Yes. Custom compliance programs and controls can be defined from the CloudSploit console.