Benchmark Suite
Pick a repository
Each report covers what Meridian detected, which regulations apply and why, enterprise-readiness gaps, and a prioritized roadmap — generated the same way for every repo, no manual tuning per report.
Why do the applicable regulations differ across similar-looking repos? Meridian scopes regulations from what a repository actually is, not just its category — whether it ships a hosted paid tier (PCI DSS), whether it's an actively operated production system (SOC 2), and jurisdiction/AI-usage signals (EU AI Act). Two tools in the same space can land on different regulations because one runs a billed cloud product and the other is self-hosted-only, or because one is actively maintained and the other is archived — see each report's Compliance Scope section for the specific reasoning.
AI / LLM Tooling
Flowise
Visual builder for LLM workflows and agents
Applicable Regulations
EU AI ActPCI DSS · contractualSOC 2 Trust Services Criteria · voluntary
6
Implemented
401
Applicable Controls
1851
Files
View full report →
Dify
Open-source LLM app development platform
Applicable Regulations
EU AI ActPCI DSS · contractualSOC 2 Trust Services Criteria · voluntary
53
Implemented
401
Applicable Controls
10391
Files
View full report →
Langflow
Visual framework for building multi-agent AI applications
Applicable Regulations
EU AI ActSOC 2 Trust Services Criteria · voluntary
6
Implemented
122
Applicable Controls
5488
Files
View full report →
Open WebUI
Self-hosted web interface for LLMs
Applicable Regulations
GDPREU AI ActSOC 2 Trust Services Criteria · voluntary
6
Implemented
236
Applicable Controls
323
Files
View full report →
CrewAI
Framework for orchestrating role-playing autonomous AI agents
Applicable Regulations
EU AI ActPCI DSS · contractualSOC 2 Trust Services Criteria · voluntary
53
Implemented
401
Applicable Controls
1272
Files
View full report →
Mem0
Memory layer for AI agents and assistants
Applicable Regulations
EU AI ActPCI DSS · contractualSOC 2 Trust Services Criteria · voluntary
6
Implemented
401
Applicable Controls
1051
Files
View full report →
Continue
Open-source AI code assistant
Applicable Regulations
EU AI Act
0
Implemented
60
Applicable Controls
1874
Files
View full report →
FastGPT
Knowledge-based platform for building AI assistants
Applicable Regulations
EU AI ActPCI DSS · contractualSOC 2 Trust Services Criteria · voluntary
53
Implemented
401
Applicable Controls
3509
Files
View full report →
Lobe Chat
Open-source AI chat framework with plugin support
Applicable Regulations
EU AI ActSOC 2 Trust Services Criteria · voluntary
6
Implemented
122
Applicable Controls
10387
Files
View full report →
OpenHands
AI software engineering agent platform
Applicable Regulations
EU AI ActSOC 2 Trust Services Criteria · voluntary
6
Implemented
122
Applicable Controls
2198
Files
View full report →
Developer Tools
Supabase
Open-source Postgres backend-as-a-service platform
Applicable Regulations
GDPREU AI ActSOC 2 Trust Services Criteria · voluntaryNIST AI RMF · voluntary
3
Implemented
217
Applicable Controls
7503
Files
View full report →
Appwrite
Open-source backend platform for web, mobile, and AI apps
Applicable Regulations
GDPREU AI ActSOC 2 Trust Services Criteria · voluntaryNIST AI RMF · voluntary
0
Implemented
265
Applicable Controls
90
Files
View full report →
NocoDB
Open-source, self-hostable no-code database platform
Applicable Regulations
GDPRSOC 2 Trust Services Criteria · voluntary
22
Implemented
173
Applicable Controls
2093
Files
View full report →
Plane
Open-source project management and issue tracking tool
Applicable Regulations
GDPREU AI ActPCI DSS · contractualSOC 2 Trust Services Criteria · voluntaryNIST AI RMF · voluntary
71
Implemented
544
Applicable Controls
3967
Files
View full report →
SaaS
Chatwoot
Open-source customer support and engagement platform
Applicable Regulations
GDPREU AI ActSOC 2 Trust Services Criteria · voluntaryNIST AI RMF · voluntary
0
Implemented
265
Applicable Controls
1055
Files
View full report →
Twenty
Open-source CRM built for AI-driven workflows
Applicable Regulations
GDPRSOC 2 Trust Services Criteria · voluntary
22
Implemented
173
Applicable Controls
21449
Files
View full report →
Cal.com
Open-source scheduling and booking infrastructure
Applicable Regulations
GDPRSOC 2 Trust Services Criteria · voluntary
22
Implemented
173
Applicable Controls
5062
Files
View full report →
AI / RAG Frameworks
Haystack
Open-source AI orchestration framework for LLM and RAG pipelines
Applicable Regulations
GDPREU AI ActPCI DSS · contractualSOC 2 Trust Services Criteria · voluntaryNIST AI RMF · voluntary
0
Implemented
544
Applicable Controls
542
Files
View full report →
RAGFlow
Open-source Retrieval-Augmented Generation engine with agent capabilities
Applicable Regulations
GDPREU AI ActPCI DSS · contractualSOC 2 Trust Services Criteria · voluntaryNIST AI RMF · voluntary
71
Implemented
544
Applicable Controls
3878
Files
View full report →
LlamaIndex
Open-source data framework for building LLM applications
Applicable Regulations
GDPREU AI ActPCI DSS · contractualSOC 2 Trust Services Criteria · voluntaryNIST AI RMF · voluntary
13
Implemented
544
Applicable Controls
3840
Files
View full report →
Security & Identity Infrastructure
Vault
Secrets management and data protection platform
Applicable Regulations
GDPRPCI DSS · contractualSOC 2 Trust Services Criteria · voluntary
69
Implemented
452
Applicable Controls
4907
Files
View full report →
OpenBao
Community-governed open-source fork of Vault
Applicable Regulations
GDPRSOC 2 Trust Services Criteria · voluntary
22
Implemented
173
Applicable Controls
3068
Files
View full report →
ZITADEL
Open-source identity and access management infrastructure
Applicable Regulations
GDPRPCI DSS · contractualSOC 2 Trust Services Criteria · voluntary
69
Implemented
452
Applicable Controls
4210
Files
View full report →