6clicks
Melbourne, Australia
AI-enabled GRC platform with a hub-and-spoke model aimed at advisors, enterprises and their supply chains.
Directory
Platform directory
143 platforms. Sorted by name. No paid boost.
A1 Tracker
Roseville, California, USA
Configurable risk, contract, and compliance tracking software for mid-market operations teams.
Alessa
Ottawa, Ontario, Canada
AML compliance, screening and fraud-prevention platform now owned by Tier1 Financial Solutions.
Allgress
Livermore, California, USA
IT risk and GRC software focused on continuous compliance and risk visualization.
Anecdotes
Tel Aviv, Israel
Enterprise GRC platform built on a compliance data layer that collects audit-grade evidence directly from company systems.
Ansarada GRC
Sydney, Australia
GRC platform for financial services covering risk, compliance, and operational resilience.
Apptega
Atlanta, Georgia, USA
Cybersecurity compliance management platform popular with MSPs and MSSPs.
Aravo
San Francisco, California, USA
Third-party risk and supplier management platform with a large connector ecosystem.
Archer
Overland Park, Kansas, USA
Enterprise integrated risk management suite formerly known as RSA Archer.
Startup
Audit, risk, and compliance management platform with a strong SOX focus.
AuditBoard
Cerritos, California, USA
Connected risk platform spanning audit, SOX, risk, and compliance.
Axio
New York, New York, USA
Cyber-risk quantification and assessment platform tied to insurance and financial exposure.
Benchmark Gensuite
Cincinnati, Ohio, USA
EHS, ESG, quality and operational-risk platform with a broad application suite.
BigID
New York, New York, USA
Data discovery, privacy and data-governance platform for finding and governing sensitive data at scale.
Bitsight
Boston, Massachusetts, USA
Security ratings and cyber-risk analytics platform positioned for third-party and enterprise cyber risk.
Camms
Adelaide, Australia
Integrated risk, strategy and project GRC platform from an Australian vendor serving public sector and enterprise.
Caseware
Toronto, Ontario, Canada
Audit, assurance and financial reporting platform used by accounting firms and internal audit teams.
Centraleyes
New York, USA
Cyber risk and compliance management platform with automated framework mapping.
Certa
Palo Alto, California, USA
No-code third-party lifecycle and risk management platform spanning onboarding, risk and ESG.
Cetbix
Germany
AI-powered enterprise platform unifying cybersecurity governance, risk, compliance, and OT governance.
Collibra
New York, New York, USA
Data governance and data intelligence platform underpinning privacy, quality and regulatory data programs.
Comp AI
United States
Open-source, self-hostable compliance automation platform for SOC 2, ISO 27001, HIPAA, and GDPR.
ComplianceQuest
Tampa, Florida, USA
Quality, EHS, and compliance management suite built natively on Salesforce.
ComplyAdvantage
London, United Kingdom
AI-driven financial crime detection, AML screening, and transaction monitoring.
ComplyCube
London, United Kingdom
SaaS and API platform for identity verification, KYC, KYB, AML, and fraud prevention.
Compyl
United States
Integrated GRC platform for mid-market teams spanning compliance, risk, contracts, and asset management.
ControlCase
Fairfax, Virginia, USA
Continuous compliance platform and certification services across security frameworks.
Conveyor
San Francisco, USA
AI platform that automates security questionnaires, RFPs, and trust centers for customer security reviews.
Cority
Toronto, Canada
Enterprise EHS, quality, and sustainability management software.
Corporater
Stavanger, Norway
Configurable business management platform covering GRC and performance.
Credo AI
San Francisco, USA
Enterprise AI governance platform for managing model risk, compliance, and responsible AI use.
Cyber Sierra
Singapore
Unified cybersecurity and compliance automation platform out of Singapore.
Cyberday
Finland
Finnish compliance platform that turns frameworks into prioritized security tasks inside Microsoft Teams.
CyberSaint
Boston, Massachusetts, USA
Cyber-risk management and quantification platform for continuous control monitoring.
Cypago
Israel
Cyber GRC automation platform that correlates evidence across IT systems for continuous compliance.
DataGrail
San Francisco, California, USA
Privacy management platform automating data subject requests, consent and data mapping.
DataGuard
Munich, Germany
European security and compliance platform that pairs automation with expert advisory across privacy and infosec.
Didomi
Paris, France
Paris-based consent and preference management platform for privacy compliance across digital channels.
DigitalXForce
Southlake, Texas, USA
AI-native automated GRC and digital trust management platform.
Diligent One Platform
New York, USA
Diligent's integrated GRC and board governance platform, incorporating the former Galvanize tools.
Drata
San Diego, California, USA
Security and compliance automation platform for continuous framework readiness.
Enablon
Paris, France
Wolters Kluwer's enterprise EHS, operational risk, and sustainability platform.
EQS Group
Munich, Germany
Compliance, whistleblowing and corporate governance platform serving European enterprises.
ETQ Reliance
Burlington, Massachusetts, USA
SaaS quality management system with EHS and compliance modules, part of Hexagon.
Fastpath
Des Moines, Iowa, USA
Access governance and segregation-of-duties platform for ERP and financial applications, now part of Delinea.
Feedzai
San Mateo, California, USA
AI platform for financial fraud prevention and anti-money-laundering risk management.
Fenergo
Dublin, Ireland
Client lifecycle management and financial crime compliance for financial institutions.
Formalize
Aarhus, Denmark
Danish whistleblowing and compliance platform that expanded into broader ethics and compliance management.
Fusion Risk Management
Rolling Meadows, Illinois, USA
Operational resilience, business continuity, and risk management platform.
GAN Integrity
Copenhagen, Denmark
Ethics, compliance and third-party risk management platform for anti-corruption and integrity programs.
Governance.com
Luxembourg
Governance and compliance operating system for regulated fund and asset management professionals.
heyData
Berlin, Germany
Berlin-based data protection platform bundling an external DPO with compliance software for SMBs.
Holistic AI
London, United Kingdom
Enterprise AI governance platform with automated testing and runtime enforcement for AI systems.
Hyperproof
Seattle, Washington, USA
Compliance operations platform for managing controls, evidence, and multiple frameworks.
IBM OpenPages
Armonk, New York, USA
IBM's AI-augmented enterprise GRC platform for integrated risk and compliance.
Ideagen Pentana Audit
Nottingham, United Kingdom
Internal audit management software within the Ideagen compliance and quality portfolio.
Ideagen Q-Pulse
Nottingham, United Kingdom
Quality, safety, and compliance management software within the Ideagen portfolio.
Intelex
Toronto, Ontario, Canada
EHS, quality and sustainability management platform, part of Fortive.
ISMS.online
United Kingdom
UK compliance platform with preconfigured tooling for ISO 27001 and related management systems.
IsoMetrix
Johannesburg, South Africa
EHS, ESG and integrated risk software with strong footprint in mining, energy and heavy industry.
Kaseya Compliance Manager GRC
Miami, Florida, USA
GRC and compliance management tool aimed at MSPs and their SMB clients.
Kertos
Munich, Germany
Privacy and compliance automation platform focused on GDPR and data protection.
Ketch
San Francisco, USA
Data permissioning and privacy platform for consent, data rights, and privacy-safe data activation.
Kovrr
Tel Aviv, Israel
Cyber-risk quantification platform for enterprises and boards using financial modeling.
LogicGate
Chicago, Illinois, USA
Risk Cloud, a no-code integrated risk and GRC platform.
LogicManager
Boston, Massachusetts, USA
Enterprise risk management and GRC platform with taxonomy-driven risk linking.
LRN
New York, New York, USA
Ethics, compliance and corporate-culture training and program platform.
MasterControl
Salt Lake City, Utah, USA
Quality and compliance management software for regulated manufacturing and life sciences.
MEGA International HOPEX
Paris, France
Enterprise architecture and GRC platform (HOPEX) covering integrated risk, compliance and data governance.
MetaCompliance
Derry, United Kingdom
Security awareness training and policy management platform.
MetricStream
San Jose, California, USA
Enterprise GRC platform spanning risk, compliance, audit, and cyber risk.
Mitratech
Austin, Texas, USA
Legal, risk, and compliance software group with a broad GRC portfolio.
Modulo Risk Manager
Rio de Janeiro, Brazil
Brazilian integrated GRC platform for risk, compliance and cyber-defense monitoring.
Modulos
Zurich, Switzerland
ISO 42001-certified AI governance platform for EU AI Act, ISO 42001, and NIST AI RMF compliance.
MyComplianceOffice
Dublin, Ireland
Compliance management platform for financial services conduct and conflicts risk.
Napier AI
London, United Kingdom
AI-powered anti-money-laundering platform for screening and transaction monitoring.
Naq
London, United Kingdom
Automated compliance platform covering 20-plus frameworks with a focus on UK and EU regulated-market deals.
Nasdaq Verafin
St. John's, Newfoundland, Canada
Cloud financial-crime management platform for AML, fraud and sanctions, owned by Nasdaq.
NAVEX
Lake Oswego, Oregon, USA
Ethics, compliance, policy, and third-party risk platform, known for hotline and GRC.
Ncontracts
Brentwood, Tennessee, USA
Integrated compliance, risk and vendor management platform built for banks, credit unions and other financial institutions.
NICE Actimize
Hoboken, New Jersey, USA
Enterprise financial-crime platform for AML, fraud and market-surveillance compliance.
Novisto
Montreal, Quebec, Canada
Sustainability and ESG data management and reporting platform for enterprises.
Oneleet
Amsterdam, Netherlands
Security-first compliance platform that bundles penetration testing, monitoring, and evidence automation.
OneTrust
Atlanta, Georgia, USA
Privacy, data governance, and trust platform, with GRC and third-party risk modules.
Onspring
Overland Park, Kansas, USA
No-code GRC and business process automation platform.
Optial SmartStart
London, United Kingdom
Enterprise GRC, audit, and EHS software delivered as a configurable suite.
Optimiso Suite
Geneva, Switzerland
Swiss internal control, process, and GRC software now part of the Iskera group.
Origami Risk
Chicago, Illinois, USA
Integrated risk, insurance, and safety management platform.
Osano
Austin, USA
Unified data privacy platform automating consent, subject rights, data mapping, and vendor monitoring.
Panaseer
London, United Kingdom
Continuous controls monitoring platform for security and compliance measurement.
Panorays
Tel Aviv, Israel
Third-party security risk platform combining external attack-surface scanning with security questionnaires.
Pathlock
Flemington, New Jersey, USA
Application access governance and ERP GRC platform for SoD and controls.
Predict360
Austin, Texas, USA
AI-powered GRC and regulatory compliance suite from 360factors for banking.
Prevalent
Phoenix, Arizona, USA
Third-party and vendor risk management platform, now part of Mitratech.
Startup
Open-source compliance automation paired with managed compliance experts for SOC 2, ISO 27001, GDPR, and more.
ProcessUnity
Concord, Massachusetts, USA
Third-party risk management platform combined with the CyberGRX risk exchange.
Protecht ERM
Sydney, Australia
Enterprise risk management platform from Australia with strong risk analytics.
Quantexa
London, United Kingdom
Decision intelligence and entity-resolution platform used for AML, KYC and financial-crime investigations.
Quantivate
Woodinville, Washington, USA
GRC and enterprise risk software with a focus on banking and credit unions.
Resolver
Toronto, Canada
Risk intelligence and GRC platform owned by Kroll.
RiskLens
Spokane, Washington, USA
FAIR-based cyber risk quantification, now part of Safe Security.
Riskonnect
Atlanta, Georgia, USA
Integrated risk management platform spanning ERM, insurance, and resilience.
RiskWatch
Sarasota, Florida, USA
Risk assessment and compliance platform covering many security frameworks.
SAFE Security
Palo Alto, California, USA
Cyber-risk quantification and management platform (SAFE One), parent of RiskLens methodology.
SafeBase
San Francisco, USA
Trust center platform for publishing security posture and streamlining vendor security reviews.
SAI360
Chicago, Illinois, USA
Integrated GRC and ethics and compliance learning platform.
SAP GRC
Walldorf, Germany
SAP's suite of access control, process control and risk management modules embedded in the SAP enterprise stack.
SAS Anti-Money Laundering
Cary, North Carolina, USA
Enterprise AML and financial-crime analytics from analytics vendor SAS.
Scrut Automation
Palo Alto, USA
Cloud-based GRC platform that automates compliance, risk assessment, and audit prep for growth-stage companies.
Scytale
New York, USA
Compliance automation platform for SOC 2, ISO 27001, and related frameworks.
Secfix
Munich, Germany
End-to-end security compliance platform focused on ISO 27001 and EU regulations for mid-sized companies.
Secureframe
San Francisco, California, USA
Security and privacy compliance automation platform.
Securiti
San Jose, California, USA
Data command center for privacy, security, governance, and AI data risk.
SecurityScorecard
New York, New York, USA
Security ratings platform used for third-party and supply-chain cyber risk management.
ServiceNow GRC
Santa Clara, California, USA
ServiceNow's Integrated Risk Management applications on the Now Platform.
Skillcast
London, United Kingdom
Compliance training, e-learning and policy management platform for regulated businesses.
Smart Global Governance
Valbonne, France
French modular GRC platform combining risk, compliance, and AI across 200-plus standards.
Sphera
Chicago, Illinois, USA
ESG, EHS, and operational risk software for industrial and process sectors.
Sprinto
San Francisco, California, USA
Compliance automation platform for fast-growing cloud companies.
Squalify
Munich, Germany
Munich Re-backed top-down cyber risk quantification platform for boards and CISOs.
StandardFusion
Vancouver, Canada
GRC platform for managing compliance, risk, and audits in one place.
Sumsub
London, United Kingdom
Full-cycle identity verification and compliance platform for KYC, KYB, AML, and fraud prevention.
Supply Wisdom
New York, New York, USA
Real-time third-party and location risk intelligence platform spanning financial, cyber, ESG and operational domains.
SureCloud
Reading, United Kingdom
AI-powered GRC platform connecting risk, compliance, audit, and privacy.
TeamMate+
Alphen aan den Rijn, Netherlands
Internal audit management platform from Wolters Kluwer used by audit teams worldwide.
Tenacy
France
French cyber GRC platform that maps, orchestrates, and manages cybersecurity across complex organizations.
Thoropass
New York, USA
Compliance automation platform that pairs evidence collection and continuous monitoring with an in-house audit team.
Transcend
San Francisco, USA
Real-time data governance and privacy platform that answers whether data can be used for a given purpose.
TrustArc
San Francisco, California, USA
Privacy management platform for data privacy programs and assessments.
TrustCloud
Boston, USA
AI-native GRC and security assurance platform that ties compliance to day-to-day security operations.
Trustero
San Francisco, USA
AI-powered compliance-as-a-service platform that auto-collects and maps evidence to controls.
Unit21
San Francisco, California, USA
No-code risk and compliance platform for transaction monitoring, fraud and case management.
UpGuard
Mountain View, California, USA
Attack-surface and third-party risk platform combining security ratings with vendor questionnaires.
Usercentrics
Munich, Germany
Leading consent management platform for GDPR and global privacy compliance across web and apps.
Vanta
San Francisco, California, USA
Trust management and compliance automation platform.
VComply
Sunnyvale, California, USA
Cloud GRC platform for policy, compliance, and risk management.
VelocityEHS
Chicago, Illinois, USA
Cloud EHS and ESG platform covering safety, chemical management and sustainability.
Vendict
Israel
AI-native platform for automating security questionnaire responses and compliance reviews.
Venminder
Elizabethtown, Kentucky, USA
Third-party risk management platform with in-house vendor assessment and due-diligence services, now part of Ncontracts.
Whistic
Pleasant Grove, Utah, USA
Vendor security assessment and profile-sharing network for third-party risk teams.
Wolters Kluwer OneSumX
Alphen aan den Rijn, Netherlands
Regulatory reporting, risk and finance platform for banks and financial institutions.
Workiva
Ames, Iowa, USA
Cloud platform for connected financial, ESG, audit, and risk reporting.
ZenGRC
San Francisco, California, USA
GRC platform from RiskOptics for compliance, risk, and audit management.