About GRC Platforms

This directory sorts governance, risk, and compliance software by what each platform actually does.

• One primary category per product, assigned by main product focus.
• It maps the enterprise and VC-backed software companies in this space.
• Scope runs from compliance automation and enterprise GRC suites to third-party risk, privacy, audit, and financial-crime tooling.

Where the data comes from

Entries are curated by us from public sources: product documentation, company sites, and public filings. Descriptions are written by us and may lag reality, except a paid listing, whose text is supplied by the company, reviewed against our rules, and marked on its page. Corrections are welcome at contact@ismscopilot.com.

Eligibility

• In: commercial GRC software platforms with a real product surface: governance, risk, and compliance products sold as software.
• Out: consultancies and advisory firms without a product, AI agents, media, associations, and community organizations.

Looking for security products beyond GRC? Our sister site Security Startups, a directory of cybersecurity startups, also operated by Better ISMS, lists them by category, stage, and region.

Ranking

Filter by category, company size, and search; listings are alphabetical within every view. Listing on request is paid, and payment never buys rank: no pay-for-rank. Links to a vendor's site from a listing are marked as sponsored.

Ownership

Operated by Better ISMS. See transparency.