Scale, performance, and reliability for your business
220+
Customers
99.95%
SLO Uptime
20,000+
Users supported
5
Countries
Robust security backed by international standards
SOC 2 Type II
Independently audited per AICPA standards — security, availability, and confidentiality controls verified.
ISMS (ISO/IEC 27001 / 27017)
Aligned with international standards for information security management and cloud security controls.
Encryption + Access Control
TLS 1.2, per-tenant encryption keys, SAML 2.0 SSO + MFA, AWS WAF / Guard Duty.
Facing these challenges?
Too much time spent gathering information and evidence
- 01Ledger
Challenge
Employee departures and account deactivation are managed by different teams
HR tracks employee departures. IT tracks account deactivation. Gaps between the two can create security risks.
Solution
Controls built on the same data as HR and IT assets
CG Force manages controls using the same company records as HR Force and IT Force.
- 02Evidence
Challenge
Evidence gathering starts from scratch for every audit and questionnaire
The same evidence has to be assembled in different formats for each certification or customer. Spreadsheet records only reflect the information available when they were created.
Solution
Daily work becomes the evidence
Set evidence requirements per control and track what's been collected. One record serves several audits.
- 03Standards Library
Challenge
You have to work out which requirements apply to your company
You need to read each standard, decide which requirements apply to your company, and identify what is still missing—often while handling other responsibilities.
Solution
Built-in requirements and internal policy templates
The product includes requirements for major certifications and internal policy templates, updated as the relevant standards and schemes change.
How DRESS CODE works
Manage certification and ongoing controls as one continuous process
A completed checklist is only a snapshot. At the next audit, evidence collection starts again. CG Force organizes the work toward certification and supports ongoing checks and renewal audits after certification.
With a one-off effort
The data you need is ready before the audit
Connected HR, IT, and general affairs data gives you an up-to-date view of assets and accounts, without a separate data-gathering exercise.
With checklist tools
One record, multiple certifications
Crosswalks between standards ship as product data. Records built up for ISMS or Privacy Mark count toward the SCS audit as they are, so you only fill the gap.
Why CG Force?
How CG Force compares with consultants and checklist tools
| Comparison | Consulting | Assessment and checklist tools | |
|---|---|---|---|
| What you get | Expert judgment and documentation | A current-state assessment and checklist | A control platform that keeps running after certificationManage certification work and ongoing controls in one shared record system |
| After certification | Operation continues in-house once the engagement ends | Finished once the checks are ticked | A growing record of control activitiesControl checks and evidence help prepare you for renewal and future assessments. |
| Keeping the ledger current | Current as of delivery | Current as of entry | Updated automatically from business dataSame data as the HR and IT asset ledgers, so nothing drifts |
| Scheme revisions | Consult your adviser when requirements change | Wait for the tool to update | Delivered through the standards libraryRequirement changes are tracked in the product |
What you get
Consulting
Expert judgment and documentation
Assessment and checklist tools
A current-state assessment and checklist
A control platform that keeps running after certification
Manage certification work and ongoing controls in one shared record system
After certification
Consulting
Operation continues in-house once the engagement ends
Assessment and checklist tools
Finished once the checks are ticked
A growing record of control activities
Control checks and evidence help prepare you for renewal and future assessments.
Keeping the ledger current
Consulting
Current as of delivery
Assessment and checklist tools
Current as of entry
Updated automatically from business data
Same data as the HR and IT asset ledgers, so nothing drifts
Scheme revisions
Consulting
Consult your adviser when requirements change
Assessment and checklist tools
Wait for the tool to update
Delivered through the standards library
Requirement changes are tracked in the product
CG Force features
Key features
Manage internal policies, standards requirements, control activities, and evidence in one place.
- Certification ProgramManages scope, team, audit schedule, and certificate expiry for each certification.
- ControlManage company rules and records of control activities, and track findings and corrective actions.
- Internal RegulationsManage policy versions and keep records of updates, communications, consent, and periodic reviews.
- Information AssetsLists the information, systems, and data to protect and assigns owners.
- EvidenceStores logs and inspection records as evidence, by control and period.
- AuditManages internal audit plans, fieldwork, working papers, and reports.
- RiskAssesses company-wide, IT, and vendor risks and manages response plans.
- IncidentRecords what happened, the impact, cause, response, and who was notified.
- Corporate Organs & StructureManages agendas, resolutions, and minutes for shareholder meetings, the board, and committees.
- Certification & Control CorePlan tasks and deadlines by working backward from your target certification date.
- CG Operation CoreManage procedures such as policy updates and shareholder meetings, along with recurring governance tasks.
Standards and certifications in scope
We're starting with information security, privacy, quality, BCP, financial reporting, and AI governance, and adding standards in stages. Coverage varies by standard.
- Information security: ISMS / ISO 27001
- Cloud security: ISO/IEC 27017
- SOC 2
- Privacy: Privacy Mark / ISO 27701
- Supply chain security: SCS
- Quality: ISO 9001
- Environment: ISO 14001
- Business continuity: ISO 22301
- Internal control over financial reporting: J-SOX
- AI governance: ISO/IEC 42001
Getting started
- 1
Contact us or download the guide
Tell us which certifications you are pursuing or maintaining and what your customers require.
- 2
Consultation
We confirm the scope, who's responsible, and how to connect your HR and IT asset data.
- 3
Initial setup
We set up the ledger from your HR and IT asset data and map it to the standards library.
- 4
Go-live
Once regulations and controls are up and running, we're on hand for audits and annual planning.
FAQ
CG Force is a corporate governance tool from Dress Code Inc. It keeps internal regulations, certifications, and control records alongside your HR and IT asset data.
We're starting with information security and privacy standards such as ISMS (ISO 27001), SOC 2, and Privacy Mark, and expanding into quality, BCP, financial reporting, and AI governance. Support for SCS, Japan's supply chain security assessment scheme, is planned.
Evidence accumulates through day-to-day control activities, rather than being collected from scratch for every audit. Mappings between standards help you reuse the same records across audits.
A checklist records whether controls are in place. CG Force records control activities alongside HR and IT asset data, helping keep records aligned with actual operations and making those records available as evidence.
Yes. CG Force includes employee records and organizational information. With IT Force, information assets and account records can also be included in your controls.
Pricing depends on headcount and the features you use. Contact us for a quote.
Ready to try DRESS CODE?
Connect internal policies and controls with your company records
Dress Code Accelerates Your Business Operations Superconducting Silo and Friction
- Careers
- For Engineers
- For Business Roles
- Open Positions
- These pages are available in Japanese only.
© 2026 Dress Code Inc. All Rights Reserved.