A neutral map of the GRC platform market

141 governance, risk, and compliance software platforms, each in one primary category by what the product mainly does: from compliance automation and enterprise GRC suites to third-party risk and financial-crime tooling. No pay-for-rank.

Browse 141 platforms Explore 11 categories Agent API & MCP

By what they do

View all

Compliance Automation

Automated evidence collection and continuous monitoring for SOC 2, ISO 27001, and similar frameworks.

Enterprise GRC Suites

Integrated enterprise platforms spanning risk, compliance, audit, and policy management.

Integrated Risk Management

Enterprise and operational risk, risk registers, and risk quantification.

Third-Party Risk

Vendor, supplier, and third-party risk assessment and monitoring.

Financial Crime & AML

Anti-money-laundering, KYC, sanctions screening, and financial-services compliance.

Privacy & Data Governance

Privacy program management, data mapping, and consent.

EHS, Quality & ESG

Environment, health, safety, quality, and ESG compliance.

Cyber Risk & CCM

Cyber risk quantification and continuous control monitoring.

Audit Management

Internal audit, SOX, and controls testing.

Policy, Training & Awareness

Policy lifecycle management, compliance training, and security awareness.

AI Governance

Governance, risk, and compliance for AI systems: ISO 42001, the EU AI Act, and NIST AI RMF.

For buyers

One primary category per platform, assigned by main product focus. Compare compliance-automation tools against full enterprise GRC suites, or integrated risk management against third-party risk, without wading through positioning copy.

For platforms

Not listed, or miscategorized? Submit for free. Every submission is reviewed against the same bar. No one can buy rank or a better category.

For AI agents

The whole catalog is machine-readable: search API, full JSON dump, llms.txt, and an MCP server. Built to be quoted by agents doing GRC platform research.