Frameworks and regimes named on listings, of listed platforms
n = 141141 of 141 name at least one frameworkAs of 2026-10-29
5 more frameworks are also named on 8 listings each; full list in the CSV.
Of listed platforms. Named on the listing; not a verified capability. Curated, not exhaustive.
Method: Distinct frameworks per listing after normalization: "NIS 2" counts as NIS2; NIST stays apart from NIST CSF; AML, BSA/AML and 6AMLD stay apart. Top 15 by listings naming them, ties broken alphabetically; the heatmap uses the first 10 of the same ranking.
CC BY 4.0, credit GRC Platforms (grcplatforms.com) with a link.
By category
Share of each category's listed platforms naming the framework (count in brackets). Scroll sideways on a small screen.
| Category (n) | ISO 27001 | GDPR | SOC 2 | NIST CSF | HIPAA | PCI DSS | SOX | CCPA | ISO 45001 | NIS2 |
|---|---|---|---|---|---|---|---|---|---|---|
| Compliance Automation (25) | 96% (24) | 96% (24) | 92% (23) | 24% (6) | 76% (19) | 60% (15) | 0% (0) | 4% (1) | 0% (0) | 20% (5) |
| Enterprise GRC Suites (22) | 91% (20) | 73% (16) | 23% (5) | 36% (8) | 5% (1) | 18% (4) | 59% (13) | 0% (0) | 9% (2) | 14% (3) |
| Integrated Risk Management (17) | 82% (14) | 47% (8) | 41% (7) | 53% (9) | 24% (4) | 24% (4) | 35% (6) | 0% (0) | 0% (0) | 0% (0) |
| Third-Party Risk (15) | 93% (14) | 67% (10) | 87% (13) | 60% (9) | 20% (3) | 13% (2) | 0% (0) | 0% (0) | 0% (0) | 0% (0) |
| Financial Crime & AML (14) | 0% (0) | 14% (2) | 0% (0) | 0% (0) | 0% (0) | 0% (0) | 0% (0) | 0% (0) | 0% (0) | 0% (0) |
| Privacy & Data Governance (13) | 46% (6) | 100% (13) | 23% (3) | 8% (1) | 15% (2) | 0% (0) | 0% (0) | 85% (11) | 0% (0) | 15% (2) |
| EHS, Quality & ESG (12) | 0% (0) | 0% (0) | 0% (0) | 0% (0) | 0% (0) | 0% (0) | 0% (0) | 0% (0) | 83% (10) | 0% (0) |
| Cyber Risk & CCM (8) | 88% (7) | 13% (1) | 38% (3) | 88% (7) | 25% (2) | 38% (3) | 0% (0) | 0% (0) | 0% (0) | 0% (0) |
| Audit Management (6) | 50% (3) | 0% (0) | 33% (2) | 17% (1) | 0% (0) | 17% (1) | 83% (5) | 0% (0) | 0% (0) | 0% (0) |
| Policy, Training & Awareness (6) | 33% (2) | 100% (6) | 0% (0) | 0% (0) | 0% (0) | 17% (1) | 17% (1) | 0% (0) | 0% (0) | 33% (2) |
| AI Governance (3) | 33% (1) | 0% (0) | 33% (1) | 0% (0) | 0% (0) | 0% (0) | 0% (0) | 0% (0) | 0% (0) | 0% (0) |
Numbers as a table
| Framework | Listings naming it | Share of listed |
|---|---|---|
| ISO 27001 | 91 | 65% |
| GDPR | 80 | 57% |
| SOC 2 | 57 | 40% |
| NIST CSF | 41 | 29% |
| HIPAA | 31 | 22% |
| PCI DSS | 30 | 21% |
| SOX | 25 | 18% |
| CCPA | 12 | 9% |
| ISO 45001 | 12 | 9% |
| NIS2 | 12 | 9% |
| ISO 31000 | 11 | 8% |
| DORA | 10 | 7% |
| ISO 14001 | 10 | 7% |
| BSA/AML | 9 | 6% |
| COSO | 8 | 6% |