# GRC Platforms: full catalog
# 143 platforms across 11 categories
# Catalog data as of: 2026-08-10
# Machine index: https://grcplatforms.com/llms.txt
# Full JSON: https://grcplatforms.com/api/platforms.json

## 6clicks
AI-enabled GRC platform with a hub-and-spoke model aimed at advisors, enterprises and their supply chains.
- Category: Enterprise GRC Suites
- HQ: Melbourne, Australia
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, NIST CSF, Essential Eight, GDPR
- URL: https://www.6clicks.com/
- Details: https://grcplatforms.com/platforms/6clicks

## A1 Tracker
Configurable risk, contract, and compliance tracking software for mid-market operations teams.
- Category: Integrated Risk Management
- HQ: Roseville, California, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, HIPAA
- URL: https://www.a1tracker.com
- Details: https://grcplatforms.com/platforms/a1-tracker

## Alessa
AML compliance, screening and fraud-prevention platform now owned by Tier1 Financial Solutions.
- Category: Financial Crime & AML
- HQ: Ottawa, Ontario, Canada
- Company size: mid-market
- Deployment: SaaS
- Frameworks: BSA/AML, FATF, FINTRAC, OFAC
- URL: https://alessa.com/
- Details: https://grcplatforms.com/platforms/alessa

## Allgress
IT risk and GRC software focused on continuous compliance and risk visualization.
- Category: Integrated Risk Management
- HQ: Livermore, California, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, NIST CSF, PCI DSS, SOC 2, HIPAA
- URL: https://www.allgress.com
- Details: https://grcplatforms.com/platforms/allgress

## Anecdotes
Enterprise GRC platform built on a compliance data layer that collects audit-grade evidence directly from company systems.
- Category: Compliance Automation
- HQ: Tel Aviv, Israel
- Company size: startup
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, NIST
- URL: https://www.anecdotes.ai
- Details: https://grcplatforms.com/platforms/anecdotes

## Ansarada GRC
GRC platform for financial services covering risk, compliance, and operational resilience.
- Category: Integrated Risk Management
- HQ: Sydney, Australia
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, APRA CPS 230, APRA CPS 234, SOC 2
- URL: https://www.ansarada.com/grc
- Details: https://grcplatforms.com/platforms/ansarada-grc

## Apptega
Cybersecurity compliance management platform popular with MSPs and MSSPs.
- Category: Compliance Automation
- HQ: Atlanta, Georgia, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, PCI DSS, HIPAA, NIST CSF, CMMC
- URL: https://www.apptega.com
- Details: https://grcplatforms.com/platforms/apptega

## Aravo
Third-party risk and supplier management platform with a large connector ecosystem.
- Category: Third-Party Risk
- HQ: San Francisco, California, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, GDPR, NIST CSF
- URL: https://aravo.com/
- Details: https://grcplatforms.com/platforms/aravo

## Archer
Enterprise integrated risk management suite formerly known as RSA Archer.
- Category: Enterprise GRC Suites
- HQ: Overland Park, Kansas, USA
- Company size: enterprise
- Deployment: Hybrid
- Frameworks: ISO 27001, NIST CSF, SOX, PCI DSS, GDPR
- URL: https://www.archerirm.com
- Details: https://grcplatforms.com/platforms/archer

## Audit Prodigy
Audit, risk, and compliance management platform with a strong SOX focus.
- Category: Audit Management
- HQ: USA
- Company size: startup
- Deployment: SaaS
- Frameworks: SOX, ISO 27001, SOC 2, COSO
- URL: https://www.auditprodigy.com
- Details: https://grcplatforms.com/platforms/audit-prodigy

## AuditBoard
Connected risk platform spanning audit, SOX, risk, and compliance.
- Category: Audit Management
- HQ: Cerritos, California, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: SOX, ISO 27001, SOC 2, NIST CSF, PCI DSS
- URL: https://www.auditboard.com
- Details: https://grcplatforms.com/platforms/auditboard

## Axio
Cyber-risk quantification and assessment platform tied to insurance and financial exposure.
- Category: Cyber Risk & CCM
- HQ: New York, New York, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: NIST CSF, C2M2, FAIR, ISO 27001
- URL: https://axio.com/
- Details: https://grcplatforms.com/platforms/axio

## Benchmark Gensuite
EHS, ESG, quality and operational-risk platform with a broad application suite.
- Category: EHS, Quality & ESG
- HQ: Cincinnati, Ohio, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 14001, ISO 45001, OSHA, GRI
- URL: https://benchmarkgensuite.com/
- Details: https://grcplatforms.com/platforms/benchmark-gensuite

## BigID
Data discovery, privacy and data-governance platform for finding and governing sensitive data at scale.
- Category: Privacy & Data Governance
- HQ: New York, New York, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: GDPR, CCPA, ISO 27001, HIPAA
- URL: https://bigid.com/
- Details: https://grcplatforms.com/platforms/bigid

## Bitsight
Security ratings and cyber-risk analytics platform positioned for third-party and enterprise cyber risk.
- Category: Third-Party Risk
- HQ: Boston, Massachusetts, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: NIST CSF, ISO 27001, SOC 2
- URL: https://www.bitsight.com/
- Details: https://grcplatforms.com/platforms/bitsight

## Camms
Integrated risk, strategy and project GRC platform from an Australian vendor serving public sector and enterprise.
- Category: Integrated Risk Management
- HQ: Adelaide, Australia
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 31000, ISO 27001, COSO
- URL: https://www.cammsgroup.com/
- Details: https://grcplatforms.com/platforms/camms

## Caseware
Audit, assurance and financial reporting platform used by accounting firms and internal audit teams.
- Category: Audit Management
- HQ: Toronto, Ontario, Canada
- Company size: mid-market
- Deployment: Hybrid
- Frameworks: IFRS, GAAP, ISA
- URL: https://www.caseware.com/
- Details: https://grcplatforms.com/platforms/caseware

## Centraleyes
Cyber risk and compliance management platform with automated framework mapping.
- Category: Cyber Risk & CCM
- HQ: New York, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, NIST CSF, SOC 2, GDPR, HIPAA, PCI DSS
- URL: https://www.centraleyes.com
- Details: https://grcplatforms.com/platforms/centraleyes

## Certa
No-code third-party lifecycle and risk management platform spanning onboarding, risk and ESG.
- Category: Third-Party Risk
- HQ: Palo Alto, California, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, GDPR
- URL: https://www.certa.ai/
- Details: https://grcplatforms.com/platforms/certa

## Cetbix
AI-powered enterprise platform unifying cybersecurity governance, risk, compliance, and OT governance.
- Category: Enterprise GRC Suites
- HQ: Germany
- Company size: mid-market
- Deployment: Hybrid
- Frameworks: ISO 27001, NIS2, DORA, SOC 2, TISAX, NIST
- URL: https://www.cetbix.com
- Details: https://grcplatforms.com/platforms/cetbix

## Collibra
Data governance and data intelligence platform underpinning privacy, quality and regulatory data programs.
- Category: Privacy & Data Governance
- HQ: New York, New York, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: GDPR, CCPA, BCBS 239
- URL: https://www.collibra.com/
- Details: https://grcplatforms.com/platforms/collibra

## Comp AI
Open-source, self-hostable compliance automation platform for SOC 2, ISO 27001, HIPAA, and GDPR.
- Category: Compliance Automation
- HQ: United States
- Company size: startup
- Deployment: Hybrid
- Frameworks: SOC 2, ISO 27001, HIPAA, GDPR
- URL: https://trycomp.ai
- Details: https://grcplatforms.com/platforms/comp-ai

## ComplianceQuest
Quality, EHS, and compliance management suite built natively on Salesforce.
- Category: EHS, Quality & ESG
- HQ: Tampa, Florida, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 9001, ISO 45001, ISO 14001, FDA 21 CFR Part 11
- URL: https://www.compliancequest.com
- Details: https://grcplatforms.com/platforms/compliancequest

## ComplyAdvantage
AI-driven financial crime detection, AML screening, and transaction monitoring.
- Category: Financial Crime & AML
- HQ: London, United Kingdom
- Company size: enterprise
- Deployment: SaaS
- Frameworks: AML, KYC, Sanctions Screening, FATF
- URL: https://www.complyadvantage.com
- Details: https://grcplatforms.com/platforms/complyadvantage

## ComplyCube
SaaS and API platform for identity verification, KYC, KYB, AML, and fraud prevention.
- Category: Financial Crime & AML
- HQ: London, United Kingdom
- Company size: mid-market
- Deployment: SaaS
- Frameworks: AML, KYC, KYB, GDPR
- URL: https://www.complycube.com
- Details: https://grcplatforms.com/platforms/complycube

## Compyl
Integrated GRC platform for mid-market teams spanning compliance, risk, contracts, and asset management.
- Category: Compliance Automation
- HQ: United States
- Company size: startup
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR
- URL: https://compyl.com
- Details: https://grcplatforms.com/platforms/compyl

## ControlCase
Continuous compliance platform and certification services across security frameworks.
- Category: Compliance Automation
- HQ: Fairfax, Virginia, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: PCI DSS, ISO 27001, SOC 2, HIPAA, GDPR, HITRUST
- URL: https://www.controlcase.com
- Details: https://grcplatforms.com/platforms/controlcase

## Conveyor
AI platform that automates security questionnaires, RFPs, and trust centers for customer security reviews.
- Category: Third-Party Risk
- HQ: San Francisco, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, GDPR, HIPAA
- URL: https://www.conveyor.com
- Details: https://grcplatforms.com/platforms/conveyor

## Cority
Enterprise EHS, quality, and sustainability management software.
- Category: EHS, Quality & ESG
- HQ: Toronto, Canada
- Company size: enterprise
- Deployment: SaaS
- Frameworks: ISO 45001, ISO 14001, ISO 9001, GRI, OSHA
- URL: https://www.cority.com
- Details: https://grcplatforms.com/platforms/cority

## Corporater
Configurable business management platform covering GRC and performance.
- Category: Enterprise GRC Suites
- HQ: Stavanger, Norway
- Company size: mid-market
- Deployment: Hybrid
- Frameworks: ISO 27001, ISO 31000, COSO, GDPR
- URL: https://www.corporater.com
- Details: https://grcplatforms.com/platforms/corporater

## Credo AI
Enterprise AI governance platform for managing model risk, compliance, and responsible AI use.
- Category: AI Governance
- HQ: San Francisco, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: EU AI Act, ISO 42001, NIST AI RMF, SOC 2
- URL: https://www.credo.ai
- Details: https://grcplatforms.com/platforms/credo-ai

## Cyber Sierra
Unified cybersecurity and compliance automation platform out of Singapore.
- Category: Compliance Automation
- HQ: Singapore
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, GDPR, PCI DSS, HIPAA
- URL: https://cybersierra.co
- Details: https://grcplatforms.com/platforms/cyber-sierra

## Cyberday
Finnish compliance platform that turns frameworks into prioritized security tasks inside Microsoft Teams.
- Category: Compliance Automation
- HQ: Finland
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, NIS2, DORA, ISO 27701, GDPR
- URL: https://www.cyberday.ai
- Details: https://grcplatforms.com/platforms/cyberday

## CyberSaint
Cyber-risk management and quantification platform for continuous control monitoring.
- Category: Cyber Risk & CCM
- HQ: Boston, Massachusetts, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: NIST CSF, NIST 800-53, ISO 27001, FAIR
- URL: https://www.cybersaint.io/
- Details: https://grcplatforms.com/platforms/cybersaint

## Cypago
Cyber GRC automation platform that correlates evidence across IT systems for continuous compliance.
- Category: Compliance Automation
- HQ: Israel
- Company size: startup
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, GDPR, NIST AI RMF, ISO 42001, NIST
- URL: https://cypago.com
- Details: https://grcplatforms.com/platforms/cypago

## DataGrail
Privacy management platform automating data subject requests, consent and data mapping.
- Category: Privacy & Data Governance
- HQ: San Francisco, California, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: GDPR, CCPA, CPRA
- URL: https://www.datagrail.io/
- Details: https://grcplatforms.com/platforms/datagrail

## DataGuard
European security and compliance platform that pairs automation with expert advisory across privacy and infosec.
- Category: Compliance Automation
- HQ: Munich, Germany
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, GDPR, TISAX, NIS2, EU AI Act
- URL: https://www.dataguard.com
- Details: https://grcplatforms.com/platforms/dataguard

## Didomi
Paris-based consent and preference management platform for privacy compliance across digital channels.
- Category: Privacy & Data Governance
- HQ: Paris, France
- Company size: mid-market
- Deployment: SaaS
- Frameworks: GDPR, CCPA, IAB TCF
- URL: https://www.didomi.io
- Details: https://grcplatforms.com/platforms/didomi

## DigitalXForce
AI-native automated GRC and digital trust management platform.
- Category: Cyber Risk & CCM
- HQ: Southlake, Texas, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: NIST CSF, ISO 27001, SOC 2, PCI DSS, HIPAA
- URL: https://digitalxforce.com
- Details: https://grcplatforms.com/platforms/digitalxforce

## Diligent One Platform
Diligent's integrated GRC and board governance platform, incorporating the former Galvanize tools.
- Category: Enterprise GRC Suites
- HQ: New York, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: SOX, ISO 27001, COSO, GDPR, ESG Reporting
- URL: https://www.diligent.com
- Details: https://grcplatforms.com/platforms/diligent-one-platform

## Drata
Security and compliance automation platform for continuous framework readiness.
- Category: Compliance Automation
- HQ: San Diego, California, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, NIST CSF
- URL: https://drata.com
- Details: https://grcplatforms.com/platforms/drata

## Enablon
Wolters Kluwer's enterprise EHS, operational risk, and sustainability platform.
- Category: EHS, Quality & ESG
- HQ: Paris, France
- Company size: enterprise
- Deployment: SaaS
- Frameworks: ISO 45001, ISO 14001, GRI, ISO 31000
- URL: https://www.wolterskluwer.com/en/solutions/enablon
- Details: https://grcplatforms.com/platforms/enablon

## EQS Group
Compliance, whistleblowing and corporate governance platform serving European enterprises.
- Category: Policy, Training & Awareness
- HQ: Munich, Germany
- Company size: mid-market
- Deployment: SaaS
- Frameworks: EU Whistleblowing Directive, GDPR, MAR
- URL: https://www.eqs.com/
- Details: https://grcplatforms.com/platforms/eqs-group

## ETQ Reliance
SaaS quality management system with EHS and compliance modules, part of Hexagon.
- Category: EHS, Quality & ESG
- HQ: Burlington, Massachusetts, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 9001, ISO 14001, FDA 21 CFR Part 11, ISO 45001
- URL: https://www.etq.com/
- Details: https://grcplatforms.com/platforms/etq-reliance

## Fastpath
Access governance and segregation-of-duties platform for ERP and financial applications, now part of Delinea.
- Category: Enterprise GRC Suites
- HQ: Des Moines, Iowa, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: SOX, SOC 2, ISO 27001
- URL: https://delinea.com/products/fastpath-access-control
- Details: https://grcplatforms.com/platforms/fastpath

## Feedzai
AI platform for financial fraud prevention and anti-money-laundering risk management.
- Category: Financial Crime & AML
- HQ: San Mateo, California, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: BSA/AML, FATF, PSD2, OFAC
- URL: https://www.feedzai.com/
- Details: https://grcplatforms.com/platforms/feedzai

## Fenergo
Client lifecycle management and financial crime compliance for financial institutions.
- Category: Financial Crime & AML
- HQ: Dublin, Ireland
- Company size: enterprise
- Deployment: SaaS
- Frameworks: AML, KYC, FATCA, CRS, Sanctions Screening
- URL: https://www.fenergo.com
- Details: https://grcplatforms.com/platforms/fenergo

## Formalize
Danish whistleblowing and compliance platform that expanded into broader ethics and compliance management.
- Category: Policy, Training & Awareness
- HQ: Aarhus, Denmark
- Company size: mid-market
- Deployment: SaaS
- Frameworks: EU Whistleblower Directive, GDPR, NIS2, DORA, ISO 27001
- URL: https://formalize.com
- Details: https://grcplatforms.com/platforms/formalize

## Fusion Risk Management
Operational resilience, business continuity, and risk management platform.
- Category: Integrated Risk Management
- HQ: Rolling Meadows, Illinois, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 22301, ISO 31000, DORA, NIST CSF
- URL: https://www.fusionrm.com
- Details: https://grcplatforms.com/platforms/fusion-risk-management

## GAN Integrity
Ethics, compliance and third-party risk management platform for anti-corruption and integrity programs.
- Category: Third-Party Risk
- HQ: Copenhagen, Denmark
- Company size: startup
- Deployment: SaaS
- Frameworks: FCPA, UK Bribery Act, GDPR
- URL: https://www.ganintegrity.com/
- Details: https://grcplatforms.com/platforms/gan-integrity

## Governance.com
Governance and compliance operating system for regulated fund and asset management professionals.
- Category: Enterprise GRC Suites
- HQ: Luxembourg
- Company size: startup
- Deployment: SaaS
- Frameworks: AIFMD, GDPR, ISO 27001
- URL: https://www.governance.com
- Details: https://grcplatforms.com/platforms/governance-com

## heyData
Berlin-based data protection platform bundling an external DPO with compliance software for SMBs.
- Category: Privacy & Data Governance
- HQ: Berlin, Germany
- Company size: startup
- Deployment: SaaS
- Frameworks: GDPR, ISO 27001, NIS2, EU AI Act
- URL: https://heydata.eu
- Details: https://grcplatforms.com/platforms/heydata

## Holistic AI
Enterprise AI governance platform with automated testing and runtime enforcement for AI systems.
- Category: AI Governance
- HQ: London, United Kingdom
- Company size: startup
- Deployment: SaaS
- Frameworks: EU AI Act, ISO 42001, NIST AI RMF
- URL: https://www.holisticai.com
- Details: https://grcplatforms.com/platforms/holistic-ai

## Hyperproof
Compliance operations platform for managing controls, evidence, and multiple frameworks.
- Category: Compliance Automation
- HQ: Seattle, Washington, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, NIST CSF, PCI DSS, HIPAA, GDPR
- URL: https://hyperproof.io
- Details: https://grcplatforms.com/platforms/hyperproof

## IBM OpenPages
IBM's AI-augmented enterprise GRC platform for integrated risk and compliance.
- Category: Enterprise GRC Suites
- HQ: Armonk, New York, USA
- Company size: public
- Deployment: Hybrid
- Frameworks: SOX, Basel, ISO 27001, GDPR, COSO
- URL: https://www.ibm.com/products/openpages
- Details: https://grcplatforms.com/platforms/ibm-openpages

## Ideagen Pentana Audit
Internal audit management software within the Ideagen compliance and quality portfolio.
- Category: Audit Management
- HQ: Nottingham, United Kingdom
- Company size: mid-market
- Deployment: SaaS
- Frameworks: IIA Standards, ISO 27001, SOX
- URL: https://www.ideagen.com/products/internal-audit
- Details: https://grcplatforms.com/platforms/ideagen-pentana-audit

## Ideagen Q-Pulse
Quality, safety, and compliance management software within the Ideagen portfolio.
- Category: EHS, Quality & ESG
- HQ: Nottingham, United Kingdom
- Company size: enterprise
- Deployment: SaaS
- Frameworks: ISO 9001, ISO 45001, ISO 14001, AS9100
- URL: https://www.ideagen.com
- Details: https://grcplatforms.com/platforms/ideagen-q-pulse

## Intelex
EHS, quality and sustainability management platform, part of Fortive.
- Category: EHS, Quality & ESG
- HQ: Toronto, Ontario, Canada
- Company size: enterprise
- Deployment: SaaS
- Frameworks: ISO 14001, ISO 45001, ISO 9001, GRI
- URL: https://www.intelex.com/
- Details: https://grcplatforms.com/platforms/intelex

## ISMS.online
UK compliance platform with preconfigured tooling for ISO 27001 and related management systems.
- Category: Compliance Automation
- HQ: United Kingdom
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, ISO 27701, GDPR, SOC 2, NIS2
- URL: https://www.isms.online
- Details: https://grcplatforms.com/platforms/isms-online

## IsoMetrix
EHS, ESG and integrated risk software with strong footprint in mining, energy and heavy industry.
- Category: EHS, Quality & ESG
- HQ: Johannesburg, South Africa
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 14001, ISO 45001, GRI, ISO 31000
- URL: https://www.isometrix.com/
- Details: https://grcplatforms.com/platforms/isometrix

## Kaseya Compliance Manager GRC
GRC and compliance management tool aimed at MSPs and their SMB clients.
- Category: Compliance Automation
- HQ: Miami, Florida, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: HIPAA, GDPR, PCI DSS, CMMC, NIST CSF
- URL: https://www.kaseya.com/products/compliance-manager-grc/
- Details: https://grcplatforms.com/platforms/kaseya-compliance-manager-grc

## Kertos
Privacy and compliance automation platform focused on GDPR and data protection.
- Category: Privacy & Data Governance
- HQ: Munich, Germany
- Company size: startup
- Deployment: SaaS
- Frameworks: GDPR, ISO 27001, SOC 2, NIS 2, DORA
- URL: https://kertos.io
- Details: https://grcplatforms.com/platforms/kertos

## Ketch
Data permissioning and privacy platform for consent, data rights, and privacy-safe data activation.
- Category: Privacy & Data Governance
- HQ: San Francisco, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: GDPR, CCPA, CPRA
- URL: https://www.ketch.com
- Details: https://grcplatforms.com/platforms/ketch

## Kovrr
Cyber-risk quantification platform for enterprises and boards using financial modeling.
- Category: Cyber Risk & CCM
- HQ: Tel Aviv, Israel
- Company size: startup
- Deployment: SaaS
- Frameworks: FAIR, NIST CSF, SEC Cyber Disclosure
- URL: https://www.kovrr.com/
- Details: https://grcplatforms.com/platforms/kovrr

## LogicGate
Risk Cloud, a no-code integrated risk and GRC platform.
- Category: Integrated Risk Management
- HQ: Chicago, Illinois, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, NIST CSF, GDPR, PCI DSS
- URL: https://www.logicgate.com
- Details: https://grcplatforms.com/platforms/logicgate

## LogicManager
Enterprise risk management and GRC platform with taxonomy-driven risk linking.
- Category: Integrated Risk Management
- HQ: Boston, Massachusetts, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, SOX, NIST CSF, GDPR, COSO
- URL: https://www.logicmanager.com
- Details: https://grcplatforms.com/platforms/logicmanager

## LRN
Ethics, compliance and corporate-culture training and program platform.
- Category: Policy, Training & Awareness
- HQ: New York, New York, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: FCPA, UK Bribery Act, GDPR
- URL: https://www.lrn.com/
- Details: https://grcplatforms.com/platforms/lrn

## MasterControl
Quality and compliance management software for regulated manufacturing and life sciences.
- Category: EHS, Quality & ESG
- HQ: Salt Lake City, Utah, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: ISO 9001, FDA 21 CFR Part 11, GxP, ISO 13485
- URL: https://www.mastercontrol.com
- Details: https://grcplatforms.com/platforms/mastercontrol

## MEGA International HOPEX
Enterprise architecture and GRC platform (HOPEX) covering integrated risk, compliance and data governance.
- Category: Enterprise GRC Suites
- HQ: Paris, France
- Company size: mid-market
- Deployment: Hybrid
- Frameworks: ISO 27001, GDPR, Basel, DORA
- URL: https://www.mega.com/
- Details: https://grcplatforms.com/platforms/mega-international-hopex

## MetaCompliance
Security awareness training and policy management platform.
- Category: Policy, Training & Awareness
- HQ: Derry, United Kingdom
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, GDPR, NIS 2, PCI DSS
- URL: https://www.metacompliance.com
- Details: https://grcplatforms.com/platforms/metacompliance

## MetricStream
Enterprise GRC platform spanning risk, compliance, audit, and cyber risk.
- Category: Enterprise GRC Suites
- HQ: San Jose, California, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: ISO 27001, SOX, NIST CSF, Basel, GDPR
- URL: https://www.metricstream.com
- Details: https://grcplatforms.com/platforms/metricstream

## Mitratech
Legal, risk, and compliance software group with a broad GRC portfolio.
- Category: Enterprise GRC Suites
- HQ: Austin, Texas, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: ISO 27001, GDPR, SOX, NIST CSF
- URL: https://mitratech.com
- Details: https://grcplatforms.com/platforms/mitratech

## Modulo Risk Manager
Brazilian integrated GRC platform for risk, compliance and cyber-defense monitoring.
- Category: Enterprise GRC Suites
- HQ: Rio de Janeiro, Brazil
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, ISO 31000, LGPD, PCI DSS
- URL: https://www.modulo.com/
- Details: https://grcplatforms.com/platforms/modulo-risk-manager

## Modulos
ISO 42001-certified AI governance platform for EU AI Act, ISO 42001, and NIST AI RMF compliance.
- Category: AI Governance
- HQ: Zurich, Switzerland
- Company size: startup
- Deployment: SaaS
- Frameworks: EU AI Act, ISO 42001, NIST AI RMF, ISO 27001
- URL: https://www.modulos.ai
- Details: https://grcplatforms.com/platforms/modulos

## MyComplianceOffice
Compliance management platform for financial services conduct and conflicts risk.
- Category: Financial Crime & AML
- HQ: Dublin, Ireland
- Company size: mid-market
- Deployment: SaaS
- Frameworks: SEC Rules, MiFID II, AML, FCA Rules
- URL: https://www.mycomplianceoffice.com
- Details: https://grcplatforms.com/platforms/mycomplianceoffice

## Napier AI
AI-powered anti-money-laundering platform for screening and transaction monitoring.
- Category: Financial Crime & AML
- HQ: London, United Kingdom
- Company size: startup
- Deployment: SaaS
- Frameworks: BSA/AML, FATF, 6AMLD, OFAC
- URL: https://www.napier.ai/
- Details: https://grcplatforms.com/platforms/napier-ai

## Naq
Automated compliance platform covering 20-plus frameworks with a focus on UK and EU regulated-market deals.
- Category: Compliance Automation
- HQ: London, United Kingdom
- Company size: startup
- Deployment: SaaS
- Frameworks: GDPR, ISO 27001, Cyber Essentials, NHS DSPT, SOC 2
- URL: https://www.naqcyber.com
- Details: https://grcplatforms.com/platforms/naq

## Nasdaq Verafin
Cloud financial-crime management platform for AML, fraud and sanctions, owned by Nasdaq.
- Category: Financial Crime & AML
- HQ: St. John's, Newfoundland, Canada
- Company size: public
- Deployment: SaaS
- Frameworks: BSA/AML, FinCEN, OFAC, FATF
- URL: https://verafin.com/
- Details: https://grcplatforms.com/platforms/nasdaq-verafin

## NAVEX
Ethics, compliance, policy, and third-party risk platform, known for hotline and GRC.
- Category: Policy, Training & Awareness
- HQ: Lake Oswego, Oregon, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: SOX, GDPR, ISO 37001, EU Whistleblowing Directive
- URL: https://www.navex.com
- Details: https://grcplatforms.com/platforms/navex

## Ncontracts
Integrated compliance, risk and vendor management platform built for banks, credit unions and other financial institutions.
- Category: Enterprise GRC Suites
- HQ: Brentwood, Tennessee, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: FFIEC, SOX, GLBA, BSA/AML
- URL: https://www.ncontracts.com/
- Details: https://grcplatforms.com/platforms/ncontracts

## NICE Actimize
Enterprise financial-crime platform for AML, fraud and market-surveillance compliance.
- Category: Financial Crime & AML
- HQ: Hoboken, New Jersey, USA
- Company size: public
- Deployment: Hybrid
- Frameworks: BSA/AML, FATF, MiFID II, OFAC
- URL: https://www.niceactimize.com/
- Details: https://grcplatforms.com/platforms/nice-actimize

## Novisto
Sustainability and ESG data management and reporting platform for enterprises.
- Category: EHS, Quality & ESG
- HQ: Montreal, Quebec, Canada
- Company size: startup
- Deployment: SaaS
- Frameworks: CSRD, GRI, SASB, IFRS S1/S2
- URL: https://novisto.com/
- Details: https://grcplatforms.com/platforms/novisto

## Oneleet
Security-first compliance platform that bundles penetration testing, monitoring, and evidence automation.
- Category: Compliance Automation
- HQ: Amsterdam, Netherlands
- Company size: startup
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS
- URL: https://www.oneleet.com
- Details: https://grcplatforms.com/platforms/oneleet

## OneTrust
Privacy, data governance, and trust platform, with GRC and third-party risk modules.
- Category: Privacy & Data Governance
- HQ: Atlanta, Georgia, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: GDPR, CCPA, ISO 27001, SOC 2, NIST CSF
- URL: https://www.onetrust.com
- Details: https://grcplatforms.com/platforms/onetrust

## Onspring
No-code GRC and business process automation platform.
- Category: Integrated Risk Management
- HQ: Overland Park, Kansas, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, NIST CSF, SOX, GDPR
- URL: https://onspring.com
- Details: https://grcplatforms.com/platforms/onspring

## Optial SmartStart
Enterprise GRC, audit, and EHS software delivered as a configurable suite.
- Category: Enterprise GRC Suites
- HQ: London, United Kingdom
- Company size: mid-market
- Deployment: Hybrid
- Frameworks: ISO 27001, SOX, ISO 45001, HIPAA
- URL: https://www.optial.com
- Details: https://grcplatforms.com/platforms/optial-smartstart

## Optimiso Suite
Swiss internal control, process, and GRC software now part of the Iskera group.
- Category: Integrated Risk Management
- HQ: Geneva, Switzerland
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 9001, ISO 27001, ISO 31000
- URL: https://optimiso-group.com
- Details: https://grcplatforms.com/platforms/optimiso-suite

## Origami Risk
Integrated risk, insurance, and safety management platform.
- Category: Integrated Risk Management
- HQ: Chicago, Illinois, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: ISO 31000, OSHA, SOX
- URL: https://www.origamirisk.com
- Details: https://grcplatforms.com/platforms/origami-risk

## Osano
Unified data privacy platform automating consent, subject rights, data mapping, and vendor monitoring.
- Category: Privacy & Data Governance
- HQ: Austin, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: GDPR, CCPA, CPRA
- URL: https://www.osano.com
- Details: https://grcplatforms.com/platforms/osano

## Panaseer
Continuous controls monitoring platform for security and compliance measurement.
- Category: Cyber Risk & CCM
- HQ: London, United Kingdom
- Company size: startup
- Deployment: SaaS
- Frameworks: NIST CSF, ISO 27001, PCI DSS, SOC 2
- URL: https://panaseer.com/
- Details: https://grcplatforms.com/platforms/panaseer

## Panorays
Third-party security risk platform combining external attack-surface scanning with security questionnaires.
- Category: Third-Party Risk
- HQ: Tel Aviv, Israel
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, GDPR, NIST CSF
- URL: https://panorays.com/
- Details: https://grcplatforms.com/platforms/panorays

## Pathlock
Application access governance and ERP GRC platform for SoD and controls.
- Category: Enterprise GRC Suites
- HQ: Flemington, New Jersey, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: SOX, ISO 27001, GDPR, NIST CSF
- URL: https://pathlock.com
- Details: https://grcplatforms.com/platforms/pathlock

## Predict360
AI-powered GRC and regulatory compliance suite from 360factors for banking.
- Category: Enterprise GRC Suites
- HQ: Austin, Texas, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: SOX, FFIEC, Basel, NIST CSF
- URL: https://www.360factors.com
- Details: https://grcplatforms.com/platforms/predict360

## Prevalent
Third-party and vendor risk management platform, now part of Mitratech.
- Category: Third-Party Risk
- HQ: Phoenix, Arizona, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, NIST CSF, GDPR
- URL: https://www.prevalent.net
- Details: https://grcplatforms.com/platforms/prevalent

## Probo
Open-source compliance automation paired with managed compliance experts for SOC 2, ISO 27001, GDPR, and more.
- Category: Compliance Automation
- Company size: startup
- Deployment: Hybrid
- Frameworks: SOC 2, ISO 27001, ISO 27701, ISO 42001, GDPR, HIPAA, CCPA, NIS2, DORA
- URL: https://www.probo.com
- Details: https://grcplatforms.com/platforms/probo

## ProcessUnity
Third-party risk management platform combined with the CyberGRX risk exchange.
- Category: Third-Party Risk
- HQ: Concord, Massachusetts, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, NIST CSF, GDPR
- URL: https://www.processunity.com
- Details: https://grcplatforms.com/platforms/processunity

## Protecht ERM
Enterprise risk management platform from Australia with strong risk analytics.
- Category: Integrated Risk Management
- HQ: Sydney, Australia
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 31000, APRA CPS 230, ISO 27001
- URL: https://www.protechtgroup.com
- Details: https://grcplatforms.com/platforms/protecht-erm

## Quantexa
Decision intelligence and entity-resolution platform used for AML, KYC and financial-crime investigations.
- Category: Financial Crime & AML
- HQ: London, United Kingdom
- Company size: enterprise
- Deployment: Hybrid
- Frameworks: BSA/AML, FATF, KYC, OFAC
- URL: https://www.quantexa.com/
- Details: https://grcplatforms.com/platforms/quantexa

## Quantivate
GRC and enterprise risk software with a focus on banking and credit unions.
- Category: Integrated Risk Management
- HQ: Woodinville, Washington, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: FFIEC, SOX, ISO 27001, NIST CSF
- URL: https://quantivate.com
- Details: https://grcplatforms.com/platforms/quantivate

## Resolver
Risk intelligence and GRC platform owned by Kroll.
- Category: Integrated Risk Management
- HQ: Toronto, Canada
- Company size: enterprise
- Deployment: SaaS
- Frameworks: ISO 27001, ISO 31000, SOX, GDPR
- URL: https://www.resolver.com
- Details: https://grcplatforms.com/platforms/resolver

## RiskLens
FAIR-based cyber risk quantification, now part of Safe Security.
- Category: Cyber Risk & CCM
- HQ: Spokane, Washington, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: FAIR, NIST CSF, ISO 27001
- URL: https://www.risklens.com
- Details: https://grcplatforms.com/platforms/risklens

## Riskonnect
Integrated risk management platform spanning ERM, insurance, and resilience.
- Category: Integrated Risk Management
- HQ: Atlanta, Georgia, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: ISO 31000, ISO 22301, SOX, GDPR
- URL: https://riskonnect.com
- Details: https://grcplatforms.com/platforms/riskonnect

## RiskWatch
Risk assessment and compliance platform covering many security frameworks.
- Category: Integrated Risk Management
- HQ: Sarasota, Florida, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, NIST CSF, HIPAA, PCI DSS, GDPR
- URL: https://www.riskwatch.com
- Details: https://grcplatforms.com/platforms/riskwatch

## SAFE Security
Cyber-risk quantification and management platform (SAFE One), parent of RiskLens methodology.
- Category: Cyber Risk & CCM
- HQ: Palo Alto, California, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: FAIR, NIST CSF, ISO 27001
- URL: https://safe.security/
- Details: https://grcplatforms.com/platforms/safe-security

## SafeBase
Trust center platform for publishing security posture and streamlining vendor security reviews.
- Category: Third-Party Risk
- HQ: San Francisco, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, GDPR, HIPAA
- URL: https://safebase.io
- Details: https://grcplatforms.com/platforms/safebase

## SAI360
Integrated GRC and ethics and compliance learning platform.
- Category: Enterprise GRC Suites
- HQ: Chicago, Illinois, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: ISO 27001, GDPR, ISO 45001, SOX
- URL: https://www.sai360.com
- Details: https://grcplatforms.com/platforms/sai360

## SAP GRC
SAP's suite of access control, process control and risk management modules embedded in the SAP enterprise stack.
- Category: Enterprise GRC Suites
- HQ: Walldorf, Germany
- Company size: public
- Deployment: Hybrid
- Frameworks: SOX, GDPR, ISO 27001
- URL: https://www.sap.com/products/financial-management/grc.html
- Details: https://grcplatforms.com/platforms/sap-grc

## SAS Anti-Money Laundering
Enterprise AML and financial-crime analytics from analytics vendor SAS.
- Category: Financial Crime & AML
- HQ: Cary, North Carolina, USA
- Company size: enterprise
- Deployment: Hybrid
- Frameworks: BSA/AML, FATF, OFAC, FinCEN
- URL: https://www.sas.com/en_us/software/anti-money-laundering.html
- Details: https://grcplatforms.com/platforms/sas-anti-money-laundering

## Scrut Automation
Cloud-based GRC platform that automates compliance, risk assessment, and audit prep for growth-stage companies.
- Category: Compliance Automation
- HQ: Palo Alto, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS
- URL: https://www.scrut.io
- Details: https://grcplatforms.com/platforms/scrut-automation

## Scytale
Compliance automation platform for SOC 2, ISO 27001, and related frameworks.
- Category: Compliance Automation
- HQ: New York, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS
- URL: https://scytale.ai
- Details: https://grcplatforms.com/platforms/scytale

## Secfix
End-to-end security compliance platform focused on ISO 27001 and EU regulations for mid-sized companies.
- Category: Compliance Automation
- HQ: Munich, Germany
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, GDPR, NIS2, EU AI Act
- URL: https://www.secfix.com
- Details: https://grcplatforms.com/platforms/secfix

## Secureframe
Security and privacy compliance automation platform.
- Category: Compliance Automation
- HQ: San Francisco, California, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, NIST CSF
- URL: https://secureframe.com
- Details: https://grcplatforms.com/platforms/secureframe

## Securiti
Data command center for privacy, security, governance, and AI data risk.
- Category: Privacy & Data Governance
- HQ: San Jose, California, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: GDPR, CCPA, ISO 27001, SOC 2, EU AI Act
- URL: https://securiti.ai
- Details: https://grcplatforms.com/platforms/securiti

## SecurityScorecard
Security ratings platform used for third-party and supply-chain cyber risk management.
- Category: Third-Party Risk
- HQ: New York, New York, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: NIST CSF, ISO 27001, SOC 2, PCI DSS
- URL: https://securityscorecard.com/
- Details: https://grcplatforms.com/platforms/securityscorecard

## ServiceNow GRC
ServiceNow's Integrated Risk Management applications on the Now Platform.
- Category: Enterprise GRC Suites
- HQ: Santa Clara, California, USA
- Company size: public
- Deployment: SaaS
- Frameworks: ISO 27001, SOX, NIST CSF, GDPR, PCI DSS
- URL: https://www.servicenow.com/products/governance-risk-and-compliance.html
- Details: https://grcplatforms.com/platforms/servicenow-grc

## Skillcast
Compliance training, e-learning and policy management platform for regulated businesses.
- Category: Policy, Training & Awareness
- HQ: London, United Kingdom
- Company size: mid-market
- Deployment: SaaS
- Frameworks: GDPR, FCA, AML, Bribery Act
- URL: https://www.skillcast.com/
- Details: https://grcplatforms.com/platforms/skillcast

## Smart Global Governance
French modular GRC platform combining risk, compliance, and AI across 200-plus standards.
- Category: Enterprise GRC Suites
- HQ: Valbonne, France
- Company size: startup
- Deployment: Hybrid
- Frameworks: ISO 27001, GDPR, SOC 2, EU AI Act, NIS2, DORA
- URL: https://www.smart-global-governance.com
- Details: https://grcplatforms.com/platforms/smart-global-governance

## Sphera
ESG, EHS, and operational risk software for industrial and process sectors.
- Category: EHS, Quality & ESG
- HQ: Chicago, Illinois, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: ISO 45001, ISO 14001, GRI, REACH
- URL: https://sphera.com
- Details: https://grcplatforms.com/platforms/sphera

## Sprinto
Compliance automation platform for fast-growing cloud companies.
- Category: Compliance Automation
- HQ: San Francisco, California, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS
- URL: https://sprinto.com
- Details: https://grcplatforms.com/platforms/sprinto

## Squalify
Munich Re-backed top-down cyber risk quantification platform for boards and CISOs.
- Category: Cyber Risk & CCM
- HQ: Munich, Germany
- Company size: startup
- Deployment: SaaS
- Frameworks: FAIR, NIST, ISO 27001
- URL: https://www.squalify.io
- Details: https://grcplatforms.com/platforms/squalify

## StandardFusion
GRC platform for managing compliance, risk, and audits in one place.
- Category: Compliance Automation
- HQ: Vancouver, Canada
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, NIST CSF, GDPR, PCI DSS
- URL: https://www.standardfusion.com
- Details: https://grcplatforms.com/platforms/standardfusion

## Sumsub
Full-cycle identity verification and compliance platform for KYC, KYB, AML, and fraud prevention.
- Category: Financial Crime & AML
- HQ: London, United Kingdom
- Company size: mid-market
- Deployment: SaaS
- Frameworks: AML, KYC, KYB, GDPR
- URL: https://sumsub.com
- Details: https://grcplatforms.com/platforms/sumsub

## Supply Wisdom
Real-time third-party and location risk intelligence platform spanning financial, cyber, ESG and operational domains.
- Category: Third-Party Risk
- HQ: New York, New York, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, NIST CSF, GDPR
- URL: https://www.supplywisdom.com/
- Details: https://grcplatforms.com/platforms/supply-wisdom

## SureCloud
AI-powered GRC platform connecting risk, compliance, audit, and privacy.
- Category: Enterprise GRC Suites
- HQ: Reading, United Kingdom
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 27001, GDPR, PCI DSS, SOC 2, NIST CSF
- URL: https://www.surecloud.com
- Details: https://grcplatforms.com/platforms/surecloud

## TeamMate+
Internal audit management platform from Wolters Kluwer used by audit teams worldwide.
- Category: Audit Management
- HQ: Alphen aan den Rijn, Netherlands
- Company size: public
- Deployment: SaaS
- Frameworks: IIA Standards, SOX, COSO
- URL: https://www.wolterskluwer.com/en/solutions/teammate
- Details: https://grcplatforms.com/platforms/teammate

## Tenacy
French cyber GRC platform that maps, orchestrates, and manages cybersecurity across complex organizations.
- Category: Enterprise GRC Suites
- HQ: France
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, NIS2, GDPR, NIST, DORA
- URL: https://www.tenacy.io
- Details: https://grcplatforms.com/platforms/tenacy

## Thoropass
Compliance automation platform that pairs evidence collection and continuous monitoring with an in-house audit team.
- Category: Compliance Automation
- HQ: New York, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, NIST
- URL: https://www.thoropass.com
- Details: https://grcplatforms.com/platforms/thoropass

## Transcend
Real-time data governance and privacy platform that answers whether data can be used for a given purpose.
- Category: Privacy & Data Governance
- HQ: San Francisco, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: GDPR, CCPA, HIPAA
- URL: https://transcend.io
- Details: https://grcplatforms.com/platforms/transcend

## TrustArc
Privacy management platform for data privacy programs and assessments.
- Category: Privacy & Data Governance
- HQ: San Francisco, California, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: GDPR, CCPA, ISO 27001, APEC CBPR
- URL: https://trustarc.com
- Details: https://grcplatforms.com/platforms/trustarc

## TrustCloud
AI-native GRC and security assurance platform that ties compliance to day-to-day security operations.
- Category: Compliance Automation
- HQ: Boston, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, GDPR, HIPAA, NIST
- URL: https://www.trustcloud.ai
- Details: https://grcplatforms.com/platforms/trustcloud

## Trustero
AI-powered compliance-as-a-service platform that auto-collects and maps evidence to controls.
- Category: Compliance Automation
- HQ: San Francisco, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, HIPAA, GDPR
- URL: https://trustero.com
- Details: https://grcplatforms.com/platforms/trustero

## Unit21
No-code risk and compliance platform for transaction monitoring, fraud and case management.
- Category: Financial Crime & AML
- HQ: San Francisco, California, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: BSA/AML, FinCEN, KYC, OFAC
- URL: https://www.unit21.ai/
- Details: https://grcplatforms.com/platforms/unit21

## UpGuard
Attack-surface and third-party risk platform combining security ratings with vendor questionnaires.
- Category: Third-Party Risk
- HQ: Mountain View, California, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, NIST CSF, PCI DSS
- URL: https://www.upguard.com/
- Details: https://grcplatforms.com/platforms/upguard

## Usercentrics
Leading consent management platform for GDPR and global privacy compliance across web and apps.
- Category: Privacy & Data Governance
- HQ: Munich, Germany
- Company size: enterprise
- Deployment: SaaS
- Frameworks: GDPR, CCPA, IAB TCF, POPIA
- URL: https://usercentrics.com
- Details: https://grcplatforms.com/platforms/usercentrics

## Vanta
Trust management and compliance automation platform.
- Category: Compliance Automation
- HQ: San Francisco, California, USA
- Company size: enterprise
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, NIST CSF
- URL: https://www.vanta.com
- Details: https://grcplatforms.com/platforms/vanta

## VComply
Cloud GRC platform for policy, compliance, and risk management.
- Category: Integrated Risk Management
- HQ: Sunnyvale, California, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, HIPAA, GDPR, NIST CSF
- URL: https://www.v-comply.com
- Details: https://grcplatforms.com/platforms/vcomply

## VelocityEHS
Cloud EHS and ESG platform covering safety, chemical management and sustainability.
- Category: EHS, Quality & ESG
- HQ: Chicago, Illinois, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: ISO 14001, ISO 45001, OSHA, GRI
- URL: https://www.ehs.com/
- Details: https://grcplatforms.com/platforms/velocityehs

## Vendict
AI-native platform for automating security questionnaire responses and compliance reviews.
- Category: Third-Party Risk
- HQ: Israel
- Company size: startup
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, GDPR, HIPAA, NIST
- URL: https://vendict.com
- Details: https://grcplatforms.com/platforms/vendict

## Venminder
Third-party risk management platform with in-house vendor assessment and due-diligence services, now part of Ncontracts.
- Category: Third-Party Risk
- HQ: Elizabethtown, Kentucky, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: FFIEC, SOC 2, GLBA, ISO 27001
- URL: https://www.venminder.com/
- Details: https://grcplatforms.com/platforms/venminder

## Whistic
Vendor security assessment and profile-sharing network for third-party risk teams.
- Category: Third-Party Risk
- HQ: Pleasant Grove, Utah, USA
- Company size: startup
- Deployment: SaaS
- Frameworks: ISO 27001, SOC 2, CAIQ, NIST CSF
- URL: https://www.whistic.com/
- Details: https://grcplatforms.com/platforms/whistic

## Wolters Kluwer OneSumX
Regulatory reporting, risk and finance platform for banks and financial institutions.
- Category: Financial Crime & AML
- HQ: Alphen aan den Rijn, Netherlands
- Company size: public
- Deployment: Hybrid
- Frameworks: Basel III, IFRS, CRR, DORA
- URL: https://www.wolterskluwer.com/en/solutions/onesumx-for-finance-risk-and-regulatory-reporting
- Details: https://grcplatforms.com/platforms/wolters-kluwer-onesumx

## Workiva
Cloud platform for connected financial, ESG, audit, and risk reporting.
- Category: Audit Management
- HQ: Ames, Iowa, USA
- Company size: public
- Deployment: SaaS
- Frameworks: SOX, ESG Reporting, SEC Reporting, COSO
- URL: https://www.workiva.com
- Details: https://grcplatforms.com/platforms/workiva

## ZenGRC
GRC platform from RiskOptics for compliance, risk, and audit management.
- Category: Integrated Risk Management
- HQ: San Francisco, California, USA
- Company size: mid-market
- Deployment: SaaS
- Frameworks: SOC 2, ISO 27001, NIST CSF, PCI DSS, GDPR
- URL: https://www.zengrc.com
- Details: https://grcplatforms.com/platforms/zengrc