Open JSON schema reference

The shared vocabulary for GRC, SecOps, and AI Governance.

Browse, consume, and contribute compliance vocabularies — DISA, RegGenome, and more — published as clean, documented JSON with one consistent structure.

Browse vocabularies Read the docs

Vocabularies: 4; Vocabularies
Shared definitions: 56; Shared definitions
Reference entries: 420; Reference entries
Licensed: MIT; Licensed

acronym.schema.json

{
  "Acronym": {
    "@type": "Acronym",
    "schemaVersion": 1,
    "@id": "URL",
    "coreMetaData": {
      "@type": "CoreMetaData",
      "checksum": "String",
      "created": {
        "@type": "Created",
        "organization": {
          "@type": "Organization",
          "elementId": "String",
          "name": "String"
        },
        "person": {
          "@type": "Person"
  …
}

Who it's for

One reference, three ways in.

GRC practitionersLook up how a control, framework, or document is structured — and see DISA, RegGenome, and shared definitions mapped to one consistent shape.Browse the vocabularies DevelopersVersioned, documented JSON with stable names and datatypes. Read the structure, copy the schema, download the raw file.Get the JSON Content contributorsStandards bodies and content providers: see where your material fits the shared structure, and propose a vocabulary of your own.Become a provider

Contributors

Built with the bodies that write the rules.

Vocabularies and reference content from the organizations whose source material the schemas describe.

RegGenomeRegulatory content24 definitions · corpus metadata NISTStandards bodyframeworks & guidance DISADefense standards30 definitions · STIG controls EC-CouncilCertification bodysecurity curricula

Start here

Three doors, same catalog.

9VocabulariesEvery vocabulary and shared definition, grouped the way the designer groups them — with structure diagrams on every schema.Go DocsThe style guide, accepted and proposed properties, and an introduction to JSON-LD for GRC.Go DownloadsRaw per-schema JSON files, regenerated from the source of truth on every publish.Go