AnecdotesMCP
Tel Aviv, Israel
Enterprise GRC platform built on a compliance data layer that collects audit-grade evidence directly from company systems.
Platform directory
142 platforms. Sorted by name. No paid boost.
MCP marks platforms whose vendor documents an MCP server, so you can use them from an AI assistant that supports MCP. What is MCP?
ApptegaMCP
Atlanta, Georgia, USA
Cybersecurity compliance management platform popular with MSPs and MSSPs.
Comp AIMCP
United States
Open-source, self-hostable compliance automation platform for SOC 2, ISO 27001, HIPAA, and GDPR.
Compyl
United States
Integrated GRC platform for mid-market teams spanning compliance, risk, contracts, and asset management.
ControlCase
Fairfax, Virginia, USA
Continuous compliance platform and certification services across security frameworks.
Cyber Sierra
Singapore
Unified cybersecurity and compliance automation platform out of Singapore.
CyberdayMCP
Finland
Finnish compliance platform that turns frameworks into prioritized security tasks inside Microsoft Teams.
Cypago
Israel
Cyber GRC automation platform that correlates evidence across IT systems for continuous compliance.
DataGuard
Munich, Germany
European security and compliance platform that pairs automation with expert advisory across privacy and infosec.
DrataMCP
San Diego, California, USA
Security and compliance automation platform for continuous framework readiness.
Hyperproof
Seattle, Washington, USA
Compliance operations platform for managing controls, evidence, and multiple frameworks.
ISMS.online
United Kingdom
UK compliance platform with preconfigured tooling for ISO 27001 and related management systems.
Kaseya Compliance Manager GRC
Miami, Florida, USA
GRC and compliance management tool aimed at MSPs and their SMB clients.
Naq
London, United Kingdom
Automated compliance platform covering 20-plus frameworks with a focus on UK and EU regulated-market deals.
OneleetMCP
Amsterdam, Netherlands
Security-first compliance platform that bundles penetration testing, monitoring, and evidence automation.
ProboMCP
Open-source compliance automation paired with managed compliance experts for SOC 2, ISO 27001, GDPR, and more.
Scrut AutomationMCP
Palo Alto, USA
Cloud-based GRC platform that automates compliance, risk assessment, and audit prep for growth-stage companies.
ScytaleMCP
New York, USA
Compliance automation platform for SOC 2, ISO 27001, and related frameworks.
Secfix
Munich, Germany
End-to-end security compliance platform focused on ISO 27001 and EU regulations for mid-sized companies.
SecureframeMCP
San Francisco, California, USA
Security and privacy compliance automation platform.
SprintoMCP
San Francisco, California, USA
Compliance automation platform for fast-growing cloud companies.
ThoropassMCP
New York, USA
Compliance automation platform that pairs evidence collection and continuous monitoring with an in-house audit team.
Tidal ControlMCP
's-Hertogenbosch, Netherlands
EU-based compliance automation platform for ISO 27001, SOC 2, NIS2, DORA, among 30+ frameworks.
TrustCloud
Boston, USA
AI-native GRC and security assurance platform that ties compliance to day-to-day security operations.
Trustero
San Francisco, USA
AI-powered compliance-as-a-service platform that auto-collects and maps evidence to controls.
VantaMCP
San Francisco, California, USA
Trust management and compliance automation platform.
6clicks
Melbourne, Australia
AI-enabled GRC platform with a hub-and-spoke model aimed at advisors, enterprises and their supply chains.
Archer
Overland Park, Kansas, USA
Enterprise integrated risk management suite formerly known as RSA Archer.
Bizzdesign HOPEX (formerly MEGA International)MCP
Paris, France
Enterprise architecture and GRC platform (HOPEX), now sold under the Bizzdesign brand after MEGA International merged into Bizzdesign.
Cetbix
Germany
AI-powered enterprise platform unifying cybersecurity governance, risk, compliance, and OT governance.
Corporater
Stavanger, Norway
Configurable business management platform covering GRC and performance.
Diligent One Platform
New York, USA
Diligent's integrated GRC and board governance platform, incorporating the former Galvanize tools.
FastpathMCP
Des Moines, Iowa, USA
Access governance and segregation-of-duties platform for ERP and financial applications, now part of Delinea.
Governance.com
Luxembourg
Governance and compliance operating system for regulated fund and asset management professionals.
IBM OpenPagesMCP
Armonk, New York, USA
IBM's AI-augmented enterprise GRC platform for integrated risk and compliance.
MetricStream
San Jose, California, USA
Enterprise GRC platform spanning risk, compliance, audit, and cyber risk.
Mitratech
Austin, Texas, USA
Legal, risk, and compliance software group with a broad GRC portfolio.
Modulo Risk Manager
Rio de Janeiro, Brazil
Brazilian integrated GRC platform for risk, compliance and cyber-defense monitoring.
Ncontracts
Brentwood, Tennessee, USA
Integrated compliance, risk and vendor management platform built for banks, credit unions and other financial institutions.
Optial SmartStart
London, United Kingdom
Enterprise GRC, audit, and EHS software delivered as a configurable suite.
Pathlock
Flemington, New Jersey, USA
Application access governance and ERP GRC platform for SoD and controls.
Predict360
Austin, Texas, USA
AI-powered GRC and regulatory compliance suite from 360factors for banking.
SAI360
Chicago, Illinois, USA
Integrated GRC and ethics and compliance learning platform.
SAP GRC
Walldorf, Germany
SAP's suite of access control, process control and risk management modules embedded in the SAP enterprise stack.
ServiceNow GRC
Santa Clara, California, USA
ServiceNow's Integrated Risk Management applications on the Now Platform.
Smart Global Governance
Valbonne, France
French modular GRC platform combining risk, compliance, and AI across 200-plus standards.
SureCloud
Reading, United Kingdom
AI-powered GRC platform connecting risk, compliance, audit, and privacy.
Tenacy
France
French cyber GRC platform that maps, orchestrates, and manages cybersecurity across complex organizations.
A1 Tracker
Roseville, California, USA
Configurable risk, contract, and compliance tracking software for mid-market operations teams.
Allgress
Livermore, California, USA
IT risk and GRC software focused on continuous compliance and risk visualization.
Ansarada GRC
Sydney, Australia
GRC platform for financial services covering risk, compliance, and operational resilience.
Camms
Adelaide, Australia
Integrated risk, strategy and project GRC platform from an Australian vendor serving public sector and enterprise.
Fusion Risk Management
Rolling Meadows, Illinois, USA
Operational resilience, business continuity, and risk management platform.
LogicGate
Chicago, Illinois, USA
Risk Cloud, a no-code integrated risk and GRC platform.
LogicManager
Boston, Massachusetts, USA
Enterprise risk management and GRC platform with taxonomy-driven risk linking.
Onspring
Overland Park, Kansas, USA
No-code GRC and business process automation platform.
Optimiso Suite
Geneva, Switzerland
Swiss internal control, process, and GRC software now part of the Iskera group.
Origami Risk
Chicago, Illinois, USA
Integrated risk, insurance, and safety management platform.
Protecht ERM
Sydney, Australia
Enterprise risk management platform from Australia with strong risk analytics.
Quantivate
Woodinville, Washington, USA
GRC and enterprise risk software with a focus on banking and credit unions.
Resolver
Toronto, Canada
Risk intelligence and GRC platform owned by Kroll.
Riskonnect
Atlanta, Georgia, USA
Integrated risk management platform spanning ERM, insurance, and resilience.
RiskWatch
Sarasota, Florida, USA
Risk assessment and compliance platform covering many security frameworks.
VComplyMCP
Sunnyvale, California, USA
Cloud GRC platform for policy, compliance, and risk management.
ZenGRC
San Francisco, California, USA
GRC platform from RiskOptics for compliance, risk, and audit management.
Aravo
San Francisco, California, USA
Third-party risk and supplier management platform with a large connector ecosystem.
BitsightMCP
Boston, Massachusetts, USA
Security ratings and cyber-risk analytics platform positioned for third-party and enterprise cyber risk.
Certa
Palo Alto, California, USA
No-code third-party lifecycle and risk management platform spanning onboarding, risk and ESG.
ConveyorMCP
San Francisco, USA
AI platform that automates security questionnaires, RFPs, and trust centers for customer security reviews.
GAN Integrity
Copenhagen, Denmark
Ethics, compliance and third-party risk management platform for anti-corruption and integrity programs.
Panorays
Tel Aviv, Israel
Third-party security risk platform combining external attack-surface scanning with security questionnaires.
Prevalent
Phoenix, Arizona, USA
Third-party and vendor risk management platform, now part of Mitratech.
ProcessUnity
Concord, Massachusetts, USA
Third-party risk management platform combined with the CyberGRX risk exchange.
SafeBaseMCP
San Francisco, USA
Trust center platform for publishing security posture and streamlining vendor security reviews.
SecurityScorecardMCP
New York, New York, USA
Security ratings platform used for third-party and supply-chain cyber risk management.
Supply WisdomMCP
New York, New York, USA
Real-time third-party and location risk intelligence platform spanning financial, cyber, ESG and operational domains.
UpGuard
Mountain View, California, USA
Attack-surface and third-party risk platform combining security ratings with vendor questionnaires.
Vendict
Israel
AI-native platform for automating security questionnaire responses and compliance reviews.
Venminder
Elizabethtown, Kentucky, USA
Third-party risk management platform with in-house vendor assessment and due-diligence services, now part of Ncontracts.
WhisticMCP
Pleasant Grove, Utah, USA
Vendor security assessment and profile-sharing network for third-party risk teams.
Alessa
Ottawa, Ontario, Canada
AML compliance, screening and fraud-prevention platform now owned by Tier1 Financial Solutions.
ComplyAdvantage
London, United Kingdom
AI-driven financial crime detection, AML screening, and transaction monitoring.
ComplyCube
London, United Kingdom
SaaS and API platform for identity verification, KYC, KYB, AML, and fraud prevention.
Feedzai
San Mateo, California, USA
AI platform for financial fraud prevention and anti-money-laundering risk management.
Fenergo
Dublin, Ireland
Client lifecycle management and financial crime compliance for financial institutions.
MyComplianceOffice
Dublin, Ireland
Compliance management platform for financial services conduct and conflicts risk.
Napier AI
London, United Kingdom
AI-powered anti-money-laundering platform for screening and transaction monitoring.
Nasdaq Verafin
St. John's, Newfoundland, Canada
Cloud financial-crime management platform for AML, fraud and sanctions, owned by Nasdaq.
NICE Actimize
Hoboken, New Jersey, USA
Enterprise financial-crime platform for AML, fraud and market-surveillance compliance.
Quantexa
London, United Kingdom
Decision intelligence and entity-resolution platform used for AML, KYC and financial-crime investigations.
SAS Anti-Money Laundering
Cary, North Carolina, USA
Enterprise AML and financial-crime analytics from analytics vendor SAS.
SumsubMCP
London, United Kingdom
Full-cycle identity verification and compliance platform for KYC, KYB, AML, and fraud prevention.
Unit21MCP
San Francisco, California, USA
No-code risk and compliance platform for transaction monitoring, fraud and case management.
Wolters Kluwer OneSumX
Alphen aan den Rijn, Netherlands
Regulatory reporting, risk and finance platform for banks and financial institutions.
BigIDMCP
New York, New York, USA
Data discovery, privacy and data-governance platform for finding and governing sensitive data at scale.
CollibraMCP
New York, New York, USA
Data governance and data intelligence platform underpinning privacy, quality and regulatory data programs.
DataGrailMCP
San Francisco, California, USA
Privacy management platform automating data subject requests, consent and data mapping.
Didomi
Paris, France
Paris-based consent and preference management platform for privacy compliance across digital channels.
heyData
Berlin, Germany
Berlin-based data protection platform bundling an external DPO with compliance software for SMBs.
KertosMCP
Munich, Germany
Privacy and compliance automation platform focused on GDPR and data protection.
Ketch
San Francisco, USA
Data permissioning and privacy platform for consent, data rights, and privacy-safe data activation.
OneTrust
Atlanta, Georgia, USA
Privacy, data governance, and trust platform, with GRC and third-party risk modules.
Osano
Austin, USA
Unified data privacy platform automating consent, subject rights, data mapping, and vendor monitoring.
Securiti
San Jose, California, USA
Data command center for privacy, security, governance, and AI data risk.
TranscendMCP
San Francisco, USA
Real-time data governance and privacy platform that answers whether data can be used for a given purpose.
TrustArcMCP
San Francisco, California, USA
Privacy management platform for data privacy programs and assessments.
Usercentrics
Munich, Germany
Leading consent management platform for GDPR and global privacy compliance across web and apps.
Benchmark GensuiteMCP
Cincinnati, Ohio, USA
EHS, ESG, quality and operational-risk platform with a broad application suite.
ComplianceQuest
Tampa, Florida, USA
Quality, EHS, and compliance management suite built natively on Salesforce.
Cority
Toronto, Canada
Enterprise EHS, quality, and sustainability management software.
Enablon
Paris, France
Wolters Kluwer's enterprise EHS, operational risk, and sustainability platform.
Ideagen Q-Pulse
Nottingham, United Kingdom
Quality, safety, and compliance management software within the Ideagen portfolio.
Intelex
Toronto, Ontario, Canada
EHS, quality and sustainability management platform, part of Fortive.
IsoMetrix
Johannesburg, South Africa
EHS, ESG and integrated risk software with strong footprint in mining, energy and heavy industry.
MasterControl
Salt Lake City, Utah, USA
Quality and compliance management software for regulated manufacturing and life sciences.
Novisto
Montreal, Quebec, Canada
Sustainability and ESG data management and reporting platform for enterprises.
Octave Reliance (formerly ETQ Reliance)
Burlington, Massachusetts, USA
SaaS quality management system with EHS and compliance modules, now Octave Reliance after Hexagon spun ETQ into Octave.
Sphera
Chicago, Illinois, USA
ESG, EHS, and operational risk software for industrial and process sectors.
VelocityEHS
Chicago, Illinois, USA
Cloud EHS and ESG platform covering safety, chemical management and sustainability.
Axio
New York, New York, USA
Cyber-risk quantification and assessment platform tied to insurance and financial exposure.
Centraleyes
New York, USA
Cyber risk and compliance management platform with automated framework mapping.
CyberSaint
Boston, Massachusetts, USA
Cyber-risk management and quantification platform for continuous control monitoring.
DigitalXForce
Irving, Texas, USA
AI-native automated GRC and digital trust management platform.
Kovrr
Tel Aviv, Israel
Cyber-risk quantification platform for enterprises and boards using financial modeling.
Panaseer
London, United Kingdom
Continuous controls monitoring platform for security and compliance measurement.
SAFE Security
Palo Alto, California, USA
Cyber-risk quantification and management platform (SAFE One), parent of RiskLens methodology.
Squalify
Munich, Germany
Munich Re-backed top-down cyber risk quantification platform for boards and CISOs.
Startup
Audit, risk, and compliance management platform with a strong SOX focus.
Caseware
Toronto, Ontario, Canada
Audit, assurance and financial reporting platform used by accounting firms and internal audit teams.
Ideagen Pentana Audit
Nottingham, United Kingdom
Internal audit management software within the Ideagen compliance and quality portfolio.
Optro (formerly AuditBoard)MCP
Cerritos, California, USA
Connected risk platform spanning audit, SOX, risk, and compliance; rebranded from AuditBoard to Optro in 2026.
TeamMate+
Alphen aan den Rijn, Netherlands
Internal audit management platform from Wolters Kluwer used by audit teams worldwide.
WorkivaMCP
Ames, Iowa, USA
Cloud platform for connected financial, ESG, audit, and risk reporting.
EQS Group
Munich, Germany
Compliance, whistleblowing and corporate governance platform serving European enterprises.
Formalize
Aarhus, Denmark
Danish whistleblowing and compliance platform that expanded into broader ethics and compliance management.
LRN
New York, New York, USA
Ethics, compliance and corporate-culture training and program platform.
MetaCompliance
Derry, United Kingdom
Security awareness training and policy management platform.
NAVEX
Lake Oswego, Oregon, USA
Ethics, compliance, policy, and third-party risk platform, known for hotline and GRC.
Skillcast
London, United Kingdom
Compliance training, e-learning and policy management platform for regulated businesses.
Credo AI
San Francisco, USA
Enterprise AI governance platform for managing model risk, compliance, and responsible AI use.
Holistic AI
London, United Kingdom
Enterprise AI governance platform with automated testing and runtime enforcement for AI systems.
Modulos
Zurich, Switzerland
ISO 42001-certified AI governance platform for EU AI Act, ISO 42001, and NIST AI RMF compliance.