Classification
What GRC software with AI must deliver in the institution.
A control gap has been found. Remediation needs a project, the project needs a budget, and senior management wants to see the progress. If every department records the same case anew, coordination alone costs time. This is where the question of an integrated platform begins.
GRC stands for governance, risk and compliance. Governance clarifies responsibility and management. Risk management deals with risks and their treatment. Compliance organises how applicable requirements are handled. GRC software brings together the associated information and work steps.
AI can make documents accessible, prepare assessments and support tasks. Whether this leads to better work is decided at the handovers: which finding is passed on? Who may change it? Where does management see the agreed measure and its current status?
„… es reicht nicht, dass man einmal ein Modell sauber entwickelt hat und getestet hat. Man muss es laufend überwachen, validieren und anpassen.““… it is not enough to have developed and tested a model properly once. You have to monitor, validate and adapt it continuously.”Payment & Banking / Alles Legal #125 · KI im Finanzsektor · 11.02.2026
To the passage from approx. 18:30 · Episode source · Verbatim excerpt
Context, paraphrased: Spengler explains that changed markets, customer behaviour and fraud patterns can impair the suitability of a previously tested model. A successful introduction therefore does not end the control. Her statement refers to the long-term use of AI in the financial sector.
For GRC selection: For AI functions in a GRC solution, this means: have the vendor show how model or data changes are detected, results are re-checked and corrections are documented. For control mappings, risk alerts and draft reports, it also matters who rejects an incorrect output and when the function is approved again.
The focus is on AI in GRC work: for example in mapping controls, evaluating evidence, preparing risk assessments and analysing regulatory changes. Specific vendor documentation is linked for this. Governance of AI on the other hand deals with the management of AI systems and models; this function alone does not evidence an AI assistant. The register separates the two tasks. Select providers with documented AI functions
The broad market map is classified from the perspective of German institutions. Not every offering is bank-specific; the article does not examine a complete replacement of a core banking system. The T-NEX Banking Platform is at the centre as an integrated product. T-NEX Compliance provides in-depth evidence of functions for one of its specialist areas.
Basis for decision-making
Five criteria for a fair platform comparison.
Our selection profile is an institution that wants to bring together risks, requirements, measures, projects, costs and reports . The criteria apply to every provider. Shared data or AI alone are not an exclusive feature of T-NEX.
Shared data and traceable origin
A case should remain recognisable across the modules involved. Check leading data sources, subject-matter definitions and traceability back to the original information.
Handovers between departments
A confirmed gap can become a measure, and a measure can become a project. Have the vendor show which data is carried over and which steps need to be set up.
Roles, approvals and limits of AI
Processing, subject-matter decision and independent review need appropriate rights. A rejected AI suggestion must be just as editable as an accurate one.
Reports for specific decisions
Senior management needs a reliable connection between risk, progress and costs. A report must make its data status and its underlying assessments recognisable.
Implementation and operation in-house
Compare connectivity, configuration, extensions, hosting, model access, support and export options for the same scope. Also check the internal maintenance effort.
You will find a detailed procurement list in our selection criteria for GRC software. The matching test case with six steps is described further below.
Subject-matter basis
Which primary sources underpin the selection criteria.
Four original sources make clear why data, responsibilities and reports should be considered together. The following review questions are our derivation for software selection. The sources do not assess any of the providers named here.
DORA: connecting responsibility and ICT risks
Regulation (EU) 2022/2554 deals with governance and organisation in Article 5, the ICT risk management framework in Article 6, functions, roles and dependencies in Article 8 and business continuity and recovery in Article 11. Scope, proportionality and the simplified framework under Article 16 must be taken into account. [17] [22]
Review question: Can the affected function, responsible role, risk and agreed measure be traced together?
BCBS 239: reports must support decisions
“Risk management reports should communicate information in a clear and concise manner. Reports should be easy to understand yet comprehensive enough to facilitate informed decision-making.”Basel Committee on Banking Supervision, BCBS 239, Principle 9, January 2013. Original, PDF page 19 [18]
Classification, paraphrased: Principle 9 combines comprehensibility with sufficient information for decisions. In the related explanations, the Committee calls for an appropriate mix of risk data, analysis and qualitative explanation, tailored to the recipients. For AI-supported reports, the resulting selection question is: can the responsible person see what a summary is based on, what limitations exist and what decision is pending?
The principles connect data aggregation with meaningful risk reporting. They are addressed to systemically important banks and are not a law that applies directly across the board to every German institution. Depending on the supervisory context, they also serve as a reference benchmark.
Review question: Does the report show not only a key figure but also its significance for the decision and the status of the associated measures?
ECB: data needs clear definitions and owners
“1. uniform data definitions and glossaries with clear ownership of data; 2. validation rules allowing specific values or a range of values;”ECB Banking Supervision, Guide on effective risk data aggregation and risk reporting, Section 3.4, May 2024. Original, PDF page 10 [19]
Classification, paraphrased: The first two points of the list require shared terms with assigned data ownership as well as rules for checking permissible values. In the same section, the ECB also deals with the documented origin and processing of data. For the GRC comparison, this makes it specifically verifiable whether modules understand a key figure in the same way, detect incorrect entries and make their origin traceable. AI evaluations should preserve these relationships.
The guide explains supervisory expectations, among other things regarding data architecture, origin and quality. It does not create new requirements and must be read in the respective supervisory context, taking proportionality into account.
Review question: Can the institution trace a report key figure back to its capture and name an owner for the data used?
IIA: collaboration needs clear responsibilities
The 2026 version of the Three Lines Model emphasises reliable information for oversight, defined responsibilities and independent assurance. The model is a governance framework. [20]
Review question: Can departments work on the same case while the independence of internal audit and the intended approvals are preserved?
Classification: These primary sources underpin our selection criteria. They do not evidence any certification or regulatory conformity of the T-NEX Banking Platform. What counts for that is the specific set-up and effective implementation in the institution.
T-NEX in detail
The T-NEX Banking Platform in detail.
The T-NEX Banking Platform is a modular product for joint processing of controlling, reporting, compliance, risk management, project portfolio and fraud detection. The selected modules use a shared data model as well as central AI, document and workflow functions. An institution can start with individual modules and extend the scope later. [16]
T-NEX Banking PlatformOne product · six selectable specialist modules
- ControllingCosts and planning
- ReportingReports and analyses
- ComplianceRequirements and controls
- Risk managementAssessment and measures
- Project portfolio (PPM)Initiatives and resources
- Fraud DetectionAnomalies and cases
Shared AI foundationChatbot · Document AI · Workflow automation
Shared data model, roles and rightsData sources and module handovers are set up for the institution.
The connection is preserved across module boundaries.
The platform description shows, for example, how a budget deviation from controlling that has been assessed as risk-relevant feeds into risk processing and then into reporting. Compliance findings can likewise trigger risk processing. Required initiatives are managed in the project portfolio; reports connect progress, costs and risks. Triggers, data handovers and approvals are set up on the basis of the institution's processes. [16]
This addresses a broader problem than document review alone. A decision on remediating a gap often affects several departments. It is precisely this transition that should become visible in the demonstration.
The shared AI works in the subject-matter context.
Chatbot, document AI and workflow support access the information and functions released in each case. Model access, permissible data and actions are defined centrally. The designated roles make the subject-matter decisions. Existing systems can be connected via agreed data paths. [16]
„Specifically for GRC, we still need humans to interpret context, make judgment calls, make ethical decisions that AI alone can't fully manage …““Specifically for GRC, we still need humans to interpret context, make judgment calls, make ethical decisions that AI alone can't fully manage …”GRC & Me · AI-Driven Governance: 2026 Insights · 18.02.2026
To the passage from approx. 11:38 · Episode source · Verbatim excerpt
Context, paraphrased: Panama justifies the continuing role of humans with the interpretation of context, professional judgement and ethical consideration. The subsequent conversation is about organisations themselves determining which tasks they delegate to AI and how much control they retain in doing so. The statement comes from the corporate podcast of the GRC provider LogicGate.
For GRC selection: For the demonstration, a general reference to human approval is therefore not sufficient. Check whether the responsible person sees the evidence, can change or reject an AI suggestion and whether the decision and justification are preserved in the audit trail. This is a selection question for every provider and not a recommendation of T-NEX by LogicGate.
Compliance makes part of the approach specifically verifiable.
For requirements work, a product description and a detailed manual are available. The documented process of T-NEX Compliance ranges from the rulebook through assessment and measures to the audit report. Clauses can be checked alongside the source; editing and approving can be authorised differently. This evidence deepens one specialist area of the platform. [1] [2]
Product, functional design and implementation belong together.
T-NEX combines the software offering with GRC and IT consulting. Andreas Unruh is responsible for architecture and development, Christoph Gembruch for subject-matter consulting and implementation. The offering includes translating requirements into a functional design and the agreed technical implementation scope. [3] [4] [5]
GRC becomes part of ongoing bank management.
In the T-NEX Banking Platform, risks, requirements, initiatives, costs and reports are in the same subject-matter context. An institution can start with selected modules and gradually expand collaboration between departments. Functional design, data connectivity and agreed handovers are therefore part of the implementation from the outset. [16] [3]
What the evidence covers: The platform description and module documentation document the structure and individual functions. They are not evidence of a productive customer installation with all six modules. The risk management product page labels the range of functions it shows as a demonstrator. For procurement, scope of delivery, maturity and acceptance must be clarified for each module. [21]
Our own selection guide
T-NEX integration review: six steps from finding to report.
An editorial selection guide by Andreas Unruh and Christoph Gembruch, T-NEX. The process can be checked with every provider under consideration.
An integrated GRC platform should make a case traceable across the required specialist modules: with shared data origin, a responsible decision and a report status that can be derived from it.
For selection, Andreas Unruh and Christoph Gembruch propose the following six review steps. They translate the criteria explained above into a practical acceptance session. This is our editorial review method, not the results of a product test already carried out or a certification standard.
Proposed test case · not a customer case
From a fraud alert to a decision on a measure
An institution investigates an anomaly. The specialist team assesses the facts and a possible control gap. If action is required, it decides on a measure. If this becomes a project, planning and budget are added. In reporting, the connection with the original case should remain recognisable.
The case involves all six specialist areas. Each provider must show which handovers actually form part of the offering for the chosen configuration. A fraud alert alone does not prove fraud.
| Review step | Show in the demonstration | Record as result |
|---|---|---|
| 1. Data reference | Call up the fraud alert in risk processing and trace its origin. | Data fields taken over, leading source and remaining multiple maintenance. |
| 2. Assessment | Link the finding to a requirement or control. Correct an unsuitable AI suggestion. | Connection between source, suggestion, correction and responsible decision. |
| 3. Handover | Create a measure or project with an owner and deadline from a confirmed need for action. | Information transferred; automatic, manual and approval-requiring steps. |
| 4. Planning and costs | Relate project and controlling to the same measure. Change deadline or budget. | Updated follow-on information; necessary configuration and additional interfaces. |
| 5. Roles and AI limits | Switch between processing and approval role. Check unauthorised access and rejected AI mapping. | Authorisation matrix and behaviour on approval, rejection and renewed processing. |
| 6. Reporting | Show the case in the report and go back to the underlying decision. | Report or export with data status, origin and openly disclosed remaining work. |
Our own selection system by Andreas Unruh and Christoph Gembruch, T-NEX, as of 14.10.2026. Basis: the subject-matter criteria from DORA, BCBS 239, ECB and IIA as well as the product descriptions examined. To the derivation · Direct link to this selection guide
A shared menu does not yet evidence process integration. The platform promise becomes reliable through demonstrated handovers and documented results. The test case shows which functions already exist, which must be set up and which work remains in the institution.
„Die Existenz eines Plans ist nur der erste Schritt. Entscheidend ist, ob der Plan funktioniert, wenn es darauf ankommt.““The existence of a plan is only the first step. What matters is whether the plan works when it counts.”Payment & Banking / Alles Legal #104 · BCM unter DORA · 09.07.2025
To the passage from approx. 13:12 · Episode source · Verbatim excerpt
Context, paraphrased: Spengler talks about emergency and recovery plans. In the subsequent passage, she explains that exercises must also test the organisation under pressure: the availability of those involved, decisions, access to information and communication. A system that is technically available again does not by itself evidence a restored business process.
For GRC selection: Our software test case transfers this idea to a different task: demonstrate a complete case with role changes, evidence and an incorrect AI suggestion. Document where the process stalls and who has to intervene. Such a product demonstration does not replace a BCM test or a regulatory audit.
Go through the test case with T-NEX
Bring a case from your institution. We will clarify modules, handovers and acceptance criteria of the Banking Platform.
Discuss a demonstrationProcurement
Implementation and costs of a GRC platform.
The T-NEX Banking Platform can be started with the required modules, for example Compliance and Risk Management or Controlling and Reporting. Data sources, roles and handovers are set up to suit the starting point and extended as it is expanded. [16]
Give each provider the same test case, the same data and the same roles. Record how much configuration the demonstration requires. Also record how many AI suggestions have to be corrected and what work arises in data migration, role maintenance and reports. Such observations form a reliable basis for the economic comparison.
„Und noch mal, es geht nicht nur darum, Risiken zu erkennen, sondern darum, sie laufend zu bewerten, zu steuern und resilient damit umzugehen.““And once again, it is not just about identifying risks, but about continuously assessing them, managing them and dealing with them resiliently.”Payment & Banking / Alles Legal #102 · Digitale Resilienz ist Chefsache · 25.06.2025
To the passage from approx. 08:41 · Episode source · Verbatim excerpt
Context, paraphrased: In the preceding section, Spengler names key figures, warning thresholds and regular reports as components of ongoing risk management. Changes to software, service providers or the threat situation should be reflected in the assessment. The passage thus describes a recurring work process and not the one-off completion of a report.
For GRC selection: With GRC software, check how new information triggers a reassessment, a task and a traceable decision. With AI support, it should also be visible which assessment was suggested, corrected on subject-matter grounds and finally adopted. Responsibilities and processing status must remain recognisable throughout the entire process.
The price includes the work in-house.
Compare licences, implementation, migration, interfaces, modules, AI usage, operation and internal support over the same period. Have extensions shown separately. The shared platform approach can reduce coordination effort; a specific saving must be measured against your own process.
„… dann muss man, wie gesagt, schon auch nicht nur das Budget dafür holen, sondern auch die Leute und die Zeit für sich nehmen.““… then, as I said, you really have to not only secure the budget for it, but also take the people and the time for it.”Cybersecurity ist Chefsache · Revolution oder Overkill? Die Wahrheit über GRC-Tools · 27.01.2025
To the passage from approx. 08:03 · Episode source · Verbatim excerpt
Context, paraphrased: Zhekova regards GRC as a long-term task. Beforehand, she talks about available resources, employees who are familiar with the tool or appropriately trained, and the time needed for working with the system. Buying a licence does not automatically create these prerequisites.
For GRC selection: In addition to implementation and operation, therefore also budget for data maintenance, training, subject-matter control of AI results and later adjustments. Have the provider break down which work its service covers and which remains permanently in the institution.
Clarify hosting, storage and processing locations, model providers, access, retention, recovery and export contractually. A German provider alone does not guarantee any particular data storage. Also check additionally required disciplines such as internal audit, third-party management or quantitative model risk management separately. The designation risk management module does not yet evidence every method in this breadth.
All 647 GRC providers with functions, AI classification and sources.
Platform breadth and specialist task
A broad suite and a specialist tool answer different procurement questions. The platform group describes the cross-functional scope; ten specialist areas show the respective entry point. The classification assesses neither quality nor the entire range of functions.
One provider, one entry
Product names and known former brands are listed under the respective provider. AuditBoard, for example, is listed as Optro; CONTECHNET has been merged into i-doit GRC Suite+. Additional fields of application are given as keywords. They do not create further provider entries.
What type of solution are you looking for?
Connect several areas: start with the platforms. Explore a specific specialist task in depth: go directly to the corresponding segment. For bank management, a further question arises: do finding, measure, project, costs and report remain connected? This connection is shown in the section on the T-NEX Banking Platform.
T-NEX GRC provider register: 647 providers or provider groups, eleven categories, as of 15.10.2026. HTML, CSV, JSON and market map contain the same provider inventory. Documented countries are in the data set with their location source; unchecked information is explicitly left open.
Download CSV (German) · Download JSON (German) · Counting method and limits of evidence
The assignment describes the offering considered, not all of the company's products. AI information names specific functions or limits of the public documentation. Scope of delivery, data storage and regional availability must be checked for each offering. Download provider overview as CSV (German).
To the table of contents647 providers
569 entries with specific AI functions, 6 with exclusively announced functions or functions in development and 71 without specific evidence in the sources checked. For one entry, the source check remains pending. Missing evidence does not mean that the provider has no AI functions. Vendor documentation does not replace a product test. Licence, pilot status and availability are listed with the provider. 347 European locations are documented. Unchecked locations are hidden in a regional selection; this does not mean they are regarded as non-European. The location is not evidence of ownership structure, hosting or regulatory suitability.
There is no entry for this combination. Try another keyword or reset the filters.
Cross-functional GRC platforms and suites
192 entries
| Provider / product | Documented focus | AI functions and classification |
|---|---|---|
| T-NEX Banking PlatformTo the detailed profile Headquarters: Germany [243]Provider T-NEX GmbH; Horn-Bad Meinberg, Germany; HRB 11526 Amtsgericht Lemgo. Headquarters documented, no statement on hosting or owners. | Controlling, reporting, compliance, risk, PPM and fraud detection in the Banking Platform. | Shared AI basis for chatbot, documents and workflows; handovers are set up. For T-NEX Compliance, requirement derivation, AI-supported assessment, draft action plans and audit report summaries are documented. The risk management product page shows a demonstrator; agree the platform scope.[16] [21] [1] [2]Specific AI functions documented Requirement derivation · Requirement and gap assessment · Draft action plans · Audit report summary AI evidence: [1] [2] [21]Compliance: documented functional status 15.23.0 of 30 August 2026; language model access, background processing, roles and approvals must be set up. Installation and operating scope are agreed per project. AI Risk Manager: risk and scenario functions are shown separately as a demonstrator; no validated quantitative stress test. Source check: 2026-10-14 |
| 360factors Predict360To the detailed profile | Platform for risks, controls, compliance testing, regulatory changes, policies, complaints and audit findings for financial organisations. | Ask Kaia researches regulatory requirements with sources, drafts and compares policies and supports advertising and credit data reviews. The shared regulatory knowledge base focuses on US federal and state law.[29] [30]Specific AI functions documented Regulatory research with sources · Policy drafting and comparison · Review of advertising and credit data AI evidence: [30]Compliance agents available according to the vendor; access depends on plan and add-on modules. Lending and Third-Party Intelligence are announced for Q4 2026 and not counted as generally available. No product test. Source check: 2026-10-14 |
| AcunaAcuna GRC / Aiko+Headquarters: Switzerland [246]AcunaGRC; Aiko+; Abilene Group SA; Abilene Advisors | Acuna bundles requirement mapping, operational controls, recurring tasks and audit evidence in a shared GRC workspace. Extensions support supplier reviews and data protection. Aiko+ uses the organisation's own programme data for queries and prepares assessments and mapping suggestions. Responsible persons review these results and confirm changes before they enter the regulated compliance process. | Aiko+ answers questions from the organisation's own GRC data, pre-assesses supplier responses including PDF evidence and suggests mappings between requirements and controls with confidence scores. Users confirm the suggestions.[244] [245] [246] [247]Specific AI functions documented Answer compliance questions using own GRC data · Pre-assess supplier responses and PDF evidence · Map requirements and controls with confidence scores AI evidence: [245] [244]Aiko+ module documented by the vendor; organisation-wide activation, function permissions and monthly usage budgets. Suggestions require human confirmation. No product test. Source check: 2026-10-14 |
| AdaptiveGRCHeadquarters: Poland [248]AdaptiveGRC is a solution from C&F S.A.; its own contact page explicitly names its headquarters in Warsaw, Poland. Geography checked on 15.10.2026; no inference of hosting or owners from the headquarters. | Modular GRC platform with risk and control assessments, internal audit, compliance, supplier management, BCM and data protection. | The AI Assistant summarises audit reports, policies and procedures, translates documents and extracts key information. Audit decisions are not made automatically as a result.[31] [32] [248] [249]Specific AI functions documented Summarise audit reports · Translate compliance documents · Extract key information from policies AI evidence: [32]Documented by the vendor; no product test. Source check: 2026-10-14 |
| AdmiralOneAdmiralOne / Compliance AIHeadquarters: Chile [251]Admiral Compliance SpA, RUT 77.566.761-3, Ahumada 341, Piso 8, Santiago de Chile.Admiral Compliance SpA; Admiral One; Compliance AI | GRC software for risk matrices, whistleblowing channel, due diligence, policies and audits. Focus on compliance programmes and requirements in Chile. | Compliance AI recommends industry-specific risks and controls, classifies reports and, after violations, drafts action plans for review and approval. The assistant also summarises relevant rulebooks.[250] [251] [252]Specific AI functions documented Suggest risks and controls · Classify reports · Draft action plans for approval AI evidence: [250]Commercial SaaS offering with demo; Compliance AI described as an integrated module. Specific licensing and coverage must be confirmed in the offer. Source check: 2026-10-15 |
| ADOGRCHeadquarters: Austria [253]BOC Products & Services AG; explicit headquarters Vienna, Austria; FN 262953x. | ADOGRC connects risk, ICS, compliance, audit and other disciplines with a compliance library and role-based workflows. | ADOGRC documents natural-language questions to GRC models and saved queries via MCP. AI support for process drafts and analyses comes from the integrated ADONIS foundation.[33] [34]Specific AI functions documented Draft process models from natural language · Query GRC objects and properties · Run saved queries via AI assistant AI evidence: [34]MCP connection from version 14.2; own agent, activation and usually a separate LLM subscription required. Not tested in practice. Source check: 2026-10-14 |
| AiBizzAppsGRCxAIHeadquarters: United Kingdom [254]Provider names AiBizzApps Limited, Company No. 16632419, registered in England and Wales. Country assignment follows the legal entity.AiBizzApps Limited; AIBIZZAPPS LIMITED; GRCxAI | GRCxAI connects risk management, controls, audits, supplier reviews, documents and other compliance tasks. The platform supports shared standards and documented approvals in one workspace. | The published list of AI functions names rulebook questions, draft policies and reports, risk summaries and the extraction of risk suggestions from assessments. For third parties, AI compares uploaded evidence with the answers given; results are reviewed by humans.[254] [255] [256]Specific AI functions documented Extract risks from assessments · Review supplier evidence · Draft policies · Prepare compliance reports · Answer rulebook questions AI evidence: [255]Commercial platform with demo. AI list explicitly distinguishes language model functions from other calculations. The statement mentions separate, ongoing work on labelling exported AI content. Source check: 2026-10-15 |
| AKARIONAKARION GRC CloudHeadquarters: Austria [258]Operating company Akarion GmbH, Linz, FN 480226 s, is the media owner and the service company named in the legal notice. In addition, Akarion AG in Munich as parent company; country assignment here explicitly follows the operating GmbH, not the group headquarters. | Combines information security, business continuity, audits, data protection and whistleblowing systems. | Smart Content AI or AKAI drafts and links GRC records, including threats, risks and measures based on the organisational context.[257]Specific AI functions documented Risk and measure suggestions · Create and optimise GRC texts · Link assets, processes and risks AI evidence: [257]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| Allgress GRC Platform | Risks, compliance and audits with a central evidence repository; control evidence can be mapped to several frameworks. | Rixena uses AI to evaluate regulatory changes, compare uploaded policies and prepare measures against identified gaps.[35] [36]Specific AI functions documented Analyse regulatory changes · Identify policy gaps · Prepare remediation measures AI evidence: [36]Documented by the vendor; no product test. Source check: 2026-10-14 |
| AluuraAluura GRC / Aluura AIHeadquarters: USA [260]Terms of use name Aluura LLC with principal business address in Katy, Texas, USA.Aluura LLC; Aluura, LLC | Aluura manages compliance, risks, controls, policies and audit projects in a cloud application. Control tests, evidence and policy versions can be edited collaboratively. | Aluura AI answers questions from the organisation's own GRC data, drafts control test procedures and risk assessments and suggests mapping evidence to controls together with a justification. Policies and control descriptions are created as editable drafts.[259] [260]Specific AI functions documented Draft control test procedures · Map evidence to controls with justification · Prepare risks and mitigation measures AI evidence: [259]According to the vendor, AI is included in the subscriptions; usage can be limited. Registration and trial access are offered. Drafts require subject-matter review. Source check: 2026-10-15 |
| Anecdotes | Connects policies, risks, controls and evidence with shared data, approvals and measures. Dedicated applications support governance, ERM, compliance and third-party risk. | Productised agents structure document evidence, complete risk fields and create findings from audit and penetration test reports. Agent templates and MCP orchestrations are listed separately from these.[37] [38]Specific AI functions documented Structure and summarise document evidence · Complete risk fields and control relationships · Create findings and measures from audit reports AI evidence: [38]According to the vendor, integrated agents can be used after activation; templates and external MCP orchestrations separate. Not tested in practice. Source check: 2026-10-14 |
| ArcherTo the detailed profile | Configurable risk registers, controls, compliance and audit trails on a GRC platform. | Archer Evolv Risk describes AI-supported risk assessments from internal and external signals. Assessments can be traced back to sources and processed further in Archer; uncertain results are routed for human review.[39] [40]Specific AI functions documented AI-supported risk assessment · Consolidation of risk signals · Source-referenced preparation of risk findings AI evidence: [40]Documented by the vendor; no product test. Source check: 2026-10-14 |
| ArengiArengiBoxHeadquarters: France [262]ArengiBox | ArengiBox connects risk mapping, internal controls, compliance assessments and tracking of audit recommendations. The platform developed by Arengi supports aggregation across companies, processes and projects as well as questionnaires, for example on anti-corruption and data protection. In addition, the vendor offers consulting on risk management. | The product pages checked do not document any specific AI work step within ArengiBox. General articles on the use of generative AI in risk management are not product evidence.[261] [262] [263] [264] [265]Not specifically documented in the source check Product pages read and vendor domains specifically searched for intelligence artificielle/IA. No evidence does not mean that AI is absent. Sources checked: [261] [264] [265]No specific available AI support documented in the source check; no product test. Source check: 2026-10-14 |
| ART25ART25 ECPEuropean orientation is vendor information. Not yet included in the country register without sufficiently documented headquarters of the contracting entity. | ART25 ECP connects risks, compliance, data protection, security and AI governance. Measures, evidence and decisions are managed in the respective governance context. | ART25 describes AI and automation for reconstructing relationships, identifying gaps and supporting analyses. Responsibility for decisions remains with humans.[266] [267] [268]Specific AI functions documented Identify governance gaps · Prepare relationships for GRC analyses AI evidence: [266] [267]Demo on request; publicly described functions, no product test. Check specific modules and operational maturity contractually. Source check: 2026-10-15 |
| AryzaAryza GRC and RiskLogix aCCelerateRiskLogix part of Aryza since 3 April 2025. | The acquired RiskLogix platform adds risk and control assessments, risk indicators, incidents, compliance and internal audit to Aryza. | The GRC product sources checked do not document any specific AI work step. AI offerings for credit and collection processes are not transferred across the board to Aryza GRC.[269] [270] [271]Not specifically documented in the source check GRC product page read and official domain searched for GRC, AI-powered and RiskLogix. General AI strategy and the Webio acquisition are not evidence of GRC functions. Sources checked: [269] [270] [271]AI availability for GRC not specifically documented in the source check. Source check: 2026-10-14 |
| Ascent Business TechnologyautoResilienceHeadquarters: Singapore [274]Section 2.1 names Atc Finetr Software Pte. Ltd., registration 201720078C, with headquarters in Singapore. The introduction additionally uses Ascent Business Technology Pte. Ltd.; confirm the specific contracting company during procurement.autoResilience; AutoBCM; Ascent Risk & Resilience Software; Atc Finetr Software Pte. Ltd.; Ascent Business Technology Pte. Ltd. | autoResilience connects enterprise risks, compliance, policies, audit and third-party risk with business continuity and operational resilience. The platform is offered by Ascent Business Technology for regulated organisations. | In policy management, AI supports the creation of drafts. It monitors regulatory changes, flags outdated policies and suggests revisions. The suggestions are embedded in versioning, collaboration and approval processes.[272] [273] [274]Specific AI functions documented Create policy drafts · Identify outdated policies · Suggest revisions following regulatory changes AI evidence: [272]Commercial enterprise offering with individual demo and contract offer. Specific module and AI scope must be agreed; no product test of our own. Source check: 2026-10-15 |
| AssurePlusGRC platformHeadquarters: Australia [279]Australian ABN register: TECHFORCE SERVICES PTY LTD, ABN 40 607 989 293, business name ASSUREPLUS KOMPLY CARE. Vendor post assigns the product to TechForce.TechForce Services; TECHFORCE SERVICES PTY LTD; ASSUREPLUS KOMPLY CARE | GRC software for risks, compliance, incidents, audits, suppliers and resilience. One focus is on regulated Australian companies and care providers. | The vendor describes AI that reads regulatory texts, maps new obligations to existing controls and pre-sorts incident reports by severity and patterns. The detailed incident page also describes rule-based processes; not every automation is therefore to be understood as AI.[275] [276] [277] [278] [279]Specific AI functions documented Evaluate regulatory documents · Map obligations to controls · Pre-sort incident reports AI evidence: [276]Commercial, configurable offering with demo. Detailed AI evidence comes mainly from vendor product comparisons; check scope in the specific offer. Source check: 2026-10-15 |
| AthereonAthereon GRCHeadquarters: Germany [281]Athereon GRC GmbH; Innovationsring 7–9, Saarbrücken; HRB 104798, Amtsgericht Saarbrücken. Geography checked on 15.10.2026; no inference of hosting or owners from the headquarters. | Connects risks, requirements, assets and measures in shared workflows. LAiKA supports the creation of GRC objects and the evaluation of policies. | LAiKA supports the creation of GRC objects, analyses policies for gaps and checks supplier responses for deviations from requirements.[280] [281]Specific AI functions documented Risk and document drafts · Policy and gap analysis · Review supplier questionnaires AI evidence: [280]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| Atlant SecurityVenveraHeadquarters: Bulgaria [283]Venvera; Atlant Security EOOD | Venvera bundles risk registers, control evidence, policies, incidents and supplier assessments. Atlant Security's platform maps shared controls to several frameworks and presents the processing status for management. AI functions supplement policy drafts and the review of submitted evidence. | Venvera describes AI for policy drafts, explanations of control gaps and the review of submitted evidence.[282] [283] [284]Specific AI functions documented Draft policies · Explain control gaps · Review evidence AI evidence: [282]Documented by the vendor; customer-selected model provider and own API key required; no product test. Source check: 2026-10-14 |
| AuditCue | Connects risks, controls, audit planning and evidence. Dedicated workflows for internal and external auditors support assessments, queries, reports and approvals. | The vendor page for auditors explicitly mentions AI-supported preparation of audit reports. Further AI work steps or technical details are not specifically documented there.[41] [42] [43]Specific AI functions documented Prepare audit reports with AI AI evidence: [43]Documented by the vendor; model, package and approval scope not specified. Not tested in practice. Source check: 2026-10-14 |
| AuditrunnerAuditrunner GRCGRCrunner; Auditrunner | Connects process- and risk-oriented internal audits with other configurable GRC applications. Findings, deviations and measures can be tracked across modules. | The product and technology pages checked document audit and GRC automation, but no sufficiently specifically described AI work step. General customer statements about added AI components are not sufficient for the AI filter.[285] [286] [287]Not specifically documented in the source check Vendor pages and targeted domain search checked; no evidence that AI is absent overall. Sources checked: [285] [286] [287]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| AugIx SystemAuditDexHeadquarters: India [290]AugIx System LLP, Noida, Uttar Pradesh; LLPIN ACR-1200.AugIx System LLP; AUDITDEX; AuditWork | GRC platform for audit management, risk assessment, evidence requests and regulatory reports. Focus is on companies with several rulebooks and Indian compliance requirements. | According to the product FAQ, AI models detect anomalies and control failures in ongoing data sets, prioritise findings by risk severity and generate early warning signals for further review.[288] [289] [290]Specific AI functions documented Detect anomalies for audits · Reveal control failures · Prioritise findings by risk AI evidence: [289]Ops Audit, Risk Assessment and DRL Engine explicitly offered as early access; structured pilot for suitable companies. DPDPA module only announced with an older publication date, current release not confirmed. Source check: 2026-10-15 |
| Avalon Technology SolutionsAvalon GRCHeadquarters: Switzerland [293]Avalon Technology Solutions GmbH; Avalon GRC; Classeon | Avalon GRC connects processes, assets, risks, obligations and responsibilities in a shared model. The modular platform supports, among other things, information security, IT risks, compliance, operational risks and third-party management. Assessments, approvals and processing histories are documented. AI support can be integrated into selected processes; subject-matter owners review and adopt the suggested results. | Documented are the extraction of relevant information with references, prepared assessments including justification as well as text and report drafts from the case context. As an example, the provider shows a protection requirements assessment by confidentiality, integrity and availability. Suggestions can be accepted, edited or discarded.[291] [292] [293]Specific AI functions documented Extract information and references from documents · Prepare protection requirements assessments · Create justifications and draft reports AI evidence: [292]Documented by the vendor; not tested in practice Source check: 2026-10-14 |
| AxcelasiaAXCELRADARAxcelasia Roots; former names: Tricor Roots | Malaysian GRC software offering for enterprise risks, internal audits and operational risks. Includes control self-assessments, risk indicators, loss events as well as compliance, incident and continuity management. | AxcelRadar IAMS describes AI-supported identification and prioritisation of audit risks as well as drafts for findings, observations and audit reports.[294] [295]Specific AI functions documented Identify and prioritise audit risks · Draft audit findings · Formulate audit reports AI evidence: [295]Documented by the vendor; no product test. Source check: 2026-10-14 |
| Axiom GRC (CoreStream GRC)CoreStream GRCHeadquarters: United Kingdom [299]CoreStream GRC Ltd, 20 Grosvenor Place, London, SW1X 7HN; specific provider entity of the Axiom group. ICO registration ZA154741 is stated.CoreStream GRC; independent of core-grc.com; Axiom GRC; VinciWorks; Barbour EHS; Vantify | Configurable platform for risks, controls, compliance and audits. Enterprise risks can be linked with strategic objectives and data from other enterprise systems. | The optional AI Co-Pilot completes risk descriptions, checks the quality of risks and controls and answers questions on the basis of internal policies. Documents can also be used to fill in due diligence questionnaires.[296] [297] [298] [299] [300]Specific AI functions documented Complete risk descriptions · Review control documentation · Answer policy questions with sources · Pre-fill due diligence questionnaires AI evidence: [300]Optional AI integration and additional functions; customer-owned or preferred AI providers possible. Not tested in practice. Source check: 2026-10-14 |
| AxovernAxovern / Axo AIThe company page identifies Axovern Inc., but only names countries served and hosting regions. No headquarters country is derived from this.Axovern Inc.; Axo; Axo AI | Axovern manages controls, evidence, policies, risks, suppliers and audit collaboration in a linked workspace. A Trust Center and functions for MSPs supplement continuous compliance monitoring. | Axo examines data in the current workspace, answers questions with reference to evidence and drafts security questionnaire answers as well as changes to controls. Suggestions are reviewed in a separate approval queue; the read-only agent tools do not change records independently.[301] [302] [303]Specific AI functions documented Investigate control failures in the programme data · Draft questionnaire answers with sources · Prepare control changes for approval AI evidence: [301]According to the company page, commercially available since June 2026, with platform sign-up and demo. Axo is optional and depends on configuration; no product test of our own. Source check: 2026-10-15 |
| BarnOwlBarnOwl Risk, Compliance & AuditBarnOwl; IDI Technology | Connects risk, regulatory compliance and internal audit in software that can be introduced modularly. Shared risk data, obligations and audit processes support several departments. | The product and vendor articles checked did not document any specifically available AI function within BarnOwl. The articles describe possible AI evaluations and the benefit of structured governance data.[304] [305] [306]Not specifically documented in the source check Product scope checked and targeted vendor search carried out. Future examples are not evidence of availability; no statement that AI is generally absent. Sources checked: [304] [305] [306]No specific AI work step documented in the source check; no statement about the absence of AI. Source check: 2026-10-14 |
| BasenormBasenorm / AskNormanHeadquarters: Netherlands [310]Basenorm B.V.; AskNorman; AskNorman AI | Basenorm brings together controls, risks, evidence and responsibilities in a shared library. Several standards can access the same controls while relationships and audit information are preserved. AskNorman supports the evaluation of this data in the product or via connected AI assistants. Subject-matter owners assess evidence, risk treatment and suggested next steps. | AskNorman answers questions about control and evidence gaps, explains relationships between risks and controls and prepares status summaries and follow-up tasks. Use in the product or via MCP with external AI assistants such as ChatGPT or Claude.[307] [308] [309] [310] [311]Specific AI functions documented Query control and evidence gaps · Explain relationships between risks and controls · Prepare compliance status and follow-up tasks AI evidence: [308] [309]Software documented by the vendor; model use with plan-dependent token budget or own API key. MCP connections depend on permissions and configuration. No product test. Source check: 2026-10-14 |
| BCMLogicBCMLogic Next; AI GRC ExpertHeadquarters: Poland [316]Vendor contact details name BCMLogic Solutions Sp. z o.o. in Warsaw, Poland; current own LinkedIn company profile confirms Warsaw. The exact street address was not re-checked in the register.BCMLogic Solutions Sp. z o.o.; BCMLogic Next; BCMLogic One; AI GRC Expert | BCMLogic connects enterprise risks, continuity, incidents, supplier risks and compliance. The platform is aimed particularly at regulated organisations and supports joint processing of risk registers, BIA, controls and evidence. | The AI GRC Expert analyses policies, contracts and questionnaires for regulatory gaps, supports risk assessments and creates BIA drafts with source references. Described agents prepare supplier assessments and detect conspicuous risk indicators; results are intended for review.[312] [313] [314] [315] [316] [317]Specific AI functions documented Analyse regulatory gaps · Support risk assessments · Draft BIA · Prepare supplier assessments · Check risk indicators for anomalies AI evidence: [313]Current offering page describes an available online demo environment; the company page still names the launch of Next in the third quarter of 2026. Confirm individual agents and expansion stages in the specific offer. Own LLM connection is described as an option. Source check: 2026-10-15 |
| BCT Digital / Bahwan CyberTekrt360 GRCBCT Digital; Bahwan CyberTek; rt360 | Supports risk identification, control effectiveness testing and related workflows. Reports and dashboards bring together risk types and business areas. | For risk assessment within the rt360 GRC suite, BCT Digital explicitly describes an alternative AI/ML approach. This serves to score risks and assign values to key risks, residual risks and control effectiveness. A generative assistant is not thereby documented.[318] [319] [320]Specific AI functions documented Assess risks with AI/ML-supported scoring · Quantify key and residual risks as well as control effectiveness AI evidence: [320]Documented as a function of the rt360 GRC suite offered. Model choice, training and evaluation data and activation of the alternative AI/ML scoring must be clarified before procurement; no publicly verified model quality or product validation. Source check: 2026-10-15 |
| BizzdesignHOPEX / Enterprise Transformation SuiteTo the detailed profile Headquarters: Netherlands [323]Bizzdesign B.V.; Capitool 15, Enschede, Netherlands; KVK 08204584. The group privacy policy names this company and its affiliated companies. Geography checked on 15.10.2026; no inference of hosting or owners from the headquarters. | Risk and compliance management in the context of business processes, data, applications and enterprise architecture. | Bizzdesign connects external AI assistants to the architecture repository via MCP. Risk and continuity owners can query risk data in natural language and trace the effects of outages, supplier problems or regulatory changes across processes and applications.[44] [45] [46] [321] [322] [323]Specific AI functions documented Natural-language query of risk data · Analysis of dependencies in operational disruptions · Preparation of the impact of regulatory changes AI evidence: [321] [322]MCP connection documented by the vendor; external AI client and configured repository access required. Check product and licence scope; no blanket assignment to all HOPEX modules. No product test. Source check: 2026-10-14 |
| Bridge GRCBridge GRC; Compliance CopilotHeadquarters: Saudi Arabia [325]Vendor names Riyadh as headquarters. Contact and terms and conditions refer to graxoconsulting.com; clarify the exact legal contracting entity before procurement, no second provider count.Bridge GRC; Graxo Consulting (contact assignment) | Bridge GRC offers control and evidence management, data protection registers and audits against Saudi Arabian and international frameworks. Compliance Copilot analyses uploaded policies and related documents. | The Copilot maps document passages to controls, assesses their coverage and suggests measures for gaps. It provides evidence references, summaries and answers to document questions; users can change assessments and export reports.[324] [325] [326]Specific AI functions documented Map documents to controls · Assess control coverage and gaps · Answer evidence-related questions AI evidence: [324]Free trial with limited credit allowance and paid credit packages offered. Coverage, confidence values and measures are vendor representations and must be validated on subject-matter grounds. Source check: 2026-10-15 |
| BrillnetPulsar GRCHeadquarters: Poland [329]Terms of use name Brillnet Piotr Adamski with an address in Łódź, Poland.Brillnet Piotr Adamski; Pulsar GRC; pulsar-grc.pl | Pulsar GRC links requirements, control tests, evidence, risks, audits and corrective measures. Responsibilities and decisions remain documented on the respective work item. | On request, the AI creates draft descriptions, summaries and structures for GRC material. Users check content, sources and gaps and can adapt, accept or discard the suggestions.[327] [328] [329]Specific AI functions documented Draft GRC descriptions · Summarise compliance material · Prepare document structures AI evidence: [327] [328]Explicitly early access. Trial phase and plan-dependent AI allowances described; according to the terms, actual activation follows the respective product releases. No generally production-ready full scope assumed. Source check: 2026-10-15 |
| C1RiskC1Risk | Links risks, compliance requirements, controls, evidence, assets and supplier data. Changes to these relationships can be evaluated and transferred into workflows. | C1Risk describes AI-supported mapping of controls to compliance frameworks and cross-framework control matching in order to reduce duplicate compliance work.[330] [331]Specific AI functions documented Mapping controls to compliance frameworks · Cross-framework control matching AI evidence: [331] [330]Documented by the vendor; no product test. Source check: 2026-10-14 |
| calQriskcalQrisk GRCGreenFeet | Brings together risks, controls, compliance obligations and audit findings. Control tests, measures and reports are supplemented by operational resilience and third-party management. | The announcement checked describes AI for ongoing evaluation of governance, risk and compliance information as a development in the FCA sandbox programme. An already available product function is not documented in it.[332] [333]Announced or in development Interpret GRC information continuously (in development) · Create responsibility-related assurance for senior managers (in development) AI evidence: [333]Development project according to announcement of 22 July 2026; general availability not documented; no product test. Source check: 2026-10-14 |
| CerivoCerivoHeadquarters: Denmark [339]Cerivo ApS, Copenhagen N, Denmark; register number 45706133. Legal text also names the operating brands ComplyCloud, Wired Relations, RISMA Systems and Openli with a Danish address.ComplyCloud; RISMA Systems; Wired Relations; Openli | Bundles data protection, information security and governance and risk management. Comply, Control and Govern connect, for example, processing activities, data subject requests, ISMS and control evidence. | No specific AI work step of the Cerivo GRC platform is documented in the source check. Support for the AI Act and training on building external assistants are to be distinguished from this.[334] [335] [336] [337] [338]Not specifically documented in the source check Current product presentation and official search results for Cerivo, ComplyCloud and RISMA checked. Statements on governance of AI not counted as AI in the product. Sources checked: [334] [336] [337] [338]AI availability in the GRC platform not specifically documented in the source check. Source check: 2026-10-14 |
| CerpentCerpent GRC / Ophidia AIHeadquarters: USA [343]The self-maintained vendor profile explicitly names New Castle, Delaware, USA, as headquarters and additionally locations in Baku and Almaty. The website refers to the company as Cerpent Inc.Cerpent Inc.; Ophidia AI | Cerpent connects risks, controls, assets and audit evidence for banks, insurers and other regulated organisations. Responsibilities, control testing, measures and reports are managed in a shared GRC platform. | Ophidia AI analyses structured GRC data, detects risk patterns and control gaps and suggests risk ratings and control mappings. The vendor names historical data and industry benchmarks as the basis; control evidence is also examined for anomalies.[340] [341] [342] [343]Specific AI functions documented Detect risk patterns and control gaps · Suggest risk ratings and control mappings · Flag anomalies in control evidence AI evidence: [340] [342]Commercial offering with individual demo and organisation-specific implementation. The pricing page lists Ophidia functions within the platform scope offered; not tested by us. Source check: 2026-10-15 |
| CERRIXCERRIX GRCHeadquarters: Netherlands [345]CERRIX BV; registered office The Hague, Netherlands; VAT NL854381351B01.Ruler | Connects risk registers, control tests, compliance evidence and audits with third parties and incidents. Shared responsibilities and reports support several lines of defence. | CERRIX describes dialogue-based queries of GRC data and report creation via a connected AI agent.[344]Specific AI functions documented Query GRC data in dialogue · Create GRC reports via AI agents AI evidence: [344]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| CheckaChecka GRC / AutopilotHeadquarters: Colombia [347]Data protection controller of the provider project: Ingrith Dayana Malaver Botía, natural person based in Bucaramanga, Colombia. No already registered corporation documented.CHECKA; Checka Autopilot; Ingrith Dayana Malaver Botía | GRC platform for risks, information assets, controls, statement of applicability, internal audits and suppliers. Links assessments, measures and traceable changes. | AI generates context-specific risks, controls and action plans. The Autopilot links data queries and suggestions and requests confirmation before creating or changing entries.[346] [347]Specific AI functions documented Draft risks and controls · Suggest action plans · Query and edit GRC data in natural language AI evidence: [346]Product page describes available modules and offers a demo. Early-stage provider project: the privacy page describes the company's formalisation as still being set up; not all AI audit reports are complete. Source check: 2026-10-15 |
| CoAudit GroupSentinelysHeadquarters: France [349]Sentinelys; CoAudit Pro; CoRisk; FDU Conseil | Sentinelys connects risk management, internal controls, audit and compliance campaigns on a shared database. Organisational units, control libraries, questionnaires and action plans can be linked with one another. The French vendor offers both SaaS and operation in the customer's own infrastructure and addresses, among others, banks and insurers. | Sentinelys mentions an AI aid for onboarding. Specific AI support for risk analysis, controls, compliance or audit is not documented in the source check.[348] [349]Not specifically documented in the source check Vendor page and targeted domain search checked; training AI without a documented GRC work step not included in the AI function filter. Sources checked: [348]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| CompiloCompilo.aiHeadquarters: Sweden [351]Privacy policy names Tech brows AB, Org. No. 559434-1967, Stockholm, as operator of Compilo.Tech brows AB; Tech Brows AB; Compilo.ai | Compilo bundles data protection, security requirements, contracts, suppliers, risks and evidence. The described work areas include records of processing activities, impact assessments, control evidence and action plans. | The provider describes AI-supported document analysis and compliance reports. The assistant creates drafts for data protection impact assessments and data processing agreements and supports supplier assessments and the identification of NIS2 gaps.[350] [351]Specific AI functions documented Draft data protection impact assessments · Analyse compliance documents · Support supplier assessments · Create compliance reports AI evidence: [350] [351]Access and demo are offered on request. Confirm specific modules, AI scope and approval processes before procurement. Source check: 2026-10-15 |
| ComplyanceComplyance Enterprise GRC; Core AI; Controls AI AgentsHeadquarters: United Kingdom [355]Securely Technology Limited; Complyance US Inc. | Complyance connects internal controls, risks, policies, evidence and third parties in a GRC platform. Controls receive defined test criteria; identified gaps are processed as measures with owners and deadlines. Built-in AI suggests control and evidence mappings. Supplementary agents check incoming evidence, explain anomalies and support follow-up through to remediation. | Documented by the vendor: Core AI recommends existing evidence for controls, maps suitable controls to risks and drafts treatment or improvement measures. Additional Controls AI Agents check evidence against defined criteria, justify anomalies and create assigned measures.[352] [353] [354] [355] [356]Specific AI functions documented Map evidence to controls · Review control evidence · Link risks and controls · Draft treatment measures AI evidence: [353] [352] [354]According to the vendor, Core AI is included by default in every deployment and can be switched off; specialised AI Agents are offered as optional add-on functions. Documented by the vendor, not tested in practice. Source check: 2026-10-14 |
| CompylCompyl | Connects governance, risks, compliance, supplier assessments and audit reports. Controls, integrations and current evidence form a shared programme status. | Compyl describes AI for policy drafts, questionnaire answers, supplier assessments and natural-language queries of the organisation's own GRC data. Results are submitted for human review.[357] [358]Specific AI functions documented Draft policies · Pre-fill security questionnaires · Prepare supplier assessments · Query GRC data in dialogue AI evidence: [357]Documented by the vendor; the separate Agent Library is labelled as Coming Soon. Not tested in practice. Source check: 2026-10-14 |
| ConfidataConfidata GRC / IA AssessoraHeadquarters: Brazil [362]KNOW FOREVER TECNOLOGIA LTDA, CNPJ 61.231.772/0001-29, São Paulo. Terms of use dated 05.10.2026 confirm a change of name with unchanged CNPJ.KNOW FOREVER TECNOLOGIA LTDA; KNOW FOREVER SERVIÇOS EDUCACIONAIS LTDA; Confidata IA Assessora | GRC platform for data protection, enterprise risks, third parties, compliance programmes and audits with a focus on Brazilian requirements. Connects assessments, controls, tasks and evidence. | The context-specific AI assistant suggests controls and priorities, creates policy drafts and analyses supplier contracts against regulatory frameworks. Suggestions use the data and open tasks of the respective organisation.[359] [360] [361] [362]Specific AI functions documented Suggest controls and priorities · Draft policies · Check supplier contracts for compliance AI evidence: [360]Commercial modular SaaS offering with demo; according to the pricing page, IA Assessora is included in every module combination. Additional AI automation is a separate module area. Source check: 2026-10-15 |
| Continuum GRCA.ITAM / AITAMBotHeadquarters: USA [364]A.ITAM; AITAMBot; IT Audit Machine; ITAM | Continuum GRC bundles risk management, control testing, audit evidence and policies in A.ITAM. The platform supports several compliance frameworks as well as topics such as supplier risks, data protection and internal controls. Shared evidence and mappings facilitate parallel audits. Policy processes with versioning and approvals supplement the management of risks and controls within the same software. | The product FAQ describes AITAMBot for evidence collection, control mapping, risk detection and report creation. The vendor information on AI support was documented, but neither the degree of automation nor the quality of the results generated was tested in practice.[363] [364]Specific AI functions documented Control mapping · Evidence collection · Risk detection · Draft reports AI evidence: [363]Documented by the vendor; AITAMBot is described as part of the platform offered; not tested in practice. Source check: 2026-10-14 |
| CoplaCopla GRC PlatformHeadquarters: Lithuania [367]Cyber upgrade, UAB; CyberUpgrade; Copla | Copla connects compliance, risk management, supplier reviews and information security in a shared platform. Risks, controls, evidence and responsibilities are linked with one another. Document approvals, version management and an audit area support ongoing implementation. In addition to the software, CISO services are part of the offering; subject-matter assessments therefore remain part of a supported process. | The AI creates company-specific policies from operational information and aligns the drafts with framework requirements. Documents are linked with controls, risks and assets and then reviewed and approved.[365] [366] [367] [368]Specific AI functions documented Drafts of company-specific compliance policies · Alignment of policies with framework requirements AI evidence: [366]Software documented by the vendor with CISO support and approval workflows; agree the specific contractual scope. No product test. Source check: 2026-10-14 |
| CorporaterTo the detailed profile Headquarters: Norway [369]Corporater AS; explicit headquarters Stavanger, Norway; international regional companies listed separately. | Governance, performance, risk and compliance in a digital organisational model. | The integrated assistant TIVA supports recording risks and incidents, processing compliance tasks and triggering workflows in natural language.[47] [7]Specific AI functions documented Risk recording · Incident recording · Compliance tasks · Workflow actions AI evidence: [7]According to the provider, selected AI functions require Corporater UnifAI. The actual scope depends on the configured solution and the permissions set up. Source check: 2026-10-14 |
| CRISAM GRCTo the detailed profile Headquarters: Austria [370]Provider CALPANA business consulting GmbH, Linz, company register 261730y. German subsidiary in Hamburg additionally listed; no inference about the main provider drawn from its address. | Methodical risk management, multi-compliance, information security, ICS, BCM and audit. | CRISAM AI Risk Assistance suggests context-specific risks, suitable measures and controls. The extension also describes regulatory relevance notes and AI-supported supplier risk analyses.[48] [49]Specific AI functions documented Risk identification · Measure suggestions · Control recommendations · Supplier risk analysis AI evidence: [49]Extension of the CRISAM GRC platform documented by the vendor; predefined or customer-specific models configurable. No product test. Source check: 2026-10-14 |
| CShiftFidureonHeadquarters: Sweden [372]Vendor names CShift AB, Org. No. 559375-6108, with an address in Gothenburg. Fidureon is its product and is not counted separately.CShift AB; Fidureon | Fidureon connects requirements, controls, risks, suppliers and evidence with data protection and security registers. Consultancies can manage several customer workspaces and document assessments with findings and measures. | The assistant answers questions about the organisation's own risks and controls. AI suggests mappings of imported controls, evaluates documents for readiness assessments and creates suggested measures. Agent actions are logged; the permitted degree of automation is configurable.[371] [372] [373]Specific AI functions documented Map controls to requirements · Assess compliance documents · Query risk and control inventory · Suggest measures AI evidence: [371]Subscription with demo and set-up customer workspaces. The AI process designer is explicitly experimental; not every automation is an AI function. Source check: 2026-10-15 |
| cSquare GRCcSquare; FiboHeadquarters: USA [374]Partner source names JNN Group, Inc. in Pasadena; terms of use name cSquare GRC, Inc. Clarify the contractual partner specifically. Counted as one provider group.c²; cSquare GRC, Inc.; JNN Group, Inc. | cSquare connects compliance requirements, controls and evidence across several frameworks. RegGenome provides structured regulatory content; access is intended via the user interface and integrations. | Fibo creates suggestions, drafts, summaries and analyses. The partner documentation describes AI-supported gap analyses, policy creation and control mapping with regulatory source data.[374] [375] [376]Specific AI functions documented Analyse compliance gaps · Draft policies · Map controls to regulatory requirements AI evidence: [374] [375]Partner source states availability of the RegGenome integration from Q2 2026 for enterprise customers and implementation partners. AI outputs must be reviewed on subject-matter grounds. Source check: 2026-10-15 |
| CURA | CURA bundles enterprise risks, compliance, internal audit, incidents and business continuity on a configurable platform. | CURA describes AI and machine learning for risk forecasts from internal and external data, scenario simulations and suggestions for countermeasures. Results depend on data and model assumptions.[50] [51]Specific AI functions documented Forecast risk events · Simulate risk scenarios · Suggest countermeasures AI evidence: [51]Documented by the vendor; no product test. Source check: 2026-10-14 |
| CyberArrowCyberArrow GRCHeadquarters: United Arab Emirates [379]The vendor describes Dubai as its starting point and base for expansion. Further international offices are listed; the location information does not automatically determine the legal entity of a specific contract.CyberArrow GRC; EBDAA | CyberArrow GRC connects risk assessments, compliance requirements, policies, internal controls and audit evidence. Integrations support the ongoing capture of control information and the preparation of audits. The platform covers several security and governance frameworks and provides status information for subject-matter owners, management and auditors in shared workflows. | CyberArrow explicitly describes an AI-supported gap analysis that identifies missing controls and suggests suitable remediation.[377] [378] [379] [380] [381] [382]Specific AI functions documented Identify missing controls · Suggest remediation for control gaps AI evidence: [378]Function of CyberArrow GRC documented by the vendor; model and licence package not specified in more detail. No product test. Source check: 2026-10-14 |
| CybervizeOdySecure / OdySecure NavigatorHeadquarters: Germany [384]Cybervize Operations GmbH, Düsseldorf, HRB 101821; legal notice also names Cybervize Consulting GmbH, HRB 101465. Counted as one provider group.Cybervize Operations GmbH; Cybervize Consulting GmbH; OdySecure; OdySecure Navigator | OdySecure connects ISMS, assessments, business continuity, third-party risk and awareness. Risks, measures, controls, approvals and evidence access shared organisational data. | The available Navigator answers governance questions from the data of the customer's own tenant, for example on the largest risks and audit readiness. Answers name sources and key figures and take read permissions into account; missing data is flagged.[383] [384]Specific AI functions documented Query risks in natural language · Explain audit readiness on the basis of own data · Provide sources for governance answers AI evidence: [383]Navigator explicitly described as available. More advanced acting AI agents are in the design partner programme and not yet generally available. Implementation and module scope are agreed. Source check: 2026-10-15 |
| CypherOnObservaHeadquarters: Czechia [387]The contractual terms name a sole trader operating in Prague as operator under the CypherOn brand; a corporation or s.r.o. is not inferred from this.CypherOn; Observa; Waldemar Kučera | Observa is a GRC platform for security and compliance teams with asset management, risk register, gap analyses, policies and supplier management. It supports, among other things, Czech cyber security requirements as well as European frameworks. An integrated assistant makes company data and regulatory content accessible. Access can be limited per module; prepared changes are logged after human confirmation. | The Observa assistant answers risk and compliance questions from released company data, explains regulatory requirements and creates risk or management summaries. New risk and other GRC records are submitted for confirmation before being written.[385] [386] [387] [388]Specific AI functions documented Answer risk and compliance questions on company data · Explain regulatory requirements with sources · Summarise risks for management reports · Prepare GRC records for human confirmation AI evidence: [386] [385]AI is assigned to the Enterprise plan; usage budget and module permissions apply. Information on the AI scope in the free trial is inconsistent and therefore not assured. No product test. Source check: 2026-10-14 |
| Decision FocusDecision Focus GRCHeadquarters: Denmark [389]The vendor page explicitly names headquarters in Denmark; the contact page names Banevænget 13, 3460 Birkerød. No statement on hosting or ownership structure derived from the headquarters.LinkGRC | Configurable GRC platform with audit planning, audit execution, measures and reports. Audit work is connected with risk and control frameworks as well as compliance and resilience. | The AI tools suggest additional risks and controls, answer questions about policies and check documents against GRC data for possible compliance gaps. Suggestions are based on configured assessment criteria.[389] [390] [391] [392]Specific AI functions documented Suggest risks and controls · Query policies and regulatory texts · Flag compliance gaps · Summarise GRC records AI evidence: [391] [392]Documented by the vendor; AI models and specifications are configured for the organisation. Writing by Intelligence only after approval. Not tested in practice. Source check: 2026-10-14 |
| DELTA RMDELTA RM GRC & RMISHeadquarters: France [395]Delta Risk Management | DELTA RM combines enterprise risk management with incidents, insurance, prevention, internal control system and internal audit. Risks can be tracked via assessments, key figures and action plans. The insurance link supplements the classic GRC perspective, particularly in the joint management of risks, losses and cover. | DELTA RM describes AI agents that evaluate insurance documents, detect missing claims documents, assess control evidence and draft compliance reports.[393] [394] [395] [396]Specific AI functions documented Evaluate insurance and claims documents · Assess control evidence · Draft compliance reports AI evidence: [393]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| devecadevecaHeadquarters: Germany [398]Provider identification: Kevin Carter (deveca GRC), c/o MDC#deveca, Welserstraße 3, Dietmannsried, Germany. No GmbH or other undocumented legal form added. Geography checked on 15.10.2026; no inference of hosting or owners from the headquarters. | Bundles ISMS, IT and business risks, measures, data protection and whistleblowing cases in a multi-tenant platform. | deveca describes AI for checking evidence, identifying gaps in framework matching and drafting records of processing activities and data protection impact assessments.[397] [398]Specific AI functions documented Review evidence · Identify framework gaps · Create RoPA drafts · Create DPIA drafts AI evidence: [397]Documented by the vendor; DORA, SOC 2 and PCI DSS are still listed as Coming Soon on the same page; no product test. Source check: 2026-10-14 |
| DigitalXForceDigitalXForce TRiSCM / AI JedAI / XForce GPTHeadquarters: USA [402]The vendor website names a contact address in Irving, Texas, USA. The structured organisational data confirms the country US. This replaces the previous sole location evidence via LinkedIn; register and ownership checks remain separate from this.DigitalXForce Corporation; AI JedAI; XForce GPT | Platform for GRC, ongoing control testing, cyber risks, third parties and compliance evidence. | AI JedAI analyses control evidence and recommends remediation measures. XForce GPT creates risk descriptions and board reports; further AI functions support supplier documents and policies.[399] [400] [401] [402]Specific AI functions documented Analyse control evidence · Recommend remediation measures · Create risk and board reports AI evidence: [399] [400]Current commercial offering with demo; DigitalXForce Lite is offered as a hosted variant. Source check: 2026-10-15 |
| Diligent OneTo the detailed profile 3rdRisk | Board work, audit, risk and compliance with reports for management and supervisory bodies. | AI Risk Essentials identifies and compares strategic and operational risks on the basis of public company reports. Further Diligent AI functions condense board documents and support the preparation and follow-up of committee meetings.[52] [53] [403] [404]Specific AI functions documented Risk identification · Risk benchmarking · Condense committee documents AI evidence: [404] [53]Risk Essentials and the AI functions for committee work belong to different Diligent products. Check product and licence scope separately; no blanket evidence of the availability of all AI functions in every Diligent One installation. Source check: 2026-10-14 |
| DimeriGRC platform / AI AssistantHeadquarters: South Africa [407]Dimeri (Pty) Ltd; contact address 9 Lena Ahrens Road, Glenwood, Durban, South Africa.Dimeri (Pty) Ltd | Platform for enterprise risks, compliance, internal audit, governance and third parties. Offered for companies and consultancies with separate customer workspaces. | The AI assistant uses linked controls, audit history and frameworks for justified risk assessments. It drafts referenced controls, prioritises regulatory changes, answers questions from policies and evidence and prepares audit packages.[405] [406] [407]Specific AI functions documented Assess risks with justification · Draft controls with framework reference · Evaluate compliance gaps and evidence AI evidence: [406]Free workspace and demo publicly offered; the assistant is described as an existing function. Source check: 2026-10-15 |
| DISS-COSmart Integrity Platform (SIP)Headquarters: Germany [409]Legal notice names DISS-CO GmbH in Wedel, HRB 17964 PI. The privacy policy additionally uses the place name Hamburg; assignment to Germany is consistent.DISS-CO GmbH; Smart Integrity Platform; SIP; diss-co.tech | The Smart Integrity Platform bundles whistleblowing cases, complaints, third-party due diligence, risks and compliance reports. Further modules support due diligence obligations and information security requirements. | DISS-CO describes AI for categorising reports, analysing adverse media reports as well as for gap analyses and control mapping. Multi-stage AI workflows are intended to support recurring compliance tasks.[408] [409]Specific AI functions documented Categorise reports and complaints · Analyse adverse media reports · Map controls · Analyse compliance gaps AI evidence: [408]Demo and modular product offerings available. Agree AI modules, approvals and, where applicable, on-premises operation separately; automation rates not independently verified. Source check: 2026-10-15 |
| DmazeDmazeHeadquarters: Norway [413]Proactima Solutions AS; Proactima; UXRisk | Dmaze is a configurable platform for risk management, information security, compliance and audits. Templates structure assessments, controls, evidence and measures with assigned responsibilities. Further areas of application include data protection, quality management and business continuity. For evaluation, the provider offers a Power BI connector as well as reports in Office formats and an interface for integrating other systems. | Dmaze suggests risks as well as suitable controls and measures from project contexts. For incidents, the vendor mentions support with causes and preventive measures; saving requires a user decision.[410] [411] [412]Specific AI functions documented Suggest risks from project descriptions · Recommend controls and mitigation measures · Suggest causes and prevention for incidents AI evidence: [411]Documented by the vendor as integrated suggestions; acceptance or editing by users. Not tested in practice. Source check: 2026-10-14 |
| DotCoAiDotCoAi GRC PlatformHeadquarters: Singapore [416]Contact page names an office in Singapore. The terms of use name DotCo Pte. Ltd., in the contact section differently DotCoAi Pte. Ltd.; confirm the exact contracting company during procurement. Both names are counted once.DotCo Pte. Ltd.; DotCoAi Pte. Ltd. | DotCoAi connects risk management, compliance, internal audit and supplier reviews with an additional module for AI governance. Audit planning, working papers, findings and measures are managed together. | The product page describes AI for prioritising risk-based audit plans and for preparing working papers from connected systems and previous audits. This documents AI functions within internal audit, beyond the governance of AI systems.[414] [415] [416]Specific AI functions documented Prioritise audit plans on a risk basis · Prepare working papers from existing audit data · Create audit reports from working papers AI evidence: [414]The vendor offers SaaS subscriptions and a demo. Functional scope and performance were not tested by us. Source check: 2026-10-15 |
| DuravaDurava GRCHeadquarters: Germany [418]Durava GmbH | Durava combines internal audit, internal controls, risk management and compliance in one platform. Requirements, controls and evidence are linked to one another; findings feed into the assessment of control effectiveness. Audit planning, action tracking and information security management complete the scope. Suggestions from document analysis are reviewed by the responsible persons before they are adopted. | The AI extracts controls from policies and process descriptions, compares regulatory requirements with existing evidence and flags gaps with source references. The vendor additionally documents suggestions for risk assessments. Results are provided for human review.[417] [418]Specific AI functions documented Extract controls from documents · Match requirements and evidence · Show compliance gaps with source references · Suggest risk assessments AI evidence: [417]Documented by the vendor; not tested in practice Source check: 2026-10-14 |
| EasyAuditEasyAudit / AI Compliance OfficerHeadquarters: Canada [422]The vendor press kit names Toronto, Ontario, as headquarters. The current terms of use name EasyAudit Inc.; the choice of Delaware law stated there is not interpreted as a different company seat.EasyAudit Inc.; AI Compliance Officer | EasyAudit combines a compliance platform with assisted delivery by compliance professionals. Controls, evidence, policies, risks and actions are managed for several audit frameworks in one shared programme. | The AI Compliance Officer drafts policies and documentation from company data, suggests controls and prepares remediation actions. Documents are assigned to the matching controls in context. Answers draw on linked programme data; binding statements and publications require human approval.[419] [420] [421] [422]Specific AI functions documented Draft policies from programme data · Assign documents to relevant controls · Prepare remediation actions from compliance gaps AI evidence: [419] [420]Commercial offering with a demo and an assisted compliance programme. The software is part of this offering; no independently tested evidence of performance is available. Source check: 2026-10-15 |
| Empliance TechnologiesOneSecure / GIAHeadquarters: India [423]Empliance Technologies Pvt. Ltd.; the current vendor page names Gurugram as headquarters and a further office in Mumbai. The legal text names the operating company.Empliance Technologies Private Limited; Empliance Technologies Pvt. Ltd.; OneSecure; GIA; OneVision; OneMerchant | GRC platform for risks, controls, policies, evidence and audits with a focus on regulated Indian companies. Complementary products and consulting services cover third-party and merchant processes. | The AI agent GIA analyses evidence gaps and assigns artefacts to relevant controls. A Policy Reviewer checks policies for completeness, regulatory mapping, duplications and outdated content.[423] [424] [425]Specific AI functions documented Analyse evidence gaps · Assign artefacts to controls · Check policies for gaps AI evidence: [424]The platform and complementary specialist services are offered commercially with a demo. Specific GIA agents, licence scope and productive use must be confirmed in the offer. Source check: 2026-10-15 |
| Empowered SystemsConnected RiskConnected Risk; AutoAudit; Empowered ESG | Connects GRC data, analyses, reports and collaboration. Document management, versioning and relationships between business objects support traceable governance and risk processes. | The Connected Risk pages checked describe GRC workflows and the governance of models. General articles on AI in GRC do not document a specific, integrated AI work step of the product.[426] [427] [428]Not specifically documented in the source check Product and domain search; governance of AI not equated with the product's own AI support. Sources checked: [426] [427] [428]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| erambaHeadquarters: United Kingdom [431]Eramba Limited, Companies House 09524547, active; registered office 71–75 Shelton Street, London. The provider website lists the same London office and additionally an office in Bratislava. Country classification follows the registered provider legal entity. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office. | Open GRC software covering risks, internal controls, compliance, policies, incidents and data protection; Community and Enterprise offerings. | The MCP connection links eramba to a language model of the user's own choosing. Documented uses are queries of GRC data, checking policies against requirements and deriving risk profiles from assessments.[54] [55] [429] [430] [431] [432]Specific AI functions documented Query GRC data in natural language · Check policies against requirements · Evaluate assessment results into risk profiles AI evidence: [429] [430]MCP connection with the user's own LLM provider; release 3.31.0 documented. The learning guide still contains an experimental release note; confirm availability per instance. No product test. Source check: 2026-10-14 |
| ESG Innova GroupGRCTools; ISOTools; ESGTools; HSEToolsHeadquarters: Spain [436]GRCTools; ISOTools; ESGTools; HSETools; Proyectos y Consultoría de Innovación Tecnológica S.L. | The GRCTools product line supports governance, enterprise risk and regulatory compliance. The portfolio includes, among other things, information security, third-party risk and event and incident management. The complementary lines ISOTools, ESGTools and HSETools connect these tasks with management systems, sustainability and occupational health and safety within the same provider group. | GRCTools mentions AI in indexed product information. The specific functional check remains open: an accessible sustainability page describes automation, while current platform, ERM and brochure content cannot be retrieved reliably.[433] [434] [435] [436] [437] [438] [439]Source check still open Sustainability page and indexed official GRI description read. Search metadata and page bodies of differing currency, as well as timeouts of the central sources, prevent the final AI check. Sources checked: [438] [439]Detailed check open; central product pages and brochure not reachable when retrieved. Source check: 2026-10-14 |
| EuraikaEuraika GRC; Euraika AI AssistantHeadquarters: Belgium [441]The legal notice names Euraika BV, Leuvenselaan 13 in Tienen, Belgium, and KBO/BCE 1033.543.413.Euraika BV; Euraika GRC; Aegis; aegis.euraika.net | Euraika GRC connects risks, controls, policies, supplier assessments and evidence with audit and data protection workflows. The platform supports European security and compliance frameworks including the Belgian CyFun. | The assistant answers questions on the basis of organisation-specific data with source references. AI suggests risk treatments, analyses supplier gaps, improves policies and drafts answers to security questionnaires. Suggestions and agent runs are reviewed by humans.[440] [441] [442]Specific AI functions documented Supplement risks and actions · Analyse supplier gaps · Revise policies · Answer security questionnaires · Query compliance data with sources AI evidence: [440]Offered as a platform with trial access and a demo; AI quotas and additional functions depend on the pricing plan. No automatic compliance approval. Source check: 2026-10-15 |
| F24 TopEaseTo the detailed profile Headquarters: Germany [443]F24 AG; Munich, Germany; HRB 158196. | Modular GRC platform with a shared database for risks, ICS, processes, assets, BCM, information security and third parties. | No specific AI function was documented for TopEase in the current source check. The product pages describe linked data, workflows, controls and analyses; AI functions of other F24 products are not transferred to TopEase.[56] [57]Not specifically documented in the source check Product overview and targeted TopEase AI search checked. Automation alone is not AI evidence. Sources checked: [57] [56]No specific AI work step documented in the source check; no statement about the absence of AI. Source check: 2026-10-14 |
| Flow GRCFlowLocation and exact contracting entity remain open; no regional classification derived from the English-language website. | Flow combines risk registers, control management, compliance mapping and audit preparation. Risks are given owners and treatment plans; evidence and supplier reviews complete the workflow. | According to the provider, Claude supports the creation of risk registers from company descriptions, the mapping of controls and the analysis of gaps. An AI risk analyst answers questions and examines scenarios.[444] [445]Specific AI functions documented Draft risk registers · Map controls · Analyse compliance gaps AI evidence: [444] [445]The vendor offers an entry-level option and a demo. Check the specific functional scope; location and legal entity not conclusively verified. Source check: 2026-10-15 |
| focus-GRCHeadquarters: Germany [446]focus DV-Technologie, Beratung und Entwicklung GmbH; Unterhaching; DE157691658. | Modular GRC suite with risk aggregation, ICS, regulatory requirements, incidents and business continuity. | No specific AI support for GRC work steps is documented in the source check. Monte Carlo simulation, risk aggregation and automated calculation of key figures are not counted as AI on their own.[58] [59]Not specifically documented in the source check Product page and targeted vendor search for AI/artificial intelligence checked. Sources checked: [58]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| FormalizeFormalizeHeadquarters: Denmark [450]Formalize ApS; Aarhus, Denmark; VAT DK42045136. Spanish subsidiary listed separately; assigned to the main operating provider. | Connects risks, compliance requirements and operational controls. Shared workflows support several regulatory frameworks, including information security as well as DORA, NIS2 and AI governance requirements. | Smart Fill extracts contract terms and fills configured fields. Formalize IQ is additionally intended to interpret official standards and identify GRC gaps; this extension is described as a pilot in the partnership announcement.[447] [448] [449]Specific AI functions documented Extract contract data and renewal clauses · Fill configured contract fields with AI AI evidence: [448] [449]Smart Fill requires activation of the AI and configuration of the contract fields. Formalize IQ described as a pilot in the announcement checked. Not tested in practice. Source check: 2026-10-14 |
| FullyInControlFullyInControl GRCHeadquarters: Netherlands [452]The current provider website names Fully In Control B.V. with the address Takenhofplein 1, Nijmegen, Netherlands. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office. | Links risks and control objectives with processes, actions, audits and evidence. Information can be used for several regulatory frameworks; responsibilities and reports are configurable. | FullyInControl describes AI support for identifying relevant risks and for determining suitable risk measures within the GRC software.[451] [452]Specific AI functions documented Risk identification · Suggestions for risk measures AI evidence: [451]Documented by the vendor; no product test. Source check: 2026-10-14 |
| G.R.A.I.S.Governance Reporting and Intelligence SystemHeadquarters: Not separately checked [454]Operator Ndondo (Pty) Ltd documented in the privacy policy. The .co.za domain and +27 support number point to South Africa; an explicit statement of the registered office or country of registration was not documented.Ndondo (Pty) Ltd | Governance platform for boards and committees, resolutions, reporting, risks and audit. Connects decision documents and evidence trails. | AI creates draft agendas and management briefings, extracts meeting minutes and supports risk and anomaly detection. The vendor describes an audit trail for these workflows.[453] [454] [455]Specific AI functions documented Draft board agendas and briefings · Extract meeting minutes · Detect risk anomalies AI evidence: [453]Listed as commercial SaaS with a demo and customer support; detailed product documentation and release notes are offered on request. Source check: 2026-10-15 |
| GBTEC GRC ManagementHeadquarters: Germany [457]GBTEC Software AG; explicit registered office Bochum; HRB 9621. | Modular GRC platform with links to process management and enterprise architecture; formerly BIC GRC. | Arty is documented for process management and other platform tasks. However, the GRC and company pages checked do not document a specific AI work step in the GRC module.[60] [61] [456]Not specifically documented in the source check GRC page, company facts and Arty announcement read; targeted GRC/Arty search. Platform-wide AI and Monte Carlo simulation are not automatically attributed to the GRC module. Sources checked: [60] [61] [456]No specific available AI support documented in the source check; no product test. Source check: 2026-10-14 |
| GIEOMRisk Central | Platform for operational risk and resilience. Configurable forms and workflows connect risk, incident and compliance processes; interfaces connect external systems. | GIEOM ComplyAssure analyses regulatory documents, breaks requirements down into obligations and creates structured policies. The AI also detects overlaps and conflicts between regulatory frameworks; an integration with Risk Central is described.[458] [459]Specific AI functions documented Extract regulatory obligations · Draft structured policies · Detect overlaps and regulatory conflicts AI evidence: [459]Documented by the vendor for ComplyAssure with MagpieAI and integration with Risk Central; not assumed to be an automatic basic function of every Risk Central package. Not tested in practice. Source check: 2026-10-14 |
| GlobalSuite SolutionsGlobalSuiteHeadquarters: Spain [462]AUDISEC, SEGURIDAD DE LA INFORMACIÓN S.L. trades as GlobalSuite Solutions; commercial register Ciudad Real, CIF B13422902. The Legal Notice names Madrid and Ciudad Real as Spanish addresses. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office. | Connects risk, compliance, audit and business continuity with further specialist modules. Methods, controls, evidence and actions can be linked across several regulatory frameworks and units. | GlobalSuite AI supports querying compliance data, drafts policies and risk-control scenarios and checks evidence for gaps.[460] [461] [462]Specific AI functions documented Query compliance data · Draft policies · Suggest risks and controls · Check evidence for gaps AI evidence: [460] [461]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| Grace ConnectGrace Connect GRC SuiteHeadquarters: Luxembourg [463]Grace Connect SARL; Grace Connect GRC Suite; GCCS | Grace Connect brings together the management of non-financial risks in a modular GRC suite. A shared data model connects processes, risks, controls, incidents and audit findings. Risk owners document causes, likelihood and impact; internal audit and management track recommendations, action deadlines and key figures. Complementary modules support data protection, outsourcing risk and the operational implementation of DORA. | The GRC product brochure checked describes risks, controls, audits and workflows, but does not document any specific AI support for these tasks.[463] [464] [465]Not specifically documented in the source check 41-page vendor brochure from January 2025 checked; current web product pages provided no usable content. No evidence in accessible sources; recent changes are therefore only captured to a limited extent. Sources checked: [465]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| GRCompliGRCompliProvider attribution not conclusively resolved: indexed metadata names AEIV Global, the page contact consultrnr.com. These names are not counted separately; location open.AEIV Global; contact reference consultrnr.com | GRCompli brings together requirements, controls, risks, incidents, audits, evidence and policies. The product description also covers asset and supplier management. | The indexed vendor page describes AI for assessing evidence against requirements as well as drafts of policies, incident reports and management summaries.[466] [467]Specific AI functions documented Assess evidence against requirements · Create policy drafts · Prepare management summaries AI evidence: [466] [467]Demo offered. AI evidence from indexed vendor text; direct page retrieval limited. Confirm operating status and contractual scope before procurement. Source check: 2026-10-15 |
| GRCPerfect / PrivacyPerfectGRCPerfect with PrivacyPerfect, SecurityPerfect, AI Perfect and VRMPerfectHeadquarters: Netherlands [471]PrivacyPerfect; GRCPerfect; PrivacyAgent B.V.; SecurityPerfect; AI Perfect; VRMPerfect | GRCPerfect combines data protection, information security, AI governance and supplier risk on a shared platform. The modules link processing activities, risks, controls, audits and evidence. PrivacyPerfect remains the data protection offering; SecurityPerfect maps an ISMS. Further functions include an AI inventory and impact assessments as well as supplier assessments linked to data protection processes and incidents within the same governance model. | The GRCPerfect pages checked describe AI registers, risk classifications and governance requirements for AI systems. A specific AI-supported GRC work step is not documented in them.[468] [469] [470] [471] [472]Not specifically documented in the source check Governance of AI and a rule-based questionnaire scan do not document any use of AI in the product; no evidence of the absence of AI. Sources checked: [470] [472]No specific AI assistance documented in the sources checked. Source check: 2026-10-14 |
| GuardialGuardial AIHeadquarters: USA [474]The terms of use name Predictive IRM LLC as operator; the page footer explicitly names San Diego, California, as headquarters.Guardial AI; Predictive IRM LLC; Predictive IRM, LLC | Guardial combines compliance, enterprise risk, third parties, audit and control monitoring. The platform is aimed particularly at financial service providers and manages, among other things, policies, risk registers, audits, complaints and actions. | During onboarding, AI agents suggest relevant requirements, summarise changes in the compliance programme and draft policies, audit templates, supplier questionnaires and risk entries from existing programme data. Suggestions include sources and justifications; adoption requires human approval.[473] [474]Specific AI functions documented Draft policies and risk entries · Summarise programme changes for briefings · Prepare audit templates from existing programme data AI evidence: [473]A demo, trial access and platform sign-up are offered. The AI suggestions described require confirmation before adoption. Not tested by us. Source check: 2026-10-15 |
| HelmGuardHelmGuard; AtlasHeadquarters: United Kingdom [476]The vendor explicitly names London as headquarters and further US locations. The terms of use name HelmGuard Technologies, Inc.; the country classification refers to the operational headquarters, not to an exclusively British legal entity.HelmGuard Technologies, Inc.; HelmGuard AI | HelmGuard combines security, risk and compliance data in a shared knowledge base. The platform supports internal control assessments, supplier risk and the handling of security requests with integrated workflows. | AI agents collect and assess evidence, map controls to frameworks and answer security questionnaires. Further agents support supplier assessments and create risk reports tailored to their audience; source references and human reviews are part of the workflow described.[475] [476] [477] [478]Specific AI functions documented Collect and assess evidence · Map controls to frameworks · Analyse supplier risks · Answer security questionnaires · Draft risk reports AI evidence: [475]The platform is offered with a demo; the vendor describes active customer use. Check specific agents, integrations and approval rules in the respective offer. Source check: 2026-10-15 |
| HiQ SolutionsSinergIAHeadquarters: Italy [480]HiQ Solutions S.r.l., Via Decio Filipponi 14, Rome; P.IVA/C.F. 13947681006.HiQ Solutions S.r.l.; SinergIA | Platform for governance, risk and compliance with specialist agents for, among other things, ICT/DORA, AML, ESG and regulatory reports. The organisation's own documents and systems form the working basis. | AI reads balance sheets, contracts, policies and evidence, carries out gap analyses and prepares auditable reports. Answers refer to documents and specific passages; submissions are reviewed and filed by the user.[479] [480]Specific AI functions documented Evaluate contracts and evidence · Analyse GRC gaps · Prepare regulatory reports AI evidence: [479]Commercial offering with a demo and documented implementation and operating options. Reports remain intended for human review and approval. Source check: 2026-10-15 |
| ibi systems irisHeadquarters: Germany [482]ibi systems GmbH; official provider address Regensburg, Germany. | ibi systems iris links information assets, requirements, risks, controls and actions. | The iris product description checked does not document a specific AI work step. Automated audit planning, data linking and action management are therefore not classified as AI across the board.[62] [63] [481]Not specifically documented in the source check Product page and targeted search of the vendor domain checked; the statement is limited to evidence found publicly. Sources checked: [62] [481]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| IBM OpenPagesTo the detailed profile | Modular risk, compliance and internal audit management, including model and third-party risk. | OpenPages describes embedded AI for classifying GRC content and creating records. Via APIs, watsonx.ai or the customer's own models can be connected; the MCP Server supports agents in querying and editing GRC objects.[9] [64]Specific AI functions documented Classify GRC content · Create records · Query and edit GRC objects via agents AI evidence: [9]Documented by the vendor; connecting models and agents requires corresponding configuration. No product test. Source check: 2026-10-14 |
| iComply.ptiComply Governance PlatformHeadquarters: Portugal [484]Contemporary Constellation, Lda., Lisbon, legal entity no. 516756583.Contemporary Constellation Lda.; iComply Portugal; iComply.pt | GRC platform for requirements, common controls, risks, audits and evidence. It offers specialist areas for, among other things, security, data protection, compliance programmes and third parties. | The compliance copilot drafts policies, summarises audits and answers control questions from the organisation's own data. AI analyses documents, maps them to controls and regulatory frameworks and shows evidence gaps.[483] [484]Specific AI functions documented Draft policies · Summarise audits · Map documents to controls AI evidence: [483]Platform with a demo and modular subscriptions. AI copilot described in the Professional offering; additional announced or tested modules not assumed to be available. Source check: 2026-10-15 |
| IgnimissionMaestro GRCHeadquarters: France [486]Ignimission SAS; Ignimotion; Maestro GRC; Projid | Ignimission Maestro connects existing GRC systems and organises risk, compliance and security processes via a configurable platform. Business units can design data models, data collection campaigns and approval workflows. Pre-built applications support, among other things, supplier risk, regulatory compliance and business impact analyses. The AI helps build these applications; interfaces integrate existing tools and data sources. | The AI copilot generates GRC workflows from natural language and supports the mapping of data models as well as the configuration of user interfaces in the platform builders.[485] [486] [487] [488]Specific AI functions documented Generate GRC workflows from natural language · Map data models for GRC applications AI evidence: [485]AI copilot documented by the vendor; cloud and on-premise operation are offered. According to the vendor, the AI engine can be set up within the customer's own network. No product test. Source check: 2026-10-14 |
| ImperoImpero PlatformHeadquarters: Denmark [492]Impero A/S; not to be confused with the British education software Impero Holdings | Impero supports the documentation of risks, the performance of internal controls and the testing of their effectiveness in a central system. The platform is based on COSO principles and is aimed in particular at finance, tax, compliance and internal audit teams. Risk maps, control programmes, reminders and reports connect central management with the work of individual group companies. | Impero Assist supports the drafting of internal controls as well as summaries and analyses of the risk and control landscape. Users review and confirm the AI results before adoption.[489] [490] [491]Specific AI functions documented Prepare control drafts · Summarise risks and controls · Analyse risk and control data AI evidence: [490]Opt-in beta for all customers on request; disabled by default. Human review intended. Not tested in practice. Source check: 2026-10-14 |
| Interact SolutionsInteract Suite SASA Risk Manager; SA Audit Manager; Interact Pocket | Connects corporate management and processes with risk, audit and document management. Shared analyses and mobile access complement the specialist modules. | Interact Aion supports the mapping of risks, controls and causes, drafts actions and analyses weaknesses. Document review and summaries are also described.[493] [494]Specific AI functions documented Map risks, controls and causes · Draft actions · Analyse weaknesses · Review and summarise documents AI evidence: [494]According to the vendor, already available in Interact Suite; a separate OpenAI account is recommended, adoption only after confirmation. No product test. Source check: 2026-10-14 |
| IskeraIskera; Optimiso Suite; Qualitadd; Acuredge; Pocket ResultHeadquarters: France [496]Optimiso; Optimiso Group; Acuredge; Pocket Result; PocketResult; Qualitadd | Iskera brings together applications for internal controls, risk management, audit, integrated management systems and data quality. The group connects process and control documentation with operational risk management and reporting. Optimiso, Acuredge, Pocket Result and Qualitadd are listed as brands and solutions of the same provider group. | IA Iskera answers questions about documents, risks, controls and audits, detects inconsistencies and drafts reports or action plans from existing GRC data.[495] [496] [497] [498] [499] [500]Specific AI functions documented Query GRC data in natural language · Detect inconsistencies in audit data · Draft reports and action plans AI evidence: [500]Documented by the vendor; access according to user rights, subject-matter validation by users; no product test. Source check: 2026-10-14 |
| JCADJCAD COREJC Application Development; JCAD; CORE | Solution for risk, control and compliance management for public and private sector organisations. Supports consistent risk information and reports tailored to their audience. | The CORE product page checked describes risk registers, input wizards and reports. Specific AI support in these workflows is not documented; the AI article deals with the risks of using AI.[501] [502]Not specifically documented in the source check Input validation, KRI analysis and general AI risk notes not counted as an AI function; no evidence of their absence. Sources checked: [501] [502]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| K10 VisionK10 Vision ARC Software Suite (AM, RM, CM)Headquarters: United Kingdom [505]K10 Vision Limited; K10 Vision AM; K10 Vision RM; K10 Vision CM | K10 Vision brings together internal audit, enterprise risk and compliance in the ARC Software Suite. The audit module supports risk-based planning, working papers and the follow-up of findings. Complementary modules manage risk registers, control libraries, obligations, evidence and improvement actions. Methods, workflows and reports can be adapted to different assurance and governance processes. | K10 Vision describes the ARC suite and its audit, risk and compliance modules as AI-enabled. However, the product description checked does not sufficiently distinguish specific AI work steps from general workflows and analyses.[503] [504]Not specifically documented in the source check AI-enabled and AI-enabled insight without sufficiently described input/output or AI action; therefore not a positive filter criterion. Sources checked: [503]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| Keel GRCKeel / Ask KeelHeadquarters: USA [507]The team page explicitly names Keel GRC LLC and Atlanta, Georgia, as the company seat and headquarters.Keel GRC LLC; Keel; Ask Keel; Keel Quality | Keel combines controls, requirements, risks, policies, suppliers and evidence in a shared workspace. Complementary functions cover audit planning, actions, Trust Center and quality management according to ISO 9001. | Ask Keel answers questions from the organisation's own records with linked sources. Further AI actions draft policies and risks, answer security questionnaires and check policies and evidence for gaps. The results remain editable suggestions for human review.[506] [507]Specific AI functions documented Query GRC records with source references · Draft policies and risk entries · Summarise evidence and check control gaps AI evidence: [506]According to the vendor, AI actions are included in all paid plans and limited on a credit basis. Self-service access and a demo are available; no product test by us. Source check: 2026-10-15 |
| Key2ControlKey2Control GRCHeadquarters: Netherlands [508]Key2Control GRC | Key2Control supports internal control and evidence processes with risk and standards frameworks as well as integrated audit programmes. Particularly for municipalities and public organisations, the platform offers audit files, self-assessments, control objects and work programmes. Audit scope and requirements can be linked; tasks, findings and audit trails complement modules for financial regularity, information security, data protection and continuity. | The AI Management System supports the governance of AI and the documentation of associated controls. The pages checked do not document any AI support of the product's own for a GRC work step.[508] [509] [510] [511]Not specifically documented in the source check Audit and AI management pages read and vendor domain searched for AI assistance. Governance of AI is not the same as AI in GRC. Sources checked: [509] [511]No specific available AI support documented in the source check; no product test. Source check: 2026-10-14 |
| KopexaKopexaHeadquarters: Germany [513]Kopexa GmbH; Schauenburgerstraße 116, Kiel; HRB 28912, Amtsgericht Kiel. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office. | Links risks, processes, actions and evidence for information security and other management systems. | Kopexa supports the development of risk scenarios with AI. Via MCP, external assistants can query current GRC data, such as open audit actions, within the user's permissions.[512] [513]Specific AI functions documented Develop risk scenarios · Query open audit actions via AI assistants AI evidence: [512]Documented by the vendor; MCP requires connecting an external AI assistant. Not tested in practice. Source check: 2026-10-14 |
| KRALReportActHeadquarters: Austria [516]The legal notice names KRAL GmbH in Vienna, FN 686444b, as developer and operator of ReportAct.KRAL GmbH; ReportAct; Report Act | ReportAct brings together suppliers, assets, risks, controls and evidence for several compliance frameworks. This includes data protection workflows, incident handling, policies and auditable exports. | Specialised AI functions suggest supplier classifications and control statuses, check contract clauses and draft data protection impact assessments and records of processing activities. Suggestions are shown with a justification or confidence level and require human confirmation.[514] [515] [516]Specific AI functions documented Classify suppliers · Suggest control status from evidence · Check contract clauses · Create DPIA and RoPA drafts AI evidence: [514]A demo and free entry-level option are offered. TISAX and ISO 42001 are still marked as upcoming extensions on the product page; do not assume them to be frameworks that are already available. Source check: 2026-10-15 |
| KyūdōSensei AI Advisor; Compliance GraphHeadquarters: USA [518]The terms of use name a Delaware corporation with headquarters in Costa Mesa, California.Kyudo, Inc.; Kyudo | Kyūdō links controls, risks, policies, suppliers and evidence in a Compliance Graph. The platform is aimed at regulated organisations with Microsoft security data and describes operation in the customer's own Azure tenant. | Sensei AI Advisor answers questions using linked control, policy and evidence data with source references. Answers with too low a confidence level are intended to be forwarded for human review.[517] [518]Specific AI functions documented Answer questions about controls and evidence · Support source-referenced GRC analysis AI evidence: [517] [518]Consultation and demonstration offered; check customer-side Azure prerequisites and licence scope. Statements on reliability are vendor information. Source check: 2026-10-15 |
| LaheboLahebo Risk & Compliance ManagementHeadquarters: Australia [519]The EULA displayed on the product page names Lahebo Pty Ltd, Mount Waverley, Melbourne, Australia.Lahebo Pty Ltd | Lahebo connects risk and compliance registers with a legislation library, incidents and actions. Risks can be assessed, assigned to owners and linked to legal obligations. | The vendor describes AI-supported notifications about changes to subscribed legislation. These updates support the maintenance of the legal register and the review of associated risks.[519] [520]Specific AI functions documented Detect and report legislative changes for compliance registers AI evidence: [519] [520]Demo and product access available. The specifically documented AI use case concerns regulatory updates; further AI risk assessment is not derived from it. Source check: 2026-10-15 |
| LogicGate Risk CloudTo the detailed profile | Linked GRC applications on a graph database with configurable workflows. | AI Skills draft and condense GRC content. Separately licensed GRC Agents handle, among other things, supplier assessments and recurring enterprise risk assessments; each agent run is then submitted for human review.[65] [66]Specific AI functions documented GRC text drafts · Summaries · Supplier assessments · Enterprise risk assessment AI evidence: [66]According to the FAQ, AI Skills are included in Risk Cloud subscriptions; GRC Agents are a paid add-on. The FAQ of 1 September 2026 names TPRM, AI Governance, ERM and BCM as available agent areas. Further announced areas are not counted as available here. Source check: 2026-10-14 |
| LogicManager | Enterprise-wide risk management with linked risks, controls, policies, third parties and processes. | LMX provides context-specific risk assistance. Document Analyzer extracts information from policies and reports; Risk Ripple Analytics suggests relationships and suitable controls.[67] [68]Specific AI functions documented Answer risk questions in context · Extract document information · Suggest risk and control relationships AI evidence: [68]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| Maps GroupGZOOM GRCHeadquarters: Italy [523]Maps S.p.A.; GZOOM; Maps Layers | GZOOM GRC connects business processes with risks, controls and compliance workflows. The software maps enterprise risks across the organisation, aggregates risk positions and links performance indicators with risk metrics. Recurring audits, non-conformities and corrective actions can be tracked, including deadlines and notifications. The designated GRC product thereby complements Maps' other software offerings for corporate management. | The GZOOM GRC description checked names risk aggregation, audits, controls and automatic notifications. A specific AI work step is not documented in it or in the targeted vendor search.[521] [522] [523]Not specifically documented in the source check General automation and structured risk models not equated with AI. Sources checked: [521]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| MetricStreamTo the detailed profile | Shared data model for risk, compliance, internal audit, cyber and third-party risk. | MetricStream's AI assistants answer policy questions, support audit documentation and map regulatory changes to the affected obligations and controls. From this, they can suggest gaps and next processing steps.[27] [8]Specific AI functions documented Policy information · Audit documentation · Regulatory mapping · Action suggestions AI evidence: [8]Documented as solution-specific AI assistants. The scope of delivery and activation of the individual assistants must be clarified with the provider; the page checked does not show a complete pricing or availability matrix. Source check: 2026-10-14 |
| Mitratech Global GRC Platform | Broad GRC portfolio with Alyne, Preparis, Prevalent and PolicyHub for connected specialist tasks. | ARIES answers questions about connected GRC data, creates consolidated reports and supports analyses with context-specific recommendations. Decisions remain with the user.[69]Specific AI functions documented Query connected GRC data conversationally · Create consolidated GRC reports · Analyse risks and prepare recommendations AI evidence: [69]According to the vendor, AI can optionally be activated; scope depends on the connected Mitratech products. Not tested in practice. Source check: 2026-10-14 |
| Modus ConsultingProcessFrameHeadquarters: Italy [524]Modus Consulting Srl; ProcessFrame; ProcessCloud | ProcessFrame is the platform developed by Modus for governance, risk management and compliance. It records events and audit activities, connects risk assessments with processes or assets and manages corrective actions via approvals and deadlines. Configurable variants support enterprise-wide risk management, information security and industry-specific compliance processes, for example in insurance, healthcare and public institutions. | The ProcessFrame pages checked describe configurable GRC processes, workflows and technical interfaces. A specific AI work step in the product was not documented.[524] [525] [526] [527]Not specifically documented in the source check Product pages and targeted search of the Italian vendor domain checked; no statement about all possible customer-specific extensions. Sources checked: [524] [526] [527]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| MynderMynder Core; Lara; Mynder AgentsHeadquarters: Norway [530]The privacy policy names Mynder AS, org. no. 831 377 372, with an address in Bergen, Norway.Mynder AS; Mynder Core; Lara; Mynder Agents; Mynder Trust Profile | Mynder connects security, data protection and risk documentation with supplier assessments, incidents and evidence. Trust Profiles and a Trust Center support the traceable sharing of the documented status. | Lara generates analyses and document drafts from platform content. In addition, external AI agents can support risk and supplier assessments as well as compliance checks within defined permissions. Sources, suggestions and approvals are documented.[528] [529] [530] [531]Specific AI functions documented Support risk analyses · Prepare supplier assessments · Draft compliance documents · Handle regulatory questions AI evidence: [528] [529]Demo and platform modules that can be activated. The vendor also describes Mynder Agents in customer testing. External agent connection is optional; the separate regulatory framework connector only provides public regulatory content and no customer data. Source check: 2026-10-15 |
| NarisNARIS-GRC; Sensus BPM OnlineHeadquarters: Netherlands [533]NARIS-GRC; Naris GRC; Sensus Process Management; Sensus BPM Online | NARIS-GRC links risks, controls, compliance obligations, audits and incidents according to the Three Lines model. Complementary functions cover data protection, information security and insurance. Through the merger with Sensus Process Management, the group extends its links to process architecture and process modelling; according to the vendor, the integration is being developed further. | The integrated AI assistant Sara supports the definition of suitable risks and controls on the basis of the organisational context. Suggestions can be linked with existing processes, controls, causes and consequences in the NARIS-GRC system and adopted into the platform.[532] [533] [534] [535] [536] [537] [538]Specific AI functions documented Suggest context-specific risks and controls · Link risk information with processes, causes and consequences · Adopt AI suggestions into the GRC system AI evidence: [537]The vendor describes Sara as an assistant already integrated into NARIS-GRC and offers a demo. Confirm licence, activation and data processing before procurement; no product test by us. Source check: 2026-10-15 |
| Navigate / AltaraAURA GRC; AURA Regulatory IntelligenceHeadquarters: South Africa [540]Altara describes itself as the technology unit of Navigate Compliance Group (Pty) Ltd, a South African company in Johannesburg. AURA GRC names Navigate Group (Pty) Ltd in the footer. These related brands are counted once.Navigate Group (Pty) Ltd; Navigate Compliance Group (Pty) Ltd; Navigate Compliance; Altara AI; AURA GRC; AURA Regulatory Intelligence | AURA connects regulatory obligations and changes with controls, policies, assessments, findings and actions. Altara is the technology unit of Navigate Compliance Group and runs the AURA product family within the same provider group. | The AURA GRC product page describes supervised language models and an audit intelligence function: uploaded policies, reports and control evidence are checked for potential gaps, weaknesses and regulatory risks. Results complement the documented review and action process.[539] [540] [541]Specific AI functions documented Analyse compliance documents · Check control evidence for gaps · Prepare findings for human review AI evidence: [539]Demo and agreed implementation; the platform is offered with optional managed compliance services. AURA GRC and the current Altara presentation set different priorities; confirm available audit intelligence functions in the specific offer. Source check: 2026-10-15 |
| Ncontracts | Risk, compliance, audit, BCM and supplier solutions for financial organisations; the portfolio also includes Quantivate and Venminder. | Ncontracts documents AI for reviewing supplier contracts, classifying complaints and answering regulatory questions with sources. These functions belong to specific products of the suite.[70] [71]Specific AI functions documented Review supplier contracts · Classify complaints and potential compliance issues · Answer regulatory questions with sources AI evidence: [70]Documented by the vendor as functions of individual Ncontracts products, not a separate general AI platform. Not tested in practice. Source check: 2026-10-14 |
| NEXISNEXIS GRCHeadquarters: Germany [544]Nexis Group GmbH; Rudolf-Vogt-Straße 6, Regensburg; HRB 20640, Amtsgericht Regensburg. The current legal notice names the Group GmbH. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office.QSEC; product history: WMC Wüpper | Connects requirements, risks, controls and operational resilience. Within the NEXIS platform, the solution can be linked with identity and access governance. | NICO and the AI functions of the NEXIS platform support identity governance: anomaly and SoD detection, recertification recommendations and the creation of governance documentation. This documents the IAM area, not all NEXIS GRC modules.[542] [543] [544]Specific AI functions documented Detect access anomalies and SoD conflicts · Support recertifications · Draft IAM governance documentation AI evidence: [543] [542]Documented by the vendor for NICO/identity governance; the customer's own enterprise LLM and MCP connection are supported. Configure the scope; no product test. Source check: 2026-10-14 |
| Njordium Cyber GroupInspect360 GRC; Inspect360 TPRMHeadquarters: Sweden [546]Njordium Cyber Group AB; Inspect360; Inspect360 GRC; Inspect360 TPRM | Inspect360 GRC links requirements, policies, risks, controls, evidence and audits in a continuously maintained register. Owners, approvals and review dates make decisions traceable; accepted risks are given documented exceptions with an expiry date. The complementary TPRM product maps external dependencies. The GRC solution was officially presented in October 2026 and is offered as SaaS or for self-hosted operation. | Inspect360 GRC uses AI to detect missing information, explain anomalies, extract obligations from documents and suggest review intervals.[545] [546] [547]Specific AI functions documented Detect gaps in GRC records · Explain status and anomalies · Extract obligations from documents · Suggest review intervals AI evidence: [545]Documented by the vendor; decisions and responsibility remain with the responsible persons; no product test. Source check: 2026-10-14 |
| NormioNormio AI; Normio GOV; Normio IT; NoraHeadquarters: Netherlands [550]The provider describes Normio as a Dutch software company, KvK 42110935, with its registered office in Lisse. No specific legal form is derived from this.Normio; Nora Compliance Assistant | Normio brings together self-assessments, risks, tasks and evidence for digital compliance. In addition to AI Act topics, the offering covers information security, data protection and Dutch requirements for public organisations. | The integrated AI assistant Nora answers regulatory questions with references to the knowledge base and relevant articles. It also explains the respective workflow in the application. The terms of use also describe AI-generated document drafts.[548] [549] [550]Specific AI functions documented Answer regulatory questions with sources · Explain compliance work steps · Support document drafts AI evidence: [548] [549]Monthly subscriptions with a 14-day trial; Nora is included in paid modules and can be switched off per team. Source check: 2026-10-15 |
| NorthGRCNorthGRC PlatformHeadquarters: Denmark [554]Neupart; Neupart A/S; neupartOne; Secure ISMS | NorthGRC connects regulatory requirements, tasks, risks, controls and evidence in a shared GRC platform. Work already documented can be mapped to several supported frameworks. Risk assessments, supplier and incident management and reports support ongoing processing. Roles and delegated tasks enable use across several companies, departments and locations. | NorthGRC documents frameworks and workflows for AI governance as well as connected GRC data. A specific AI-supported work step within the platform is not documented in the sources checked.[551] [552] [553]Not specifically documented in the source check AI governance and general use of external assistants not counted as a product function; no evidence of the absence of AI. Sources checked: [551] [553]No specific AI assistance documented in the sources checked. Source check: 2026-10-14 |
| NovasecurMyNovasecur Advanced; MyNovasecur RévolutionHeadquarters: France [556]MyNovasecur | MyNovasecur Advanced combines risk mapping, internal controls, audit recommendations, actions and business continuity. The platform supplements these functions with analyses of risk dependencies and management reports. Further modules address compliance, cyber risks and insurance; according to the vendor, standardised components can be adapted to individual processes. | MyNovasecur describes AI and predictive analytics for detecting previously unknown risk dependencies and deriving operational recommendations.[555] [556]Specific AI functions documented Detection of risk dependencies · Derivation of operational risk recommendations AI evidence: [555]Documented by the vendor; no product test. Source check: 2026-10-14 |
| OLING Management et TechnologieMAPSIHeadquarters: France [558]MAPSI; OLING Management & Technologie | MAPSI connects risks, controls, internal audits, evidence and actions in a shared SaaS platform. Organisations can assign requirements and responsibilities, document deviations and track improvements. OLING develops and supports the software itself; the fields of application described range from internal control systems and risk management to data protection, information security and continuity management. | The MAPSI and OLING product pages checked describe workflows, evidence, audits and risk registers. A specific AI work step is not documented in the source check.[557] [558] [559] [560]Not specifically documented in the source check Product pages read and vendor domains searched specifically for intelligence artificielle. No evidence does not mean that AI is absent. Sources checked: [557] [560] [559]No specific available AI support documented in the source check; no product test. Source check: 2026-10-14 |
| OMNINETOMNITRACKER GRC CenterOMNINET is the provider; OMNITRACKER product family. | Connects audits, assessments and other GRC workflows. The shared database enables relationships with IT service processes; cloud, hybrid and on-premise operating models are offered. | OMNINET documents an AI platform for document and service processes. However, a specific AI work step within the GRC Center is not documented in the sources checked.[561] [562] [563]Not specifically documented in the source check AI functions for ITSM and a general article on AI risk management are not sufficient evidence of AI in the GRC product. Sources checked: [561] [562] [563]AI platform offered; specific integration into GRC work steps not documented in the source check. Source check: 2026-10-14 |
| OneAdvancedRisk Management / Governance & RiskHeadquarters: United Kingdom [566]Decision Time; Advanced Computer Software Group; OneAdvanced Governance & Risk | OneAdvanced brings together strategic, operational and project-related risks in configurable registers. Owners, review dates, actions and a shared control library structure the processing. Reports show gross, net and target risks. The solution, which emerged from Decision Time, is aimed at organisations that want to combine risk management and board work on a shared governance foundation. | Risk Assist structures risk descriptions and suggests suitable controls and mitigation measures on the basis of the risk entries.[564] [565]Specific AI functions documented Standardise risk descriptions · Suggest controls · Draft mitigation measures AI evidence: [564]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| OnspringOnspring GRC Suite | Configurable applications connect risks, controls, compliance and audits. Business units can link registers, workflows and reports on the same platform. | Onspring AI detects duplicate risk and incident reports, extracts information from supplier SOC 2 reports and suggests context-specific wording.[567]Specific AI functions documented Detect duplicate risks and incidents · Evaluate SOC 2 reports and fill fields · Complete GRC texts AI evidence: [567]Documented by the vendor; no product test. Source check: 2026-10-14 |
| Opal GRCOpalHeadquarters: USA [569]The company page explicitly describes Opal as US-based and names Jeff Moore as founder. Full legal company name not stated in the pages checked; not equated with other Opal products.Opal; Optimal GRC | Opal is aimed at small audit and compliance teams with SOX and other control requirements. The platform connects control operation and testing with risks, audit projects, policies, supplier assessments and attestations. | The product description describes AI for analysing evidence, assessing control designs and preparing audit findings. Process descriptions, risk control matrices and flowcharts can be produced from process interviews. According to the provider, AI results only enter the formal record after human acceptance.[568] [569] [570]Specific AI functions documented Analyse control evidence · Draft audit findings and remediation · Convert process interviews into risk control matrices AI evidence: [568] [570]Young provider with a demo and a programme for early customers. Specific AI functions documented; confirm scope and exact contracting company before procurement. Source check: 2026-10-15 |
| OperlityOperlity GRC; Helios AI AssistantHeadquarters: India [574]Contact page and terms name Operlity Technologies Private Limited in Bangalore, India; the current footer, by contrast, names Operlity GRC Solutions Private Limited as an Ejyle company. Both names documented, counted as one provider group; clarify the exact contracting entity before procurement.Operlity Technologies Private Limited; Operlity GRC Solutions Private Limited; Ejyle; Helios AI Assistant | Operlity connects risk and compliance management with audits, policies, third parties and evidence. The Helios assistant accesses the data of the respective GRC programme. | Helios conducts risk and compliance assessments as a dialogue, records answers and evidence and creates structured summaries for approval by the reviewer. Teams can also ask questions about the risk register, open findings and control status.[571] [572] [573] [574] [575]Specific AI functions documented Conduct assessments in dialogue · Summarise answers and evidence for reviewers · Query GRC programme data AI evidence: [571] [572]Demo and separate enterprise subscriptions. According to the vendor, model, region and deployment are configurable; a self-hosted model configuration is also offered. Confirm contractual scope and actually available integrations. Source check: 2026-10-15 |
| Optial GRC SmartStart | Connected modules for risks, compliance, audit, incidents, BCM and planning; deployable as SaaS, private cloud or on the customer's own infrastructure. | The Optial pages checked describe GRC automation, analytics and AI governance. General statements about AI in GRC software do not name any AI work step clearly attributed to SmartStart.[72] [73] [576]Not specifically documented in the source check General market overview and predictive analytics without attribution to AI not sufficient; no evidence of the absence of AI. Sources checked: [72] [576]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| Optro (formerly AuditBoard)To the detailed profile Headquarters: USA [577]The vendor names Optro, Inc., Wilmington, USA. According to an announcement of 6 May 2026, Midship was acquired; the same source names FairNow as an earlier acquisition. These product brands are not counted additionally. A complete technical integration is not inferred from this.AuditBoard; Midship; FairNow | Audit, controls, enterprise risk and information security on a shared GRC platform. | Optro describes AI functions for mapping controls, collecting evidence and control testing, as well as for supporting supplier assessments. Agent decisions and evidence are intended to remain traceable for subject-matter review.[74] [75]Specific AI functions documented Control mapping · Evidence collection · Control testing · Supplier assessment AI evidence: [75]Documented in the current Optro AI portfolio; specific product modules, activation and contractual scope must be checked separately. The presentation provides for configurable human oversight. Source check: 2026-10-14 |
| OracleFusion Cloud Risk Management and Compliance | Addresses risks and controls in Fusion Cloud ERP and HCM. The focus is on segregation of duties, access monitoring, financial controls and transaction analyses. | Oracle Fusion Cloud Risk Management and Compliance describes AI agents for financial controls, audit testing and access risks. They explain authorisation risks and support reviews of business transactions and segregation of duties.[578]Specific AI functions documented Explanation of access risks · Support for financial controls · Audit testing with Assurance Advisor AI evidence: [578]Documented by the vendor; no product test. Source check: 2026-10-14 |
| ORCA OptiOpti Core / Opti AssistHeadquarters: Australia [581]The privacy policy identifies ORCA Opti Software Ltd as an Australian company with its principal place of business in Queensland.ORCA Opti Software Ltd; Opti Core; Opti Assist | GRC system for risks, controls, incidents, policies, assets, suppliers and actions with mapped compliance frameworks. | Opti Assist answers questions about internal policies and obligations from the organisation's documents. AI agents handle event-driven tasks; interactions and workflow decisions are logged as governance evidence.[579] [580] [581]Specific AI functions documented Query policies and obligations in natural language · Support supplier onboarding and policy approvals · Generate governance evidence from interactions AI evidence: [580] [579]Opti Assist can be started free of charge; Opti Core is offered in paid plans with the assistant included and tiered AI quotas. Source check: 2026-10-15 |
| Origami Risk | Origami Risk combines ERM, internal controls, compliance, third-party risk and business continuity. | The AI Concierge supports record creation, note drafts and bulk changes with confirmation before execution. Risk Assessment Intelligence accompanies risk modelling and explains deviations between model results and human assessments.[76] [77]Specific AI functions documented Draft GRC records and notes · Support risk modelling · Compare model results with risk assessments AI evidence: [77]According to the release announcement of 28 September 2026, available to customers. Actions with confirmation; model assumptions remain under human control. No product test. Source check: 2026-10-14 |
| Oxial GRC | Risks, controls, audits, incidents and actions with shared directories; complementary specialist areas such as IT security and data protection. | Oxial mentions integrated AI/ML for analyses and simulations. However, the product page checked does not describe an AI work step that is sufficiently specific and traceable for the filter.[78] [79]Not specifically documented in the source check Product page read in full and vendor domain searched specifically. Statements on AI/ML simulations remain without specified inputs, results or product workflow. Sources checked: [78]AI/ML advertised in general terms; specific GRC functional scope not documented in the source check. Source check: 2026-10-14 |
| PAN SoftwareRiskware / SOCRAITESHeadquarters: Australia [584]PAN Software names Melbourne, Australia as its location; the terms of use identify PAN Software Pty. Ltd. as provider and rights holder.PAN Software Pty. Ltd.; RiskWare; Riskware R3; SOCRAITES | Integrated platform for enterprise risk, compliance, internal controls, audit, information security and business continuity with additional occupational health and safety modules. | The embedded SOCRAITES copilot supports natural-language, context-specific conversations about enterprise risks and helps work out overlooked risk aspects and possible mitigation measures.[582] [583] [584] [585]Specific AI functions documented Analyse enterprise risks in dialogue · Identify overlooked risk aspects · Prepare risk mitigation measures AI evidence: [582] [585]SOCRAITES is embedded in the current module description and is offered via a product demo; the product blog documents its introduction in RiskWare R3. Source check: 2026-10-15 |
| PiraniPirani | Connects operational risk, information security, compliance, money laundering risks and internal audits. Country-specific links to Latin American regulatory frameworks complement documentation and continuity functions. | Pirani Copilot suggests risks from the organisational context, drafts controls and provides a suggested assessment of the control design for subject-matter adjustment.[586] [587]Specific AI functions documented Suggest and create risks · Suggest controls · Prepare control design assessment AI evidence: [587]According to the help documentation, available in ORM, Compliance, ISMS and AML; can be switched off organisation-wide, adoption and assessment by users. No product test. Source check: 2026-10-14 |
| ProcessGeneProcessGene GRC Software Suite | Aimed at companies with several subsidiaries. A shared process and control model connects central requirements with local variants as well as risk, compliance and audit workflows. | The GRC product page checked describes automation, shared process models and control management. A specifically named AI function is not documented in the source check.[588]Not specifically documented in the source check Product page and targeted vendor search for artificial intelligence checked; third-party directories with generic feature lists not used as evidence. Sources checked: [588]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| Protecht ERMTo the detailed profile | Configurable risk registers, controls, compliance and resilience with connected data, workflows and reports. | Cognita supports the capture of risk and incident data, explains content in context and creates summaries with themes and prioritised indications from reports. Further agentic workflows are shown as roadmap.[80] [81] [82]Specific AI functions documented Edit risk and incident forms · Summarise reports on risks and incidents · Derive anomalies and prioritised indications from reports AI evidence: [81]According to the vendor, Cognita is available and can optionally be activated. Agentic TPRM/BCM automation and Regulatory Intelligence remain on the roadmap. Not tested in practice. Source check: 2026-10-14 |
| ReadiNow | ReadiNow combines pre-built GRC applications with a no-code platform for the organisation's own workflows. | ReadiNow describes configurable AI agents that capture incidents from natural-language reports, triage them and link them with data. Risks can thus be transferred into further action and compliance workflows.[83] [84]Specific AI functions documented Incident capture · Incident triage · Triggering of risk actions AI evidence: [83]Configurable ReadiAgents documented by the vendor within or in connection with existing GRC processes; no product test. Source check: 2026-10-14 |
| Regulativ.aiRegulativ Regulatory Compliance Automation PlatformHeadquarters: United Kingdom [592]Regulativ.AI Ltd; Regulativ; LCA-Hub | Regulativ.ai brings together regulatory requirements, risk and audit management as well as third-party assessments in one platform. A shared control library connects several frameworks; workflows organise assessments, policy versions, approvals and evidence. Specialised AI agents support gap analyses, policy drafts, control mappings and the preparation of audit documentation. The solution is aimed, among others, at financial institutions and other regulated companies. | Documented by the vendor: specialised AI agents analyse compliance gaps, draft context-specific policies, map controls to comparable requirements of other frameworks and prepare evidence or audit reports.[589] [590] [591] [592]Specific AI functions documented Analyse compliance gaps · Draft policies · Map controls across frameworks · Prepare audit documentation AI evidence: [589]Documented by the vendor as existing functions of the platform offered; no pilot or planned status in the functional description checked. Not tested in practice; agree specific agents and mode of operation. Source check: 2026-10-14 |
| RegurooCompliance Command CentreHeadquarters: South Africa [595]Operator EAM ECOM (Pty) Ltd, registration number 2024/262476/07; terms and conditions under South African law, billing in rand.EAM ECOM (Pty) Ltd | Compliance management for South African regulatory frameworks with obligations, controls, evidence versions, audit reports and alerts. | AI evaluates regulatory changes, describes their impact and maps them to controls. It flags gaps and supports the creation of audit reports.[593] [594] [595]Specific AI functions documented Evaluate regulatory changes · Map impact on controls · Prepare audit reports AI evidence: [593] [594]Free entry-level option, paid Business plan and customised enterprise offerings publicly described; customer login and demo available. Source check: 2026-10-15 |
| Remedy / RiskCognitionRemedyHeadquarters: USA [598]The vendor names RiskCognition Corporation with an address in Rockaway, New Jersey. Not to be grouped with ITSM, tax or healthcare products of the same name.RiskCognition Corporation; goremedy.ai; Remedy GRC | Remedy connects enterprise risk, third parties, audit and information security with regulatory compliance. Requirements, controls, policies, evidence and remediation actions are linked to one another. | According to the product page, AI reads regulatory texts, extracts individual obligations and maps them to controls. It suggests remediation actions and policy changes and groups controls with similar content for review of overlaps.[596] [597] [598]Specific AI functions documented Extract regulatory obligations and map controls · Create remediation and policy drafts · Group similar controls semantically AI evidence: [596] [597]Demo offered with specific functional descriptions. The advertised 200+ agents are at the same time marked as roadmap; no complete current availability is inferred from this. Confirm individual modules and agents contractually. Source check: 2026-10-15 |
| Resolver | Resolver connects risk management, internal controls and compliance with incidents, security work and investigations. | Resolver describes AI for intake and triage of investigation cases, for case summaries and for extracting key information from witness statements and case notes. The evidence relates to Investigation Case Management.[85] [86]Specific AI functions documented Take in and assign investigation cases · Summarise case files · Analyse witness statements and case notes AI evidence: [86]Documented by the vendor for the investigation module; licence scope according to offer. No product test. Source check: 2026-10-14 |
| Risk CognizanceRisk Cognizance GRC / AI Agentic GRC ToolsHeadquarters: USA [600]The contact page names 1250 Broadway, New York, NY 10001. The terms of use identify Risk Cognizance LLC. Not to be confused with RiskCognition Corporation and its Remedy platform.Risk Cognizance LLC; RiskCognizance | Risk Cognizance offers a modular GRC platform for companies and security service providers. It connects compliance, enterprise risk, policies, audit, third parties and technical security information; a multi-tenant variant supports several client organisations. | The agent description names tracking evidence and mapping new regulatory requirements. A workflow described checks compensating controls after a vulnerability finding and creates a draft risk acceptance for human review.[599] [600] [601]Specific AI functions documented Coordinate evidence-related tasks · Map requirements and controls · Prepare risk acceptance drafts AI evidence: [599]Product page and demo offering document the agent functions. Specific agents, approval limits and contractual scope must be confirmed in the procurement process; no product test. Source check: 2026-10-15 |
| Risk WizardRisk WizardRisk Wizard | Combines risk registers, compliance tasks and incident management. Assessment matrices, responsibilities, reminders and reports support shared risk processes. | No specific AI work step is documented in the Risk Wizard product sources checked. Rule-based notifications, dashboards and risk registers do not count as AI for this filter.[602] [603] [604]Not specifically documented in the source check Product functions and official cyber risk article checked; AI topics in the blog navigation do not document an AI product function. Sources checked: [602] [603] [604]AI availability not specifically documented in the source check. Source check: 2026-10-14 |
| riskHiveEnterprise Risk ManagerHeadquarters: United Kingdom [605]riskHive Group; riskHive Software Solutions Limited; riskHive Technical Services Limited; riskHive ERM | riskHive offers configurable software for the enterprise-wide management of risks and opportunities. Existing risk registers can be imported and consolidated at project, programme and portfolio level. The platform supports different assessment methods, consolidated analyses and reports. It is also aimed at organisations with complex undertakings and several risk registers maintained in parallel. | No specific AI work step was documented in the sources checked on riskHive ERM and the analysis tools. Configurable registers, reports and Monte Carlo simulations alone are not AI evidence.[605] [606] [607]Not specifically documented in the source check Product pages and targeted vendor search checked. No evidence means no statement about the general absence of AI. Sources checked: [605] [606] [607]No specific AI work step documented in the source check; no statement about the absence of AI. Source check: 2026-10-14 |
| RISKIDRISKIDRISKID | Focus on collaborative risk identification and assessment. Internal controls, regulatory requirements and evidence complement the risk process. | No specific AI support for RISKID risk analysis is documented in the source check. The vendor page describes collaborative risk management; general references to possible use of AI do not document a product function.[608] [609]Not specifically documented in the source check Product overview and indexed vendor brochure checked; general methodological tips not counted as an AI function of the product. Sources checked: [608] [609]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| RiskMateRiskMateHeadquarters: United Kingdom [612]RiskMate Limited; not the platform of the same name riskmate.dev | RiskMate connects risks, controls, actions, policies and incidents in a shared application. Risk appetite and categories structure assessments; tasks follow up on gaps in controls. Roles for owners, handlers and risk managers support the three lines of defence model. Exportable reports enable results to be shared with governing bodies and other stakeholders. | The RiskMate product page checked describes risk registers, incidents, policies and standard reports. An AI-supported work step is not specifically documented there or in the targeted domain research.[610] [611]Not specifically documented in the source check RiskMate was checked at riskmate.uk, not the platform of the same name riskmate.dev; no evidence of the absence of AI. Sources checked: [610]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| RiskNowRiskNow Risk Intelligence PlatformHeadquarters: Netherlands [614]RiskNow B.V.; RiskNow Platform | RiskNow brings together risks, controls, evidence, incidents, suppliers and compliance frameworks in a connected data model. Teams assess inherent and residual risks, test controls and map them to several regulatory frameworks. The platform also offers assessments, policy management and audit trails as well as functions for data protection, continuity planning and the DORA register of information on ICT service providers. | RiskNow names AI-supported control recommendations, support in testing controls and guidance on remediating incidents and risk issues.[613] [614]Specific AI functions documented Control recommendations · Support for control testing · Guidance on incident remediation AI evidence: [613]Documented by the vendor; no product test. Source check: 2026-10-14 |
| RiskonnectTo the detailed profile Camms; Sword GRC; Castellan | GRC, insurable risks, claims management and resilience with shared data relationships. | Riskonnect Intelligent Risk creates summaries of documents, suggests risks and controls and supports the mapping of regulatory changes to policies and controls.[87] [88] [615] [616] [617]Specific AI functions documented Document summary · Risk suggestions · Control suggestions · Regulatory mapping AI evidence: [88]According to the provider, the AI functions are activated via opt-in. Available functions and configuration depend on the Riskonnect product used; a universal functional scope was not checked. Source check: 2026-10-14 |
| RiskRhino | Links business processes, risks, controls and audits with tasks, evidence and actions across the lines of defence. | RiskRhino uses AI to extract control requirements from policies and ISAE reports, maps them to the internal control framework and shows documentation gaps as well as suggestions for improvement.[89] [90] [91]Specific AI functions documented Extract control requirements from documents · Map requirements to internal controls · Analyse control and evidence gaps · Suggest improvements to the control framework AI evidence: [90]Documented by the vendor; no product test. Source check: 2026-10-14 |
| RiskSmartRiskSmart GRCHeadquarters: United Kingdom [620]Risk Smart Limited; not TS Imagine RiskSmart or RiskSmart+ | RiskSmart connects risk and control management with modules for policies, compliance, internal audits and third-party risk. Organisations can adapt taxonomies, registers and responsibilities and link risks with controls and incidents. Dashboards and notifications support ongoing monitoring. The platform addresses, among others, financial service providers, legal service providers and mid-sized companies. | RiskSmart documents AI input aids, context-specific suggestions and data quality checks within the risk and control workflows. Results remain reviewable; responsibility lies with the team.[618] [619]Specific AI functions documented Edit risk and control records with suggestions · Check data quality in GRC workflows AI evidence: [619]Documented by the vendor as currently embedded support. Human review intended; not tested in practice. Source check: 2026-10-14 |
| RiskTechRiskTech GRCRiskTech | Provider for Vietnamese companies with compliance, internal audit and risk modules. Shared risk and control registers, evidence storage and role models support step-by-step integration. | RiskTech describes AI suggestions for missing controls, uncovered risks in the audit plan and the impact of regulatory changes on existing obligations.[621]Specific AI functions documented Suggest control gaps and controls · Check audit coverage · Map regulatory changes AI evidence: [621]Documented by the vendor as assistance that can be switched off, with sources and role-based review/approval. No product test. Source check: 2026-10-14 |
| RiskuityRiskuity AI-Assisted GRCHeadquarters: USA [624]Longevity Consulting LLC is named as the vendor in the product launch; the vendor's privacy policy names Washington, DC 20009.Longevity Consulting LLC; Riskuity | GRC platform for organisations and public authorities with controls, evidence, risks and audit planning. | AI suggests framework and control mappings, detects evidence gaps and creates drafts of action plans and audit documents. Responsible persons review and approve the suggestions.[622] [623] [624]Specific AI functions documented Map controls · Detect evidence gaps · Create audit and action drafts AI evidence: [622] [623]Commercial product with demo and pilot; AI outputs require human approval. Source check: 2026-10-15 |
| RiskWatch | Risk registers and assessments with a shared control library for compliance, physical security, policies, cyber and supplier risks. | The AI risk management page checked describes governance of AI systems, including inventory, assessments and controls. This does not document any AI support of the product's own for these GRC work steps.[92] [93]Not specifically documented in the source check Targeted vendor search mainly returned competitor overviews. RiskWatch by Sift is a different product and was not attributed. Sources checked: [93]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| RUBIQKAIRORUBIQ; Guideline BizTech; KAIRO | KAIRO connects risks, controls, regulatory mappings and audit evidence. The shared RUBIQ database can be connected with customer and supplier reviews. | RUBIQ describes AI specialists for triage, screening, drafts, audit preparation and reports on shared governance data. The specialists make recommendations; decisions and approvals remain with the team.[625]Specific AI functions documented Pre-structure and screen compliance cases · Prepare audits · Create governance reports and drafts AI evidence: [625]Documented by the vendor within the connected RUBIQ products; specific package and implementation terms on request. Not tested in practice. Source check: 2026-10-14 |
| RuleguardRuleguard GRC PlatformHeadquarters: United Kingdom [628]Strategic Software Applications Ltd; Axiom HQ | Ruleguard connects operational risks, controls, compliance monitoring, regulatory change and audits for regulated financial firms. Risk registers, self-assessments, loss events and evidence remain linked to one another. AI supports the analysis of new requirements and suggests how they should be mapped; configurable review and approval stages keep the responsible business owners involved in the decision-making process. Changes and justifications are logged. | Documented by the vendor: AI agents extract key statements, dates and scopes of regulatory changes, suggest their applicability to units and business lines and check linked risks and control gaps. Results are forwarded for human review in accordance with configured rules.[626] [627] [628] [629]Specific AI functions documented Extract requirements and deadlines · Suggest applicability · Analyse risk and control gaps AI evidence: [626]Documented by the vendor as a current platform function; no pilot or planned status on the product page checked. Not tested in practice; agree specific modules and approval configuration. Source check: 2026-10-14 |
| SafePaaSARCPaaS / AccessPaaS / MonitorPaaSARCPaaS; AccessPaaS; MonitorPaaS; SafeIQ | SafePaaS offers shared management of audits, risks and compliance requirements. ARCPaaS connects audit planning, findings, risk assessment and the mapping of controls to requirements. Complementary applications monitor authorisations, segregation of duties, transactions and configuration changes in business systems. Tasks and reports support the handling of identified gaps across several applications. | SafeIQ answers questions about identity and access risks in natural language. It searches SafeInsights data within the user's permission context and links answers with the underlying accounts, risks or SoD findings.[630] [631] [632]Specific AI functions documented Natural-language query of access risks · Investigation of SoD violations · Identification of orphaned or inactive identities AI evidence: [631]Documented by the vendor; no product test. Source check: 2026-10-14 |
| SahlSahl GRCHeadquarters: Saudi Arabia [635]Vendor information: Saudi platform with an office in Riyadh. The terms of use checked do not name a full legal company name and contain an incomplete template sentence. Legal entity and contract documents remain to be checked separately.Sahl GRC; getsahl.io | Sahl brings together policies, controls, evidence, risks and supplier assessments in a GRC platform with a focus on Saudi Arabia and the MENA region. Teams can map requirements of several frameworks, track document versions and compile audit documentation. Audit management and a Trust Center complement ongoing compliance work and communication with customers. | The product page describes AI for mapping evidence to controls, for detecting outdated documentation and for initial policy drafts for human review.[633] [634] [635] [636] [637]Specific AI functions documented Map evidence to controls of several frameworks · Flag outdated or expiring evidence · Create policy drafts for review AI evidence: [633]Documented by the vendor; agree set-up and specific functional scope with the provider. No product test. Source check: 2026-10-14 |
| SAI360Plural Policy | GRC with ethics and compliance training, policies, controls and incidents. | SAI360 describes AI for suggesting answers in assessments, analysing policies and evidence and mapping regulatory requirements to controls. Risk signals and incidents can also be examined for patterns.[94] [95] [638]Specific AI functions documented Suggest assessment answers · Analyse evidence and policies · Map regulation to controls · Detect risk patterns in incidents AI evidence: [95]Embedded in the platform; available data and tasks depend on the modules used. Human validation remains intended. No product test. Source check: 2026-10-14 |
| SAP GRCTo the detailed profile Headquarters: Germany [639]SAP SE; Walldorf; HRB 719915, Registergericht Mannheim. | Modular GRC suite closely linked to SAP processes, financial data and authorisation management. | SAP describes a Governance Assistant with specialised AI agents for control monitoring, audit evidence, the identification of risks and suggestions for remediating compliance issues.[96] [97]Specific AI functions documented Configure and support control monitoring · Analyse audit evidence · Create risk drafts from signals · Suggest actions to remediate compliance issues AI evidence: [97]Documented by the vendor; availability, licence and specific scope of agents to be checked per SAP solution. No evidence of general activation of all agents shown; not tested in practice. Source check: 2026-10-14 |
| SASGovernance and Compliance ManagerAI Governance Manager and Model Risk Management are further SAS products. | Centralises risks, controls, incidents and policies. Risk indicators, actions and audits can be connected with SAS analytics and data management tools. | SAS describes AI-supported analyses in Governance and Compliance Manager on Viya to identify new risk signals from risk, control, incident and audit data and to support the prioritisation of cases and actions.[640] [641]Specific AI functions documented Evaluate GRC data for new risk signals · Support prioritisation of incidents and actions AI evidence: [640] [641]Documented by the vendor for GCM on Viya; clarify analytics configuration and licence scope. No product test. Source check: 2026-10-14 |
| SAVISCONGRC-COCKPIT | Connects requirements, risks and actions of different management systems. Supports risk, compliance, information security and data protection management on a shared database. | No specific available AI function is documented for the GRC-COCKPIT in the source check. Publicly mentioned AI plans for support and explanations are kept separate from documented product functions.[642] [643]Not specifically documented in the source check Product page and indexed company announcement checked. General future plans without a clear GRC work step are not sufficient even for announced. Sources checked: [642] [643]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| Schleupen R2CHeadquarters: Germany [645]Schleupen SE; Ettlingen; HRB 741856 Amtsgericht Mannheim. | R2C product family for risk, ICS, compliance, policies and information security with analytics. | In business continuity management, Schleupen documents AI-supported suggestions for event descriptions and actions. No blanket AI coverage of all R2C modules is derived from this.[98] [99] [644]Specific AI functions documented Suggest BCM event descriptions · Draft the content of resilience measures AI evidence: [644]Documented by the vendor for BCM; agree the specific licence and module scope. Not tested in practice. Source check: 2026-10-14 |
| SentrientSentrient GRC / AI AgentsHeadquarters: Australia [646]Sentrient Pty Ltd, ABN 63 609 044 788; business address in Melbourne according to the provider footer.Sentrient Pty Ltd | GRC platform for risks, controls, incidents, policies, audits and registers. Complementary HR and training modules are part of the broader offering. | Configurable AI agents read, search, supplement and update GRC records. Examples are control re-checks, incident triage and risk reviews; write actions can be submitted individually for approval.[646]Specific AI functions documented Support control and risk reviews · Pre-sort incidents · Maintain GRC registers with auditable actions AI evidence: [646]Offered as a product function with a demo. Model, run limits and permissions are configurable per agent; external connectors have their own permission limits. Source check: 2026-10-15 |
| ServiceNow Integrated Risk ManagementTo the detailed profile | Risk and compliance in connection with IT, cybersecurity and operational workflows. | Otto for IRM summarises findings and supports the identification of potential risks and the review of controls with generative AI within existing IRM workflows.[100] [6]Specific AI functions documented Findings summary · Risk indications · Control review AI evidence: [6]Requires the corresponding IRM AI functions and licences. The documentation names restrictions by region, model offering and operating environment; not all functions are available in regulated or self-hosted environments. Source check: 2026-10-14 |
| SimpleRiskSimpleRisk / AI ExtraHeadquarters: USA [651]The SimpleRisk data sheet linked from the vendor website explicitly names headquarters in Texas, USA. The current legal form and full ownership structure were not separately verified.SimpleRisk Core; SimpleRisk AI Extra | SimpleRisk supports the capture, assessment and treatment of risks as well as work with controls, policies and audit evidence. Companies can track actions and link compliance requirements with existing documents. In addition to the core system, extensions are available. The AI Extra supplements these workflows with reviewable suggestions and drafts for further processing by the responsible business owners. | The technical documentation describes document-control mappings with justification, suggestions for risk mitigation and drafts for control tests and policies. AI outputs are intended to be reviewed by operators before being adopted into the authoritative data. Some of the functions require the AI Extra and a configured model provider.[647] [648] [649] [650] [651]Specific AI functions documented Control-document mapping · Risk mitigation suggestions · Control test drafts · Policy drafts AI evidence: [647] [648]Documented by the vendor; AI Extra and a configured model provider required for the additional functions described; not tested in practice. Source check: 2026-10-14 |
| SkylenComplyTrainHeadquarters: Denmark [654]The privacy policy names Skylen Solutions ApS, CVR 45855287, with its registered office in Copenhagen, Denmark.Skylen Solutions ApS; ComplyTrain; ComplyTrain by Skylen | ComplyTrain connects quality management, audits, risks, controlled documents, requirements and supplier assessments. The offering is aimed in particular at regulated supply chains and documents the connection between requirements, actions and evidence. | AI agents answer questions from approved company documents and draft standard-related document sections. Missing information is flagged; suggested changes appear with a justification for acceptance or rejection. Approved documents are locked against subsequent AI changes.[652] [653] [654]Specific AI functions documented Draft compliance documents · Answer requirement-related questions · Flag document gaps · Support audit preparation AI evidence: [652]Commercial platform with trial access and a demo. AI creates reviewable suggestions; document approvals remain human decisions. Source check: 2026-10-15 |
| Smart Global GovernanceSmart Global GovernanceHeadquarters: France [656]Smart Global Privacy; Smart Global Governance France | Smart Global Governance offers a modular software offering for compliance, risk management and the management of governance tasks. The applications are intended to bring together regulatory requirements, assessments and recurring workflows. For European buyers, the provider is to be classified in particular as a French GRC vendor with a complementary focus on data protection. | Optivalue.ai analyses compliance questions and creates suggested answers from internal policies, reference documents and previous answers. The user reviews and corrects the suggestions; source references support verification.[655] [656] [657] [658]Specific AI functions documented Analysis of compliance questionnaires · Generation of document-based suggested answers AI evidence: [657] [658]Documented by the vendor; no product test. Source check: 2026-10-14 |
| Snap ComplianceSnap Compliance GRC / Risk CopilotHeadquarters: USA [660]The current MSA dated 04.10.2026 names Snap Compliance Labs LLC, incorporated in Delaware, with its main address in Doral, Florida. Chile contact: Snap Compliance Chile SpA, RUT 77.568.668-5, Santiago.Snap Compliance Labs LLC; Snap Compliance Chile SpA; Risk Copilot | GRC suite for anti-money laundering, enterprise risk, corporate governance and whistleblowing processes with a focus on Latin America. Connects risk matrices, internal controls and evidence. | Risk Copilot generates risk matrices from organisational, industry and country context and suggests actions or controls. AI also supports due diligence and matrix analyses.[659] [660] [661]Specific AI functions documented Draft risk matrices in context · Suggest controls and actions · Support due diligence analyses AI evidence: [659]Commercial SaaS offering with a demo and trial access; Risk Copilot described as a current product offering. Modules and scope depend on the subscription chosen. Source check: 2026-10-15 |
| SoftExpert GRC | SoftExpert positions GRC within a suite for processes, documents, quality and corporate management. | The AI Compliance Reader extracts requirements from regulatory PDFs and allows results to be refined via chat. In the document module, AI summarises differences between versions for review and approval.[101] [102]Specific AI functions documented Extract regulatory requirements from PDFs · Refine requirements through dialogue · Summarise document changes for review AI evidence: [102]Described as functions of the Suite 3.0 update of 16 June 2026; check module and configuration scope. No product test. Source check: 2026-10-14 |
| Sorena AISorena; Research Copilot; Assessment AutopilotHeadquarters: Sweden [663]The provider names Sorena AB, registration number 559573-7338, with its registered office in Stockholm.Sorena AB; Sorena | Sorena connects regulatory sources and internal documents with risk, contract and compliance work. A central knowledge model contains controls, evidence, policies and responsibilities. | AI assistants research compliance questions and provide source references. Research Copilot creates report drafts and questionnaire answers; Assessment Autopilot supports recurring review workflows.[662] [663]Specific AI functions documented Answer compliance questions with source references · Draft audit reports · Handle security questionnaires AI evidence: [662]Demo and trial access offered. Promises of error-free answers are not adopted here as a documented product characteristic; review results from a subject-matter perspective. Source check: 2026-10-15 |
| StrategixXGRC; MAIAHeadquarters: South Africa [665]The vendor describes development in South Africa and names Johannesburg and Cape Town as locations; the website terms and conditions name Strategix Application Solutions (Pty) Ltd. British branch not counted separately.Strategix Application Solutions (Pty) Ltd; XGRC Software; MAIA; SHEQX; ENVIRX; MSX; MSXCyber | XGRC brings together enterprise risk, compliance, internal audits and policies. Specialist modules for information security, environment and occupational health and safety use the same database; MAIA adds the analysis of existing GRC data. | MAIA answers questions about risk registers, policies and audit findings in natural language. The vendor describes compliance summaries and analyses of regulatory impact under existing access rights, with AI interactions logged.[664] [665] [666]Specific AI functions documented Query risk registers and audit findings · Summarise compliance status · Analyse regulatory impact AI evidence: [664]Customer-specific configuration and demo offered. Public demonstrations use fictitious data. The ISO/IEC 42001 certification targeted in October 2026 is not treated as already completed. Source check: 2026-10-15 |
| StratsysStratsys GRC Suite; Risk & ControlHeadquarters: Sweden [669]Stratsys AB; Hypergene in the same provider group; Evaluate | Stratsys connects risk management, internal controls, information security and compliance in a shared platform. Risks are linked with owners, actions, controls and evidence. Complementary modules support internal audits, incidents and business continuity. The solution addresses, among others, public organisations, mid-sized companies and regulated industries with several organisational units involved. | Stratsys AI summarises risk assessments, controls and deviations and suggests actions for identified risks and gaps. The support is integrated into the platform's GRC work.[667] [668]Specific AI functions documented Summarise risk and control assessments · Prepare deviations for follow-up · Suggest actions for risks and gaps AI evidence: [667]Documented by the vendor; package and functional scope to be checked. Not tested in practice. Source check: 2026-10-14 |
| SureCloudSureCloud GRCHeadquarters: United Kingdom [671]SureCloud Ltd, registered in England and Wales under 05703655; registered office and principal place of business in London according to the privacy policy. | Connects compliance, risk, internal audit, data protection and third-party risk. A shared control model supports reusable evidence for several regulatory frameworks. | Gracie AI supports supplier onboarding, creates workflows from descriptions and suggests controls matching risks from the framework library.[670] [671]Specific AI functions documented Capture suppliers and prepare initial assessment · Configure GRC workflows from descriptions · Map controls to risks AI evidence: [670]Documented by the vendor; scope depends on the SureCloud plan and configured roles/workflows. No product test. Source check: 2026-10-14 |
| SwissGRC Platform / GRC ToolboxHeadquarters: Switzerland [672]Swiss GRC AG, head office Lucerne, Switzerland; CHE-145.606.205. | Risk, controls, compliance, information security and data protection with process and contract management on a shared database. | Grace AI answers questions about risks, controls and processes on the basis of platform data, summarises matters and suggests next steps.[103]Specific AI functions documented Query GRC data in natural language · Summarise risk matters · Suggest next processing steps AI evidence: [103]Documented by the vendor; no product test. Source check: 2026-10-14 |
| Symbiant GRC & AuditHeadquarters: United Kingdom [673]Registered office and postal address London; operational sales/support office Leeds. US branch shown separately. | Modular platform for risks, compliance and internal audit with relationships to controls, incidents and corporate objectives. | The optional AI assistant drafts risk descriptions, controls and mitigation measures, supports root cause analyses and links risks with organisational data. Users review and adopt the suggestions.[104] [105]Specific AI functions documented Draft risk descriptions · Suggest controls and mitigation measures · Analyse incident causes and affected areas · Supplement risk fields AI evidence: [105]Optional paid add-on according to the vendor; suggestions are not applied without user approval. Not tested in practice. Source check: 2026-10-14 |
| TeamGRCTeamGRC SaaS SuiteHeadquarters: Netherlands [675]The terms of use name TeamGRC, KvK 42164844, Amstelveen. The page footer additionally uses TeamGRC Inc.; clarify the exact legal form when concluding the contract.TeamGRC.ai; TeamGRC Inc. | TeamGRC links regulatory obligations with risks, controls, policies, owners and measures. The platform supports a common control model as well as the documentation of approvals and risk decisions. | The vendor documentation describes AI for mapping requirements, analysing policy gaps and risk assessments. In addition, security profiles and policy drafts are generated from the respective organisational context.[674] [675]Specific AI functions documented Map requirements to controls · Analyse policy gaps · Draft security profiles AI evidence: [674] [675]SaaS access under a separate enterprise contract. The public AI demonstrations are explicitly illustrative examples, not evidence of a product test having been carried out. Source check: 2026-10-15 |
| TESISQUARE / Compet-eCORA GRC and ERMHeadquarters: Italy [678]Compet-e; Compet-e Srl; CORA; C*RA; TESI GRC CORA; Tesi SpA | CORA combines modular compliance management with process-based enterprise risk management. The platform links organisation, processes, assets and controls, offers configurable risk matrices and scenario analyses, and tracks treatment plans. Audits, incidents, findings and key figures complete the risk cycle. Specialist modules cover, among other things, data protection, information security, DORA, anti-money laundering and the governance of AI systems. | C*RA AI supports the recording, risk assessment and governance of AI systems. However, no separate AI work step for performing GRC tasks was specifically documented in the CORA pages checked.[676] [677] [678] [679] [680]Not specifically documented in the source check Governance of AI deliberately separated from AI support in GRC; targeted Italian domain search checked. Sources checked: [677] [680]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| The Access GroupAccess Risk & Compliance; Enterprise Risk ManagementHeadquarters: United Kingdom [684]Access UK Limited; Riliance; Riliance Software Limited; Access Compliance | Access offers software for risk and compliance processes, particularly in the legal services sector. Modules connect risk registers, audits, breach reports, complaints and reports with configurable workflows. Enterprise risk management supports the identification, assessment and ongoing monitoring of risks. The solutions formerly offered under Riliance are now part of the Access portfolio. | Access offers the AI environment Evo across the group. However, no specific AI work step is documented for the Risk & Compliance/Riliance products checked.[681] [682] [683]Not specifically documented in the source check GRC product page and Evo description read; targeted search for Risk/Compliance/Evo. Group-wide AI is not automatically attributed to the GRC product. Sources checked: [681] [683]No specific available AI support documented in the source check; no product test. Source check: 2026-10-14 |
| Tickit SystemsTickit On DemandTickit On Demand is the product; Tickit Health is a different company. | Australian web-based risk and compliance software. Visual risk assessments and configurable reports support ongoing management and monitoring. | No specific AI work step is documented in the sources checked for Tickit On Demand. The risk registers, graphical assessments and configurable reports described are not sufficient as AI evidence.[685]Not specifically documented in the source check Official product page read; a supplementary search for AI and artificial intelligence on the vendor domain yielded no specific product evidence. Sources checked: [685]AI availability not specifically documented in the source check. Source check: 2026-10-14 |
| TogetherSecureHITGuardHeadquarters: Austria [688]TogetherSecure GmbH; registered office Wels, Austria; company register 468227 w, company register court Wels. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office. | Brings together risk, compliance, audits and internal controls in a modular platform for mid-sized companies. Further modules cover data protection, supplier risk and document management. | On the ISMS product page, HITGuard describes AI support for draft answers and suggestions on risks, measures and controls.[686] [687] [688]Specific AI functions documented Suggested answers for ISMS questions · Suggest risks and controls · Suggest measures AI evidence: [687] [686]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| TransVareTransVare GRC SuiteKnowledgeVare has been announced. | Links enterprise risks, internal audit, compliance, governance, cyber risks and incidents. Shared evidence and group views complement locally owned processes. | AiiVare drafts and classifies risks, prepares audit findings and maps obligations to controls and evidence. Outputs remain drafts until reviewed by the responsible persons.[689] [690]Specific AI functions documented Draft and classify risks · Prepare audit findings · Map obligations to controls and evidence · Summarise incidents AI evidence: [690]Documented by the vendor for the TransVare suite; human review and approval. The separate KnowledgeVare is marked as Coming Soon and is not counted here as available; no product test. Source check: 2026-10-14 |
| Uno AIUno AI Agents Platform for GRCHeadquarters: USA [692]The licence terms name Uno.ai, Inc.; provider address in Mountain View, California. TrustMAPP describes a partnership with Uno, not an identical brand or a joint company; the two providers continue to be counted separately.Uno.ai, Inc.; Uno AI, Inc. | Uno offers a modular platform for enterprise risk, compliance, internal audit, third parties and resilience. Evidence, controls, risk analyses and audits use a common data basis. | Documented AI agents collect evidence and map it to control requirements, examine audit gaps and produce draft reports. For supplier assessments they process, among other things, SOC 2 reports and security questionnaires. The licence terms require human review of the results.[691] [692] [693]Specific AI functions documented Map evidence to control requirements · Prepare audit gaps and draft reports · Evaluate supplier documents for risk assessments AI evidence: [691] [692]The vendor offers modules, assessment agents and demos. The licence terms require expert human review; no autonomous automated decision without meaningful oversight. Source check: 2026-10-15 |
| Values AssociatesValues Associates GRC, Sapin 2 and TPRMHeadquarters: France [694] | Values Associates develops configurable applications for risk mapping, internal controls, internal audit and action tracking. In addition, there are programmes for anti-corruption, conflicts of interest and third-party assessments. The common approach combines specialist compliance processes with customisable data models and workflows on a platform developed in-house by the provider. | The third-party assessment solution uses Mistral models to produce source-referenced summaries and supports the segmentation of third parties and risks according to customisable categories.[694] [695] [696]Specific AI functions documented Summarise third-party information with sources · Segment third parties and risks by category AI evidence: [696]Documented by the vendor; information types and processes can be customised for each project. Not tested in practice. Source check: 2026-10-14 |
| VamiSec (Vami Group)VamiGRCHeadquarters: Germany [698]VamiSec GmbH; VamiGRC; VamiAI; Vami Group; softScheck; softScheck GmbH | VamiGRC from VamiSec links management systems for information security, data protection, business continuity and AI with a common control model. The platform manages risks, evidence, framework mappings and tasks. Documents and project descriptions form the basis of supported assessments; supplier questionnaires and policies are also part of the documented scope of use. VamiSec and softScheck are run under the Vami Group. | VamiAI derives risk suggestions from project descriptions and evidence, classifies uploaded documents and maps them to controls. Answers to security questionnaires and drafts of measures are also documented. The specific review and approval rules should be clarified before procurement.[697] [698] [699]Specific AI functions documented Suggest risks from project descriptions and evidence · Classify documents and map them to controls · Pre-fill security questionnaires · Produce draft measures AI evidence: [697]Documented by the vendor; not tested in practice Source check: 2026-10-14 |
| Vantage TechnologiesGRC VantageVantage Technologies; GRC Vantage | Links compliance, risk, BCM and internal audits with a focus on Saudi requirements. Arabic and English interfaces as well as shared controls support the work. | GRC Vantage describes AI-supported audit sampling: the platform recommends sample sizes, flags anomalies in evidence and produces draft observations. Conclusions remain with the auditors.[700] [701]Specific AI functions documented Recommendation of audit samples · Detection of anomalous evidence · Drafts of audit observations AI evidence: [701]Documented by the vendor; no product test. Source check: 2026-10-14 |
| VComply | Links compliance tasks, policies and risks with owners, controls, evidence and approvals. The focus is on ongoing implementation and traceable responsibilities. | PolicyOps supports AI drafts, linguistic revision, translation and change summaries. Employees receive answers from approved policies; permissions and human approvals are retained.[106] [107] [108]Specific AI functions documented Draft and revise policies · Translate policies · Summarise changes · Answer questions from approved policies AI evidence: [107]Documented by the vendor; no product test. Source check: 2026-10-14 |
| ViClarity | Modular GRC platform with risks, control testing, compliance, third parties, documents, incidents and reports. | Reg Monitor uses AI to filter regulatory publications by industry and jurisdiction, summarise changes and impacts, and suggest possible next steps. Assessment and implementation remain with the team.[109] [110] [111] [112]Specific AI functions documented Select relevant regulatory changes · Summarise changes and impacts · Suggest next compliance steps AI evidence: [111]Documented by the vendor within Compliance Management; regulators and jurisdictions are selected during set-up. Not tested in practice. Source check: 2026-10-14 |
| VigiTrustVigiOneHeadquarters: Ireland [705]VigiTrust; VigiOne; VigiCheck; VigiFile; VigiPlan; VigiTrack | VigiOne structures security and compliance programmes with modules for audits, self-assessments, risk and asset registers, and evidence. Tasks and milestones link assessments with implementation; reports and notifications make the processing status visible. The platform also supports policies, business continuity and incidents and is used, among other things, for PCI DSS programmes. | For VigiOne, no specific AI function in the GRC workflow was documented in the product description checked or in the targeted vendor search. Articles about AI security and events do not replace this evidence.[702] [703] [704]Not specifically documented in the source check Product source and relevant search result read. No statement that the product fundamentally contains no AI. Sources checked: [702] [704]No specific AI work step documented in the source check; no statement about the absence of AI. Source check: 2026-10-14 |
| Volaris (intellior / IMS PREMIUM)Aeneis; IMS PREMIUMHeadquarters: Germany [711]Germany refers to the operating provider entity intellior in Stuttgart. IMS is a Swiss provider entity of the same Volaris Group. This does not imply a European group headquarters.intellior; Aeneis; IMS Integrierte Managementsysteme; IMS AG; IMS PREMIUM; KW+P; Volaris Group | The Volaris Group comprises intellior with Aeneis and IMS with IMS PREMIUM. Aeneis links processes with risks, controls, audits, information security and data protection. IMS PREMIUM supports risk assessments, internal controls, measures and evidence. The products should be assessed as separate offerings; group membership does not mean a common technical platform. | Aeneis documents AI for producing draft BPMN processes. A specifically delimited AI function for risk, control, compliance or audit tasks is not sufficiently documented in the sources checked; nor is one for IMS PREMIUM.[706] [707] [708] [709] [710] [711] [712]Not specifically documented in the source check General process modelling not automatically counted as AI in GRC. The AI function of one product line is not transferred to other Volaris products; targeted IMS domain search without a reliable hit. Sources checked: [706] [712]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| WathiqWathiq GRCHeadquarters: Saudi Arabia [715]Vendor information: development in Saudi Arabia and location in Riyadh. A full legal company name or register number is not stated on the pages checked.Wathiq GRC; Wtheq; وثيق | Wathiq links governance, risk registers, controls, evidence and internal audits in a platform geared to Saudi Arabia. The software supports policy approvals, assessments, findings and action tracking. Saudi and international frameworks are mapped together. The vendor offers operation in the customer's own infrastructure or private cloud with an Arabic and English interface. | Wathiq describes NLP-based control mapping, the classification and mapping of evidence, explainable risk assessments and the production of bilingual reports.[713] [714] [715] [716]Specific AI functions documented Map controls between frameworks · Classify evidence and map it to controls · Support risk assessments with explanatory model contributions · Produce reports in Arabic and English AI evidence: [714] [713]Documented by the vendor for on-premises installation or private cloud with a customer-side AI model; human confirmation for mapping. No product test. Source check: 2026-10-14 |
| WeKomply – GraniteGranite GRC PlatformHeadquarters: Finland [718]Granite Partners Oy; Granite Partners Ltd.; WeKomply; Falcony; D4; Lexerta; Datakvalitet; PlusOffice; Mobaro; eSmiley | Granite offers a modular platform for enterprise-wide risks, third-party risks, audits as well as IT risks and compliance. Configurable workflows, responsibilities and reports support ongoing risk handling across multiple areas. Supplementary applications cover information security and business continuity. The Finnish software provider has been part of the WeKomply Group since September 2026 and continues to run its platform. | Granite AI suggests additions and control measures for risks, requirements and incidents. Across the entire risk register, it supports the analysis of trends, weak signals and possible blind spots.[717] [718] [719]Specific AI functions documented Suggest risk data and control measures · Analyse trends in the risk register · Detect possible blind spots in risk data AI evidence: [719]Integrated assistant documented by the vendor; answers in chat, no direct changes to customer data. Not tested in practice. Source check: 2026-10-14 |
| WizpressoDiligenceHeadquarters: China (Hong Kong) [721]Wizpresso Limited; Wizpresso Diligence; Diligence; Factify; Adnoto | Wizpresso Diligence links requirements, policies, controls and evidence in a common GRC workspace. Compliance and audit teams can track responsibilities, assess gaps and prepare reports with the associated supporting documents. The platform is aimed, among others, at financial companies, supervisory bodies and listed companies and supports operational controls as well as external reporting. | Diligence describes AI agents for mapping requirements to controls and evidence, analysing missing controls or supporting documents, and producing control matrices and audit reports.[720] [721] [722] [723]Specific AI functions documented Link requirements with controls and evidence · Analyse control and evidence gaps · Prepare control matrices and audit reports AI evidence: [720]Product functions documented by the vendor; SaaS and, according to a sales announcement, private cloud and on-premises installation. No product test. Source check: 2026-10-14 |
| Wolters KluwerEnablon; TeamMate; StandardFusion; OneSumX for Compliance Program ManagementHeadquarters: Netherlands [729]Wolters Kluwer names its global group headquarters in Alphen aan den Rijn, Netherlands. The data record brings together the group products Enablon, TeamMate, StandardFusion and OneSumX; product locations are not equated with the group headquarters. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office.Enablon; TeamMate; StandardFusion; OneSumX for Compliance Program Management (CPM) | Wolters Kluwer offers several product lines for governance, risk, compliance and assurance: Enablon for EHS and operational risks, TeamMate for audit, and OneSumX for Compliance Program Management. Since its acquisition in 2026, StandardFusion has added cloud-based GRC functions to the portfolio. The OneSumX products for Finance, Risk and Regulatory Reporting sold to Regnology are separate from this. | Enablon EHS Companion supports the handling of incidents and measures. Permit Advisor uses historical permits, checks their completeness and suggests hazards and controls for safe work permits.[240] [241] [724] [725] [726] [727] [728] [729]Specific AI functions documented Support with incidents and measures · Review of work permits · Suggestions for hazards and controls AI evidence: [726] [727]Documented by the vendor; no product test. Source check: 2026-10-14 |
| WorkivaTo the detailed profile | Linked financial and sustainability reports with controls, risk and internal audit. | Workiva supports the identification of control gaps and the execution of control tests with AI. Agents analyse evidence and draft root-cause-based findings and action plans, the results of which can be reviewed and amended by subject-matter experts.[113] [114] [730]Specific AI functions documented Control gap analysis · Control testing · Evidence analysis · Draft measures AI evidence: [730]Documented for the Internal Controls Management offering; the product page checked does not show a complete pricing or activation matrix. Human review, exceptions and changes to results remain part of the described process. Source check: 2026-10-14 |
| YICE / Kouters Van der MeerYICE GRCHeadquarters: Netherlands [732]YICE; YICE B.V.; Kouters Van der Meer | YICE links company assets, risks, controls and measures in a GRC platform. For risks, gross and net assessment, owner, treatment and acceptance are recorded. Controls support recurring evidence of execution, self-assessments and reviews by internal audit. Linked control frameworks, time-stamped evidence and audit trails enable control results to be reused for multiple requirements. | The YICE pages checked describe risk and control management as well as automated calculations. A specific AI work step is not documented there.[731] [732] [733] [734] [735]Not specifically documented in the source check Feature overview, homepage and vendor news checked via a targeted AI search. Automatic control weighting is not classified as AI. Sources checked: [731] [734] [735]No specific available AI support documented in the source check; no product test. Source check: 2026-10-14 |
| ZaviorZavior Enterprise GRCHeadquarters: Singapore [738]Contracting party Zavior Pte Ltd; address 33 Ubi Avenue, #08-13, Vertex, Singapore 408868 according to the terms of use.Zavior Pte Ltd; Zavior AI Mapper | GRC platform for enterprise risk, third parties, policies and audits with a shared pool of controls and evidence. Supports internal standards and multiple external frameworks. | The AI Mapper maps controls to multiple frameworks and links evidence; AI layers connect the work of different specialist departments in the common control model.[736] [737] [738]Specific AI functions documented Map controls across frameworks · Link evidence with controls AI evidence: [736] [737]Enterprise offering with a scoping meeting and customer-specific configuration. The scope of the AI agents and enforcement is agreed. Source check: 2026-10-15 |
| ZenGRC | Compliance, risks, audits and supplier assessments with shared evidence, control mappings and tasks. | GRACI AI assesses controls on the basis of framework objectives, control texts, test plans and evidence. The results include justifications, findings and suggestions for improvement and must be reviewed before being adopted.[115] [116] [117] [739]Specific AI functions documented Assess control design and effectiveness · Analyse evidence against control objectives · Prepare findings and suggestions for improvement AI evidence: [116] [739]Opt-in; included according to the product page, without a separate module. Assessments are started on request; planned scheduled runs not counted as available. Not tested in practice. Source check: 2026-10-14 |
Risk analysis & internal controls
24 entries
| Provider / product | Documented focus | AI functions and classification |
|---|---|---|
| Abel SystemsQM-PilotHeadquarters: Switzerland [743]QM-Pilot; Abel Systems Uwe Abel | QM-Pilot combines process and document management with a separate module for opportunities, enterprise risks and ICS risks. Organisations can configure assessments, link risks with processes and assign measures and recurring control tasks. The software documents controls, reminds owners and provides risk portfolios as well as reports for audits and internal management. | QM-Pilot describes an AI chat over existing processes and documents, draft texts for process descriptions and the analysis of recorded content for assessing risks and opportunities.[740] [741] [742] [743]Specific AI functions documented Query own processes and documents · Draft process descriptions · Analyse risks and opportunities AI evidence: [742]Documented by the vendor for QM-Pilot 4.0; role approval and activation required, Azure region contractually specified. No product test. Source check: 2026-10-14 |
| antares RiMISTo the detailed profile Headquarters: Germany [744]antares Informations-Systeme GmbH; Geislingen an der Steige; HRB 540982, Ulm Local Court. | antares RiMIS combines qualitative and quantitative risk assessment with simulation, measures and approval status. | The RiMIS AI assistant suggests risk areas based on industry, business model and company context. Further AI aids support the wording and translation of risk information.[118] [119]Specific AI functions documented Identify company-specific risks · Word risk information · Translate risk texts AI evidence: [118]Documented by the vendor; translation via DeepL integration described; no product test. Source check: 2026-10-14 |
| Auxilius.aiAuxiliusHeadquarters: Germany [747]The legal notice names Auxilius.ai GmbH, Unterföhring, HRB 304917. Not to be confused with the clinical finance offering of the same name.Auxilius.ai GmbH; not Auxilius Clinical Finance (auxilius.co) | Auxilius.ai supports the ongoing monitoring of internal controls. Control coverage is linked with risks and corporate objectives; anomalies and evidence are intended to become available to owners promptly. | Agents create and maintain monitoring scripts for controls. They adapt monitoring to processes, local units and changed rules; the scripts generated are described as repeatable and versioned.[745] [746] [747]Specific AI functions documented Create scripts for control monitoring · Adapt monitoring when rules change · Assess control coverage AI evidence: [745] [746]The vendor names first enterprise customers in regulated industries; a demo with the customer's own data is offered. Validate scripts and business rules before adoption. Source check: 2026-10-15 |
| AvertroCyberHQ / Avertro IntelligenceHeadquarters: Australia [749]CyberHQ; Avertro Intelligence; Avertro Pty Ltd | CyberHQ supports the management of cyber risks on the basis of controls, business services and modelled loss scenarios. The platform translates technical risks into financial impacts and presents options for action for risk owners. Scenario comparisons and investment assessments help prioritise security measures; reports link control gaps with decisions at management level. | Avertro documents AI-supported threat and scenario modelling as well as recommendations for investments in risk reduction. The Monte Carlo simulation, also described, is not counted here as an AI function across the board.[748] [749]Specific AI functions documented Risk scenario modelling · Recommendations for risk reduction · Prioritisation of investments AI evidence: [748]Documented by the vendor; not tested in practice. Source check: 2026-10-14 |
| CAQ AGCAQ.Net; QAM.Net; Risk.Net; embedded AIHeadquarters: Germany [752]The legal notice names CAQ AG Factory Systems in Rheinböllen, Bad Kreuznach Local Court HRB 4194.CAQ AG Factory Systems; CAQ.Net; QAM.Net; Risk.Net; CAQ.Net embedded AI | CAQ.Net combines quality management with audits, risk analyses and measures. QAM.Net supports audit processes; Risk.Net manages, among other things, FMEA, risk matrices and root-cause analyses. | Embedded AI assistants generate audit questions from documents, suggest causes for Ishikawa analyses and draft procedural instructions. Results are provided in the respective specialist module for review and further processing.[750] [751] [752]Specific AI functions documented Generate audit questions · Analyse causes of risks and defects · Draft procedural instructions AI evidence: [750]According to the vendor, included in the current release for customers with a valid maintenance contract. Separate API access to a compatible AI provider or a separate partner service is required. Source check: 2026-10-15 |
| CiqualiaComplaicaHeadquarters: Germany [756]Complaica; Compliance Aspekte (former product domain redirects to Complaica) | Complaica links requirements from different frameworks with processes, assets, risks and control tasks. Risk assessments and treatment measures are given responsibilities, deadlines and status information. Audit planning, findings and effectiveness reviews accompany implementation; reports support, among other things, statements of applicability and data protection documentation. The former product domain Compliance Aspekte now leads to a Complaica page of the provider Ciqualia. | Complaica connects AI assistants to the GRC data via MCP. They answer status questions, pre-word measures and summarise cases; access is subject to user permissions.[753] [754] [755] [756] [757]Specific AI functions documented Query compliance status through dialogue · Pre-word measures · Summarise GRC cases AI evidence: [754]Can be optionally activated; local or cloud AI client via the bundled MCP server. Not tested in practice. Source check: 2026-10-14 |
| ConSenseConSense GRCHeadquarters: Germany [761]ConSense GRC; ConSense IMS; ConSense PORTAL; ConSense GmbH | ConSense GRC combines governance, risk management and compliance with integrated information security management. Requirements and risks are linked with business processes, responsibilities and measures. Versioning and approvals support policy work; audits, dashboards and escalation workflows accompany monitoring. The fields of application named include ISO 27001, IT-Grundschutz, NIS2 and TISAX as well as internal company requirements. | ConSense AI searches documents and processes on the basis of natural-language questions, generates process diagrams from documents and suggests measures for task lists. Further functions support texts and training content.[758] [759] [760] [761] [762]Specific AI functions documented Research in documents and processes · Document-based process creation · Recommendations for measures · Creation of training content AI evidence: [760]Only in the hosted ConSense PORTAL, not on-premises and not yet for GxP. AI research and speech-to-text free of charge after accepting the terms; further functions require a named-user licence. No product test. Source check: 2026-10-14 |
| DextraDataGRASP German GRCHeadquarters: Germany [765]GRASP; German GRC; DextraData GRC Technologies GmbH | GRASP brings together information security, data protection, business continuity and internal audits in a common platform. Risks are linked with controls, measures, responsibilities and evidence; for ISO 27001 the statement of applicability can be edited. Audit planning and findings as well as business impact analyses and recovery planning complement cross-departmental management and reporting within the company. | GRASP describes an AI chatbot for subject-matter and application questions as well as photo analysis for audit-relevant risks. Identified findings are documented and can serve as the basis for action plans.[763] [764] [765] [766] [767]Specific AI functions documented Answer GRC subject-matter questions · Detect audit-relevant risks in photos · Document findings and derive action plans AI evidence: [767]Documented by the vendor; no product test. Source check: 2026-10-14 |
| DylogyDylogy AI AgentsHeadquarters: France [770]Dylogy is an offering of Novaa Tech SAS, RCS Lyon 949191399, France.Novaa Tech SAS; Dylogy | Document-based review platform with explicit workflows for compliance, audit and internal controls. | AI agents classify documents, extract facts and check them against business rules. In the compliance workflow, gaps in procedures, reports and regulatory guidelines are identified and evidenced results are produced.[768] [769] [770]Specific AI functions documented Review internal controls · Identify regulatory documentation gaps · Produce review results with supporting evidence AI evidence: [768] [769]Offered commercially via demo; configurable business rules and agents. Source check: 2026-10-15 |
| FectoneasyGRCHeadquarters: Austria [774]Fecton Softwarevertrieb GmbH; easyGRC | easyGRC from Fecton includes modules for internal controls, tax controls and risk management. The software links processes, risks and controls, imports existing risk inventories and manages recurring assessments and control tasks. Documented results, action monitoring and dashboards support internal audit and corporate management. Groupware connections involve control performers via existing working environments. | No specific AI work step is documented in the sources checked for easyGRC. Automated controls, reminders and risk assessments are not classified as AI functions without AI evidence.[771] [772] [773] [774] [775]Not specifically documented in the source check Product overview and ICS page read; vendor domain searched for KI as well as AI/artificial intelligence. No specific AI product function found. Sources checked: [771] [772] [773]AI availability not specifically documented in the source check. Source check: 2026-10-14 |
| GOAT RiskTo the detailed profile | Risk registers, control assessments, key figures, incidents and measures with customisable templates and reports. | For GOAT Risk, no specific AI work step was evidenced in the product page checked or in the targeted vendor search. General articles about AI in risk management do not document an integrated product function.[120] [121] [776]Not specifically documented in the source check Product scope and official AI context article read; no negative statement about AI being fundamentally absent. Sources checked: [120] [776]No specific AI work step documented in the source check; no statement about the absence of AI. Source check: 2026-10-14 |
| GRC SolutionssmartGRC; AI AgentsHeadquarters: Poland [778]The vendor names GRC Solutions Sp. z o.o. as licence holder and GRC Advisory Sp. z o.o. as a sister consultancy with offices in Wrocław and Kraków. Both are listed here together as one provider.GRC Solutions Sp. z o.o.; GRC Advisory Sp. z o.o.; smartGRC; Security & Compliance Expert | smartGRC supports the management of SAP authorisations, segregation of duties, emergency access and access reviews. The software combines risk assessment, role maintenance, approvals and documented measures for dealing with authorisation conflicts. | The provider describes AI-supported prioritisation of SoD conflicts and suggestions for risk treatment. The recommendations take usage data and business context into account; decisions and justifications are intended to remain traceable. The agents page distinguishes between functions already available and ongoing development.[777] [778]Specific AI functions documented Prioritise SoD conflicts · Suggest risk treatment · Analyse authorisation roles · Document reasons for decisions AI evidence: [777]Existing platform with demo; the AI catalogue explicitly contains both available functions and functions in development. Confirm the availability of individual agents before procurement. Source check: 2026-10-15 |
| Ideagen Risk Management | Risk monitoring with strategic objectives and audit integration; broader portfolio for quality, EHS and compliance. | Mazlan AI supports risk analyses, drafts root-cause analyses and audit findings, prepares corrective actions and compiles audit evidence. Critical steps require approval.[122] [123]Specific AI functions documented Analyse risks and causes · Draft audit findings · Prepare corrective actions · Compile audit evidence AI evidence: [123]Documented by the vendor within the Ideagen platform; roles and approval thresholds configurable. Check coverage in the respective licensed product; no product test. Source check: 2026-10-14 |
| InclusInclus; Inclus AIHeadquarters: Finland [780]The privacy policy names Inclus Ltd with an address in Espoo, Finland. A collaboration with Deloitte is described as a partnership, not as an acquisition.Inclus Ltd; Inclus AI | Inclus supports collaborative risk identification, assessments, analyses and action planning. Enterprise and project risks can be worked on with contributions from different specialist departments and prepared for management reports. | Embedded AI supplements the identification of risks and uncertainties, suggests measures and risk treatments and drafts management summaries. Organisation-specific prompts as well as risk and future scenarios are also documented.[779] [780] [781]Specific AI functions documented Identify risks · Suggest risk treatment · Draft management summaries · Investigate risk scenarios AI evidence: [779]Existing commercial software with demo; AI function packages are listed in the price list. Check the scope of services for each offering. Source check: 2026-10-15 |
| InspirientAutomated Analytics Engine / Money Laundering DetectionHeadquarters: Germany [783]Inspirient GmbH, Lietzenburger Straße 107, Berlin.Inspirient GmbH; Inspirient Automated Analytics Engine | Automated analytics platform with a documented use case for money laundering and fraud detection. Data analysis, prioritisation of alerts and explanations support risk-related investigations. | The platform combines fraud-specific reasoning, anomaly detection and machine learning to uncover known and new patterns. Results are visualised and explained in text.[782] [783]Specific AI functions documented Detect anomalies and fraud patterns · Prioritise AML alerts · Explain analysis results AI evidence: [782]The use case is offered with a feasibility study. Broad analytics platform; no standalone, complete AML case management is claimed. Source check: 2026-10-15 |
| NoogaNooga Risk; Nooga NavigatorHeadquarters: Sweden [786]The privacy policy names Nooga Solutions i Sverige AB and a contact address in Stockholm. The product history names @Scale and Solidify.Nooga Solutions i Sverige AB; Nooga Solutions AB; Nooga Risk; Nooga Navigator; Nooga Scale; @Scale | Nooga Risk integrates risks, treatment and approvals into Azure DevOps work items. Nooga Navigator adds access to internal governance documents and GRC knowledge. | The optional AI searches for matching risks in the existing register and suggests causes and impacts in the context of a work item. Navigator additionally describes document-based answers as well as help with drafting and reviewing governance content.[784] [785] [786]Specific AI functions documented Find matching risks in the register · Suggest risk causes and impacts · Evaluate governance documents AI evidence: [784] [785] [786]Nooga Risk offers optional AI after organisational activation. Navigator is explicitly marked as Early Access with pilot registration; general availability of all Navigator functions is not assumed. Source check: 2026-10-15 |
| OPTUREOPTURE GRC / RegOSHeadquarters: Switzerland [788]OPTURE AG; OPTURE GmbH; OPTURE RegOS | OPTURE GRC brings together risk management, internal control systems and compliance on a common data basis. The modules support quantitative risk assessments, approvals, control cycles and questionnaires for surveying compliance status. Risks, controls and evidence are linked and reported in consolidated form. Supplementary modules address, among other things, information security, data protection, audit management and AI governance. | OPTURE documents a GRC platform and AI governance. The AI transparency page relates in particular to principles and AI-generated website content; a specific AI GRC work step is not documented in the sources checked.[787] [788] [789] [790]Not specifically documented in the source check AI content on the website, AI Act management and simulation are not in themselves evidence of AI assistance; no evidence of the absence of AI. Sources checked: [787] [790]No specific AI function in GRC documented in the sources checked. Source check: 2026-10-14 |
| OversightOversight Finance Risk Intelligence / Oversight ActionsHeadquarters: USA [793]The contact page names Oversight, Inc. with an address in Atlanta, Georgia, USA.Oversight Systems; Oversight Inc.; Oversight Actions; Finance Risk Intelligence | Oversight monitors financial controls in procurement, expenses, corporate cards and supplier transactions. The software supports control and internal audit teams in detecting policy violations, unusual payment transactions and recurring process weaknesses. | AI models analyse transaction patterns and prioritise potential errors, misuse or fraud indicators. Oversight Actions adds summaries, suggested actions and case assignment as well as pre-approved processes within defined policies, thresholds and escalation rules.[791] [792] [793] [794]Specific AI functions documented Detect anomalous expenses and control violations · Prioritise review cases by risk · Support measures under defined approval rules AI evidence: [791] [792]Live product platform with customer access and a demo offering. Oversight Actions was introduced in June 2026; automated actions require customer-specific policies and approvals. Source check: 2026-10-15 |
| PathlockPathlock Nexus / Continuous Controls MonitoringGreenlight Technologies; Appsian; Security Weaver; CSI Tools; SAST Solutions; Xpandion; QSoftware | Pathlock combines authorisation reviews with the monitoring of internal controls in business applications. The documented scope includes segregation of duties, access recertification, control testing and the handling of identified deviations. Continuous Controls Monitoring also captures transactions actually executed and provides an audit trail for investigation and remediation. The focus is on application-related control risks. | Pathlock Nexus describes AI for analysing transaction, identity and access patterns and for creating governance workflows. Pathlock IQ answers governance and risk questions from the connected application data.[795] [796] [797] [798] [799] [800]Specific AI functions documented Analysis of transaction and access risks · Answers to governance questions · Support with governance workflows AI evidence: [797] [800]Documented by the vendor; no product test. Source check: 2026-10-14 |
| RIMIKS X | RIMIKS X from Funk: risk recording, ICS, measures, approvals and quantitative aggregation. | The RIMIKS X product page checked describes risk assessment, reports, workflows and internal controls. A specific AI work step is not documented there or in the targeted vendor search.[124] [801]Not specifically documented in the source check Product page and ICS description checked, targeted search for RIMIKS X/AI. Automated workflows alone are not AI evidence. Sources checked: [124] [801]No specific available AI support documented in the source check; no product test. Source check: 2026-10-14 |
| risk on mindrismoHeadquarters: Austria [804]rismo; risk on mind GmbH | rismo is the risk management software from risk on mind for industrial companies and organisations with multiple sites. It records risks and questionnaire answers, visualises likelihood and impact and links assessments with measures, responsibilities and deadlines. Customisable risk categories and automatically generated reports support management vis-à-vis management boards, supervisory bodies and insurers. | rismo describes AI for rating site risks on the basis of statistical data and individual questionnaire answers. This produces comparable risk profiles and an AI Score for risk assessment.[802] [803] [804]Specific AI functions documented Pre-assess site risks from type of operation and location · Incorporate questionnaire answers into risk profiles and assessments AI evidence: [802]Documented by the vendor; statistical pre-assessment and comprehensive assessment differ in the scope of data. Not tested in practice. Source check: 2026-10-14 |
| SoterionSoterion GRC SuiteHeadquarters: Germany [807]The German provider entity Soterion Technologies GmbH in Leinfelden-Echterdingen is documented. No statement about the headquarters or control of the international group is derived from this.Soterion Technologies GmbH; Access Risk Manager; Continuous Controls Manager | Soterion supports the management of authorisation and control risks in SAP systems. In addition to access conflicts, Continuous Controls Manager checks whether incompatible activities were actually carried out on the same document. Identified cases are passed to owners via workflow; status, follow-ups, comments and files document further processing for audits. | No specific AI function was documented in the source check for Continuous Controls Manager. The documented continuous control and automated monitoring of SAP data alone are not counted as AI evidence.[805] [806] [807]Not specifically documented in the source check Official product page read and targeted vendor search for AI/artificial intelligence carried out; no specific description of an AI function found. Sources checked: [805]No specific AI work step documented in the source check; no statement about the absence of AI. Source check: 2026-10-14 |
| Staple AIStaple / AI Contextual VerificationHeadquarters: Singapore [808]Staple AI Pte. Ltd., 33A Pagoda Street, Singapore 059192 according to the provider.Staple AI Pte. Ltd.; Staple | Document platform for checking incoming financial data with validation, anomaly alerts, evidence chains and controlled further processing. Compliance teams can trace decisions back to the source document. | AI interprets extracted financial data in context, distinguishes values read from values derived, and shows justifications and supporting evidence for human confirmation or escalation.[808] [809]Specific AI functions documented Check financial data in context · Submit uncertain document values for review · Show justifications for data controls AI evidence: [809]Commercial offering with a demo based on the customer's own documents; productive applications in the finance and insurance sector described. Source check: 2026-10-15 |
| XitingXiting LyneraHeadquarters: Switzerland [812]The contact page names Xiting AG in Schöfflisdorf, Switzerland, as well as separate subsidiaries in other countries. These are not counted multiple times here.Xiting AG; Xiting GmbH; Lynera | Xiting Lynera manages SAP rule sets, risks, business functions and compensating controls in a central portal. The software supports the governance and maintenance of segregation-of-duties rules as well as exchange with existing GRC and authorisation solutions. | The vendor describes AI support for risk definitions, classification, assessment and the maintenance of rule sets. Mapping of regulatory requirements is also presented, but is still marked as an upcoming function in the product FAQ.[810] [811] [812]Specific AI functions documented Define SoD risks · Classify authorisation risks · Support risk assessment · Maintain rule sets AI evidence: [810] [811]Lynera was presented in 2026 in an Essential version; a demo is offered. Professional and extended AI functions have been announced. Regulatory mapping still on the roadmap according to the FAQ; confirm the exact scope of the version. Source check: 2026-10-15 |
Regulatory compliance & intelligence
88 entries
| Provider / product | Documented focus | AI functions and classification |
|---|---|---|
| 221bAML Network Analytics / AI Co-InvestigatorHeadquarters: Hong Kong [815]221b Limited; headquarters Hong Kong SAR explicitly named in the terms of use.221b Limited; 221b AI Co-Investigator; AICI; 221b Adler; 221b Observation | Software for AML investigations, transaction networks, account comparisons and structured case documentation. Links entities, money flows and anomalies for compliance analysts. | An embedded LLM assistant translates natural-language investigative questions into defined graph and analysis operations, explains anomalous activities on the basis of the data and produces AML analysis reports.[813] [814] [815]Specific AI functions documented Investigate transaction networks in natural language · Explain money flows and account relationships · Produce AML case reports AI evidence: [813]AI Co-Investigator is documented as an integrated function of the Enterprise Edition; demo and deployment advice offered. The free Community Edition does not evidence the same AI scope. Source check: 2026-10-15 |
| ACA GroupComplianceAlpha | Supports compliance tasks in the financial sector, such as surveillance, approval of marketing material, KYC and codes of conduct. Documents processing steps and evidence. | ComplianceAlpha uses AI to detect anomalies in compliance documents and workflows and to prioritise review items. Intelligent Statement Processing extracts trading data from PDF statements for employee compliance.[816]Specific AI functions documented Detect anomalies in compliance documents · Prioritise review items by risk · Extract trading data from PDF statements AI evidence: [816]Documented by the vendor; no product test. Source check: 2026-10-14 |
| ACTICOACTICO Compliance Solutions / Anti-Money LaunderingHeadquarters: Germany [819]ACTICO GmbH, Friedrichshafen, Ulm Local Court HRB 731152. Location assignment relates to this documented entity.ACTICO GmbH; ACTICO Group; ACTICO Compliance Solutions; Axe Finance; Axe Credit Portal | Compliance software for banks and insurers with AML monitoring, customer screening, risk classification, case management and FIU reporting. The group also offers credit risk and decision software. | Machine learning supports the assessment and segmentation of suspicious transactions. Generative AI and agents take on research, analysis and draft documentation for AML cases, adverse media and FIU reports; the final decision remains with compliance professionals.[817] [818] [819] [820]Specific AI functions documented Assess AML hits · Analyse investigation information · Prepare reporting and case documentation AI evidence: [817] [818]A current vendor announcement from September 2026 describes the combination of rules, ML, GenAI and agents. SaaS, private cloud and on-premises operation are offered; determine the exact functions and models contractually. Source check: 2026-10-15 |
| Adherent, formerly Compliance & RisksHeadquarters: Ireland [821]Adherent Limited; Republic of Ireland, registration number 356948; registered office Little Island, Cork. Formerly Compliance & Risks. | Identify regulatory requirements for products, materials, markets and supply chains and convert them into auditable tasks. | Adherent describes AI agents that map regulatory requirements to products, materials and markets, prioritise relevant changes and prepare compliance evidence. Subject-matter control remains with internal experts.[125] [126]Specific AI functions documented Map regulatory requirements to products and markets · Assess the applicability of regulatory changes · Prioritise compliance risks and tasks · Prepare compliance evidence AI evidence: [126]Documented by the vendor; not tested in practice. Source check: 2026-10-14 |
| AdvanThinkFraudManager / Amadea AMLHeadquarters: France [825]ISoft SAS under the AdvanThink brand; RCS 381305614, Saint-Aubin, France.ISoft SAS; AdvanThink; FraudManager; Amadea | Software for transaction monitoring and anti-money laundering with case handling, customer profiles and regulatory reporting. | FraudManager and Amadea use machine learning for behavioural analyses and the detection of anomalous patterns. The AML workflow combines profiles, transaction data, alerts and KYC data for investigation.[822] [823] [824] [825]Specific AI functions documented Detect suspicious transaction patterns · Analyse AML customer profiles · Prioritise investigations AI evidence: [822] [823] [824]Currently offered commercially; AI functions complement configurable rule-based scenarios. Source check: 2026-10-15 |
| AegisXAML & KYC ScreeningHeadquarters: Italy [827]AegisX S.r.l., Via Adriano Fiori 32/B, Rome; P.IVA 17937511008.AegisX S.r.l. | Software and data offerings for AML, PEP, sanctions and media screening as well as company and ownership analyses. In-depth analyses are offered in addition. | AI algorithms support matching against global AML lists through an initial resolution of ambiguous hits and the reduction of false matches.[826] [827]Specific AI functions documented Disambiguate AML list hits · Support sanctions and PEP screening AI evidence: [826]Product offerings on request; purely analyst-led dossiers and the general website chatbot are not the basis of the AI evidence. Source check: 2026-10-15 |
| AfterDataAfterData Market AbuseHeadquarters: France [829]French SAS, RCS Créteil 837707652; registered office in Le Perreux-sur-Marne.AfterData SAS | Software for monitoring market abuse and financial crime; the workflow checked supports MAR-related investigations. | AI learns from previous investigations in order to develop surveillance rules and alerts. Machine learning creates investor and security profiles for prioritising anomalous transactions.[828] [829]Specific AI functions documented Monitor market abuse · Prioritise investigations · Improve surveillance rules AI evidence: [828]Currently offered with a product demo. Source check: 2026-10-15 |
| AivodotCompliance Hub; RegWatch; Compliance Monitoring Plan; Due DiligenceHeadquarters: Luxembourg [831]The published cookie policy names Aivodot SARL-S and the address Rue Albert Bousser 4, Alzingen, Luxembourg. The same address appears on the product page.Aivodot SARL-S; Aivodot ComplianceHub; Aivodot Compliance Hub; RegWatch | Aivodot offers a Compliance Hub for regulated fund managers with regulatory monitoring, control planning and third-party due diligence. The modules link measures, evidence, approvals and reports on a common data model. | AI assesses the relevance of regulatory changes and identifies the resulting obligations. It analyses evidence documents against control questions, suggests remedies and produces draft reports. In supplier reviews, it assesses answers, identifies gaps and formulates follow-up questions.[830] [831] [832]Specific AI functions documented Assess regulatory relevance · Check evidence against control questions · Suggest measures · Analyse supplier answers · Draft compliance reports AI evidence: [830]Individual modules or complete package with institutional pricing and demo. Product texts are fully retrievable in the public search index; direct text output of the dynamic pages was limited. Source check: 2026-10-15 |
| AMLYZEAML platform / SamaHeadquarters: Lithuania [834]UAB AMLYZE, Vilnius, company code 305393628.UAB AMLYZE; Sama | AML/CFT software for transaction monitoring, customer risks, investigations and customer and payment screening. Hits can move into shared investigation processes. | The proprietary ML model Sama assesses name variants at word level and supplements the existing screening logic. Word scores and the rules applied are displayed; analysts review the hit and make the decision.[833] [834]Specific AI functions documented Assess name variants · Review sanctions and PEP hits · Prepare screening decisions in a traceable way AI evidence: [833]Sama explicitly available since 16 September 2026 and can be optionally activated. Advisory or primary scoring mode; currently limited to controlled subsets of suitable hits. Source check: 2026-10-15 |
| Aptus.AINext-OS ComplianceHeadquarters: Italy [836]Aptus.AI S.r.l., Pisa, Via Dell’Argine 1; P.IVA 02288220508.Aptus.AI S.r.l.; Next-OS; Next.Aptus | Regulatory monitoring and compliance working environment for external requirements, internal policies and measures. Changes, impacts and implementation can be worked on together. | AI structures legal texts, answers source-referenced compliance questions and compares external requirements with internal documents. It supports impact and gap analyses as well as drafts and updates of policies.[835] [836]Specific AI functions documented Evaluate regulatory changes · Check internal policies for gaps · Draft compliance documents AI evidence: [835]Commercial enterprise offering with demo; AI assistant, monitoring and document editing described as product functions. Source check: 2026-10-15 |
| ASC TechnologiesRecording Insights / AI Policy EngineHeadquarters: Germany [838]ASC Technologies AG, Hösbach.ASC Technologies AG; Recording Insights AI; Neo Suite; AI Policy Engine; AI Policy Generator | Recording and analysis of customer communication for regulatory surveillance and quality management. Predefined and company-specific review policies support financial service providers. | The AI Policy Engine analyses conversations with Azure AI Services and Azure OpenAI, detects risks and points out possible rule violations. The Policy Generator creates company-specific review policies for communication analysis from requirements.[837] [838]Specific AI functions documented Analyse communication for rule violations · Detect risks in conversations · Generate review policies for communication analyses AI evidence: [837]Engine and templates offered commercially; generator with live demo. Integration into Recording Insights or an existing recording environment depends on the offering. Source check: 2026-10-15 |
| AscentAI Regulatory Lifecycle Management | Regulatory monitoring and a company-specific obligations register with change comparison and connection to GRC systems. | AscentFocus identifies regulatory obligations and affected changes from documents. Generative AI summarises changes to individual obligations; the link to GRC systems supports forwarding to policy and control owners.[127] [128] [129] [130]Specific AI functions documented Extraction of regulatory obligations · Identification of affected obligations · Summary of regulatory changes AI evidence: [128]Documented by the vendor; setting up a Regulatory Map and an Obligations Inventory and, where applicable, GRC integration required. No product test. Source check: 2026-10-14 |
| AuneticLARI, audimex and Aunetic AuditHeadquarters: Sweden [841]According to the legal notice, Aunetic Holding AB and Aunetic International AB have their registered office in Stockholm. German and Swiss companies belong to the group; LARI is operated by Aunetic Switzerland AG. A single provider entry.Aunetic Holding AB; Aunetic International AB; Aunetic Germany GmbH; Aunetic Switzerland AG; audimex; audimexAGILE; audimexEE; Blika; LARI; LARI digital; Qnister | Aunetic brings together specialised products for regulatory monitoring, internal audit and other governance tasks. LARI brings together relevant developments, impact assessments, tasks and reports. | LARI analyses regulatory sources with AI and filters changes according to their relevance. The separate Aunetic Audit additionally describes AI support for audit findings and measures; this product is marked as beta with general availability only in 2027.[839] [840] [841] [842]Specific AI functions documented Filter regulatory changes · Analyse regulatory information AI evidence: [839] [840]AI status documented on the basis of the LARI product offered. Aunetic Audit explicitly beta from autumn 2026; general availability according to the vendor only in mid-2027. Do not transfer this availability to existing audimex products. Source check: 2026-10-15 |
| B4FinanceB4Finance KYC / AML Due DiligenceHeadquarters: France [844]French legal entity B4Finance SAS with an address in Levallois-Perret; British and Luxembourg companies are also named.B4Finance SAS; B4Finance by RiskConcile | Anti-money laundering platform for funds and asset managers with KYC documents, risk matrix, ongoing monitoring and regulatory data export. | AI checks documents within the AML due diligence process for alterations and attempts at deception. The results supplement the documented review and the ongoing KYC procedure.[843] [844] [845]Specific AI functions documented Check AML documents for manipulation · Support KYC case handling · Process due diligence evidence AI evidence: [843] [844] [845]Currently offered commercially with demo. Source check: 2026-10-15 |
| Bloomberg RegologyTo the detailed profile | Track regulatory changes, examine applicability and link regulations with risks and controls; international legal sources. | The Regulatory Change Agent analyses regulatory information, identifies relevant changes and supports their mapping to risks and controls. Laws and regulations can be queried in natural language.[131] [132]Specific AI functions documented Identify relevant regulatory changes · Research regulations through dialogue · Map changes to risks and controls AI evidence: [132]Documented by the vendor; no product test. Source check: 2026-10-14 |
| CertivityCertivity CoreHeadquarters: Germany [848]The legal notice names Certivity GmbH in Munich. Specialisation in regulatory product compliance; no general full GRC suite claimed.Certivity GmbH; Certivity Core | Certivity supports regulatory product compliance through the structured management of regulations, standards and internal documents. Requirements and changes can be linked with development and evidence processes. | Certivity Core describes an AI assistant for regulatory documents: summaries, extraction of key points, version comparisons and detection of changes. Semantic search supports research in the regulatory corpus.[846] [847] [848]Specific AI functions documented Summarise regulatory documents · Identify requirements and changes · Compare document versions AI evidence: [846]Commercial platform with demo offering and documented AI functions in Certivity Core. Check coverage of the customer's own regulations and export integration separately. Source check: 2026-10-15 |
| cmplianceCompliance AI AgentsHeadquarters: Switzerland [850]Operator paterhn GmbH, Gotthardstrasse 26, Zug.paterhn GmbH; cmpliance.ai | Software for KYC/AML onboarding and other compliance evidence. Checks, document gaps, responsibilities and human approvals are brought together in traceable decision packages. | AI agents carry out screening and classification, collect supporting evidence and compile decision templates. Subject-matter approvals, rejections and justifications remain documented; the final decision lies with a human.[849] [850]Specific AI functions documented Prepare screening cases · Gather compliance evidence · Produce decision packages AI evidence: [849]Explicitly Early Access. Contract terms describe subscription-based use; the specific pilot scope and approvals are to be agreed. Source check: 2026-10-15 |
| compleadFusion / Sanction Scanner / Nova AIHeadquarters: USA [852]Current terms of use name Complead Inc., Wilmington, Delaware. Earlier Sanction Scanner pages name London and Istanbul; the new legal entity is shown for the current platform.Complead Inc.; Sanction Scanner; Sanction Scanner Ltd; Fusion; Nova AI | Platform for customer risks, sanctions, media screening, transaction monitoring and financial crime cases. The modules work on shared customer files, risk scores and case processes. | AI agents support alert handling and case preparation. The copilot reads the case and drafts a reviewable decision; rules can be prepared in natural language. Results and recommendations require subject-matter review.[851] [852] [853]Specific AI functions documented Handle AML alerts · Produce decision templates · Prepare monitoring rules AI evidence: [851] [852]Commercial platform offering with demo. Since September 2026, Sanction Scanner has been a product of the complead brand; no additional provider count. Source check: 2026-10-15 |
| ComplearComplear OS; Complear SuiteHeadquarters: Portugal [858]The official project partner page of the EIC Pathfinder project LASERBLOOD names Compliance Tech Sociedade Unipessoal LDA in Guimarães, Portugal. The vendor's privacy policy confirms Compliance Tech as operator of the Complear brand.Compliance Tech Sociedade Unipessoal LDA; Compliance Tech; Complear Health; Complear OS; Complear Suite | Complear links regulatory requirements with product requirements, risks, tests and evidence in safety-critical industries. The proprietary software supports technical documentation and audit preparation, among other things for medical devices. | The vendor describes language models for the semantic processing of regulatory content as well as agents for change monitoring, requirement mapping, evidence collection and the detection of documentation gaps. Approvals and submissions remain reserved for human owners.[854] [855] [856] [857] [858]Specific AI functions documented Process regulatory content semantically · Map requirements · Track regulatory changes · Detect evidence gaps · Prepare technical documentation AI evidence: [854] [855]Proprietary platform and project-specific implementation with a solutions team described. The website marks healthcare and other areas as in use, whereas automotive and aerospace are still marked as being expanded. Confirm the specific module and implementation status; no ready-made offering for all industries can be inferred across the board. Source check: 2026-10-15 |
| COMPLYComplyPlatform / Comply for RIAComplySci, RIA in a Box, NRS and illumis merged; independent of Euronext ComplyLog. Trailight also run under COMPLY since its acquisition on 27.10.2025. | Brings together corporate and employee compliance for financial service providers. Supports recurring tasks, policies and dealing with regulatory changes. | ComplyAI Policy Guide answers questions on the basis of approved compliance manuals, with sources. The MCP Server also enables dialogue-based trade pre-clearance via AI assistants; the subsequent decision is made on the basis of the firm's rules.[859] [860] [861]Specific AI functions documented Query compliance policies in natural language · Submit trade pre-clearance requests through dialogue AI evidence: [859]Documented by the vendor; the MCP interface requires a connected assistant. Firm-specific configuration and access rights; not tested in practice. Source check: 2026-10-14 |
| ComplyAdvantageComplyAdvantage MeshHeadquarters: United Kingdom [863]IVXS UK Limited, trading as ComplyAdvantage, with registered office in London.IVXS UK Limited; ComplyAdvantage Mesh; Golden; Golden Recursion Inc. | Financial compliance platform for customer and sanctions screening, ongoing monitoring, transaction monitoring and case handling. Risk data and decisions are handled in connected review processes. | AI agents analyse customer and transaction context, handle screening hits and escalate high-risk cases with prepared justifications. Thresholds and risk types are based on internal requirements; agent actions are recorded in the shared audit trail.[862] [863] [864]Specific AI functions documented Investigate screening hits · Assess transaction risks · Prepare justifications for escalated compliance cases AI evidence: [862]Mesh and Agentic Workflows are offered with a demo and existing platform access. Define autonomy, thresholds, modules and human approvals for each deployment; no success rate adopted as checked. Source check: 2026-10-15 |
| ComplyfirstRegulatory Reporting / AI Custom Reporting WorkflowsHeadquarters: Ireland [866]Complyfirst Limited, registered in Ireland under no. 725307; the privacy page names Dublin.Complyfirst Limited; FDJ Ecommerce Ltd | Software for regulatory reports and case-related reports of financial institutions. Structured reporting formats and individually set-up reporting chains are offered separately. | AI workflows support the preparation and submission of suspicious activity reports and individual compliance reports. The ordinary validation of structured reporting data is not classified as AI across the board.[865] [866]Specific AI functions documented Prepare suspicious activity reports · Produce individual compliance reports AI evidence: [865]Commercial offering with registration, demo and customer-specific set-up. Agree the specific AI step and the subject-matter approval for each report. Source check: 2026-10-15 |
| ConformisConformis GRCHeadquarters: Germany [869]Conformis GRC; Neura Labs UG (haftungsbeschränkt) | Conformis from Neura Labs supports regulated financial companies in reconciling requirements, internal policies and controls. The platform shows deviations per requirement, links references and prepares suggested wording. Workspaces for control scope, regulatory questions and evidence complement the document analysis. Subject-matter owners confirm suggested findings and retain responsibility for their implementation. | The AI reads internal documents, maps them to regulatory requirements and suggests specific text changes for identified gaps. Answers and findings are given source references down to the passage of text. The vendor describes human approvals for suggested findings.[867] [868] [869]Specific AI functions documented Map policies to regulatory requirements · Identify compliance gaps per requirement · Suggest specific policy changes · Answer document-related questions with source references AI evidence: [867]Documented by the vendor; not tested in practice Source check: 2026-10-14 |
| CorlyticsHeadquarters: Ireland [870]Corlytics Limited is registered in Ireland under 535110; registered office Floor 3, Block 3, Miesian Plaza, Dublin 2. The current group policy names Irish, British, Portuguese and US group companies; these are not counted separately. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office.Clausematch; Clausematch Limited | Corlytics links regulatory content with obligations, internal policies and controls. | Corlytics extracts regulatory obligations with AI, maps them to policies and controls and suggests additions to close identified gaps.[133] [134] [870] [871]Specific AI functions documented Extract obligations from regulations · Map obligations to policies and controls · Identify gaps and suggest adjustments AI evidence: [133]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| CUBE RegPlatformTo the detailed profile Headquarters: United Kingdom [872]CUBE Content Governance Global Limited; registered in England and Wales under 07886383; Tower 42, 25 Old Broad Street, London. Not to be confused with CUBE companies of the same name. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office. | CUBE RegPlatform links regulatory monitoring, applicability assessment, obligations, controls and evidence of implementation. | RegPlatform describes AI agents for regulatory processes: filtering out relevant changes and preparing the next processing steps. The platform links changes with obligations, controls and evidence.[135] [872]Specific AI functions documented Filter out relevant regulatory changes · Draft next compliance steps AI evidence: [135]Documented by the vendor; no product test. Source check: 2026-10-14 |
| Dakota SoftwareProActivity Compliance+ | Links site-specific legal obligations, calendars and recurring tasks with checklists. Adds central analyses to audit, incident and training data. | The AI Permit Analyzer extracts obligations and thresholds from permits and uses them to prepare tasks and checklists. Dakota specialists review and structure the results before they are handed over to the software.[873] [874] [875]Specific AI functions documented Extract permit obligations and thresholds · Translate obligations into tasks and checklists AI evidence: [875]Documented as a managed service with Dakota Compliance Services; handover into the Dakota platform or spreadsheet format. Not tested in practice. Source check: 2026-10-14 |
| DataleonCompliance OS / LéonHeadquarters: France [877]Dataleon SAS, RCS Paris 820897585; registered address in Paris.Dataleon SAS | Compliance platform for KYC, KYB and AML with documented case decisions and ongoing monitoring. | The AI agent Léon collects and reads documents and register information, checks sanctions and PEP signals and prepares an evidenced case for human approval or escalation.[876] [877]Specific AI functions documented Prepare AML cases · Consolidate evidence · Document case decisions AI evidence: [876]Currently offered as a platform with demo; subject-matter decisions remain with the user. Source check: 2026-10-15 |
| ECIX TechMIA EnterpriseHeadquarters: Spain [879]ECIX Group; Ecixgroup S.L.; ECIX GROUP SLU; MIA Enterprise | MIA Enterprise is a platform developed by ECIX for reviewing regulatory evidence and documents. It supports compliance assessments, data extraction, reports and the qualification of critical suppliers. The solution can be integrated into existing systems and is offered for public or private clouds as well as on-premises installations. | MIA Enterprise analyses compliance evidence, extracts information from contracts and policies and recommends corrective actions. A context-aware assistant supports compliance checklists; further workflows review supplier documents and generate reports.[878] [879] [880]Specific AI functions documented Analysis of compliance evidence · Extraction from contracts and policies · Support with compliance checklists · Review of supplier evidence AI evidence: [878]Platform documented by the vendor with customer-specific parameterisation, integration and pilot testing in the implementation project; cloud and on-premises options described. No product test. Source check: 2026-10-14 |
| EnhesaCompliance IntelligenceRegScan belongs to Enhesa. | Maps EHS requirements to the respective sites. Links legal registers, original sources and the assessment of compliance status. | Enhesa describes an AI agent for checking the applicability of regulatory requirements and an assistant for questions based on its own specialist content. MCP Connect provides this content, with sources, to connected AI assistants.[881] [882] [883] [884]Specific AI functions documented Pre-check the applicability of regulatory requirements · Answer regulatory questions with specialist sources · Integrate regulatory content into own AI assistants AI evidence: [884]Documented by the vendor; own use of agents/MCP requires a connection. Subject-matter control remains intended. No product test. Source check: 2026-10-14 |
| ERMLibryo Sites / Libryo AssessLibryo part of ERM since 2022. | Maps legal changes to sites and links them with tasks, assessments, audits and inspections. Supports the tracking of corrective actions. | ERM Libryo uses language models for preparing legal content and proprietary ML models for classifying sections of legislation. This is intended to identify business-relevant obligations; human control is built in.[885] [886]Specific AI functions documented Classify sections of legislation with ML · Prepare relevant regulatory obligations for compliance AI evidence: [885]Documented by the vendor for Libryo with subject-matter oversight; supplementary expert services are described separately. Not tested in practice. Source check: 2026-10-14 |
| FenergoClient Lifecycle ManagementHeadquarters: Ireland [890]The current corporate/supply chain statement for the financial year to 31 March 2026 explicitly names Dublin, Ireland as headquarters. | Links client onboarding and ongoing review with KYC, client classification and regulatory requirements. Classified as a specialist in financial compliance. | Fen-AI/KYRA describes AI agents for KYC and client processes: classifying and extracting documents, comparing screening hits and producing compliance reports from authorised data.[887] [888] [889]Specific AI functions documented Classify and extract KYC documents · Pre-check screening hits · Produce compliance reports AI evidence: [889] [887]Automation agents in Fen-AI/KYRA documented by the vendor; implementation scope and human approvals project-specific. No product test. Source check: 2026-10-14 |
| FinregEFinregE Regulatory OS / AI RIG / RIG MAPsHeadquarters: United Kingdom [892]FinregE Limited; FinregE Regulatory OS; AI RIG; AI RIG MAPS | FinregE links regulatory monitoring, obligation inventories, policies and controls in a common data model. Teams can map new requirements to the affected processes and owners, work on coverage gaps and track measures. Policy changes go through drafting, review and approval steps. Control tests and documented processing steps support preparation for audits. | AI RIG extracts obligations from regulatory texts. RIG MAPs maps them to internal policies, processes and controls and flags gaps. Further AI functions support draft measures and queries of the policy library.[891] [892] [893]Specific AI functions documented Extract regulatory obligations · Map obligations to internal policies and controls · Identify coverage gaps · Draft action plans AI evidence: [891] [893]Documented by the vendor as an existing Regulatory OS; no product test. Source check: 2026-10-14 |
| FlagrightFlagright / AI ForensicsHeadquarters: USA [896]The current privacy policy names Flagright Data Technologies Inc, USA; the terms of use name this company as the contracting party. Further entities in the United Kingdom, Singapore and India.Flagright Data Technologies Inc; Flagright Pte. Ltd.; Flagright AI Forensics | Platform for AML transaction monitoring, customer risk assessment, investigations, quality assurance and regulatory reporting. Links controls with case files and audit logs. | AI agents support investigation processes and produce case narratives. The AI Rule Builder translates natural-language requirements into AML rules; a copilot makes case data accessible.[894] [895] [896]Specific AI functions documented Investigate AML cases · Draft case narratives · Create AML rules from natural language AI evidence: [894]Commercial SaaS platform with demo and described productive use. Agents are tested before activation; scope and approvals depend on the configuration. Source check: 2026-10-15 |
| Freyrfreya.Intelligence; freya.DocChat; freya.RTQHeadquarters: USA [898]The contact page names the US location Princeton; the product terms name Freyr Inc. and Freyr Software Services Pvt. Ltd. Group listed once under the US provider entity; worldwide branches are not additional providers.Freyr Inc.; Freyr Software Services Pvt. Ltd.; Freyr RegIntel; freya.Intelligence | With freya.Intelligence, Freyr offers specialised software for regulatory requirements in life sciences and other regulated product areas. It links regulations, authority queries, documents and approval workflows. | Ask freya and DocChat support questions about and comparisons of regulatory documents. freya.RTQ extracts information from unstructured authority queries and drafts responses on the basis of historical cases. The drafts go through the intended approvals.[897] [898] [899]Specific AI functions documented Evaluate and compare regulatory documents · Extract information from authority queries · Prepare draft responses to authority queries AI evidence: [897]Trial access and subscriptions are published. According to the pricing overview, RTQ and further workflow functions belong to the Corporate offering; define the specific modules and markets in the contract. Source check: 2026-10-15 |
| HarmoneyHarmoney / HarmonAIHeadquarters: Belgium [901]Harmoney NV, registered office Ghent, Belgium; CBE 0666.716.731.Harmoney NV; HarmonAI | Compliance platform for customer due diligence, anti-money laundering, screening and case handling. HarmonAI integrates AI tools into configurable review processes. | AI supports the analysis of customer data and documents, summarises screening results and helps review risk signals. Agents for adverse media and AML hits are integrated into case handling.[900] [901]Specific AI functions documented Summarise screening results · Analyse KYC documents · Review AML hits AI evidence: [900]Modular commercial offering with demo. The platform also orchestrates external AI services; specific agents, approvals and contract scope must fit the deployment. Source check: 2026-10-15 |
| Harpocrates SolutionsHARPOCRATES COMPLY.RegHeadquarters: Germany [903]Harpocrates Solutions GmbH, Berlin, HRB 218469 B.Harpocrates Solutions GmbH; COMPLY.Reg; COMPLY.Doc | Regulatory requirements management with mapping to controls, tasks, owners and audit evidence for European and German frameworks. | AI extracts individual requirements from legal texts with article references and merges overlaps into common controls. Confirmations are logged; humans approve the AI results.[902] [903]Specific AI functions documented Extract requirements from legal texts · Identify overlapping requirements · Prepare control mappings AI evidence: [902]COMPLY.Reg is currently offered as available with demo. COMPLY.Doc is separately marked as in development and is not counted here as available. Source check: 2026-10-15 |
| HawkHawk AML / AML Investigative AgentHeadquarters: Germany [906]Hawk AI GmbH, Munich, HRB 243598. Not to be equated with Hawk Infinity or other companies of the same name.Hawk AI GmbH; HAWK:AI; Hawk AML Investigative Agent | AML and sanctions compliance with risk assessment, transaction monitoring, case management and suspicious activity reports. What is recorded here are the compliance workflows, not general fraud detection alone. | The AML Investigative Agent collects case data, summarises investigations, identifies typologies and prepares draft texts for suspicious activity reports. Workflows can be derived from procedural instructions; defined steps require human review or approval.[904] [905] [906]Specific AI functions documented Prepare AML investigations · Summarise case data · Produce draft suspicious activity reports AI evidence: [904] [905]Investigative Agent documented as a launched product since March 2026. Modular use with existing case systems possible; confirm functions, approvals and deployment in the offer. Source check: 2026-10-15 |
| IMTFSiron OneHeadquarters: Switzerland [908]Informatique-MTF SA, Givisiez, Switzerland.Informatique-MTF SA; Siron; Siron One; Siron AML; Siron KYC; Siron EMBARGO; SironTCR; Tonbeller | Regulatory compliance software for AML, KYC, sanctions screening and case management. Siron One combines risk assessment, investigations and the preparation of regulatory reports. | Siron One combines rules with supervised and unsupervised ML methods to calculate risk scores, prioritise hits and detect suspicious activities. The results feed into case handling and reporting processes; not every automation here is AI.[907] [908] [909] [910]Specific AI functions documented Assess AML risks · Prioritise compliance hits · Investigate anomalous activities in the case context AI evidence: [907]Commercial platform with customer portal and modular deployment options. Agree model configuration, reporting formats and licence scope; no performance or model test of our own. Source check: 2026-10-15 |
| KlaviusKlavius Regulatory Watch; Compliance Risk; DORA; Delegate OversightHeadquarters: Luxembourg [912]The trust page names Klavius SARL, register number B311971, with its registered office at 9 rue du Laboratoire in Luxembourg.Klavius SARL; Klavius Regulatory Oversight | Klavius supports Luxembourg fund managers with regulatory monitoring, compliance risk assessment, control monitoring, outsourcing oversight and DORA documentation. Results are linked with the decisions of responsible persons. | AI reads publications, policies and evidence, assesses the impact of changes and drafts control suggestions, risk assessments and reports. The AI outputs are suggestions for qualified owners; they do not independently approve cases or submit them to supervisory authorities.[911] [912] [913]Specific AI functions documented Analyse regulatory changes · Draft controls and risk assessments · Review evidence · Produce reports for owners AI evidence: [911] [912]Access is set up for named firms; no open self-registration. The public terms of use are explicitly a draft still under legal review; signed customer contracts take precedence. Source check: 2026-10-15 |
| KreiosREGMATIX; Smart Convert; Smart Compare; Smart ControlHeadquarters: Luxembourg [915]The vendor page names Kreios s.à r.l., Sandweiler, Luxembourg, RCS B118494, and identifies REGMATIX as its own platform.Kreios s.à r.l.; REGMATIX; Regmatix | REGMATIX supports financial institutions in checking regulatory documents and disclosures. The platform compares content across documents, versions, languages and external authors and documents findings for internal controls and audits. | AI extracts and structures information from regulatory documents. The subsequent compliance conclusions are explicitly based on traceable mappings and rules; the software supports checking for missing or contradictory information.[914] [915]Specific AI functions documented Extract regulatory documents · Structure disclosure data · Support cross-document controls AI evidence: [914]Offered as usable SaaS; specific product use publicly documented. AI relates to information extraction, not to autonomous approval of regulatory statements. Source check: 2026-10-15 |
| LandingRedEU compliance platformHeadquarters: Italy [916]Operator AB Corporate Advisory S.R.L., Corso del Popolo 39/A, Treviso; VAT/CF 05406430263, REA TV-441553.AB Corporate Advisory S.R.L. | Specialised platform for European compliance with a focus on the AI Act. Links inventories, requirements, evidence, documentation and audit trails; further frameworks depend on the package. | Language models draft technical documentation and assessment documents on the basis of registered system data, risk classes and evidence. An assistant answers regulatory questions with article references.[916]Specific AI functions documented Draft technical documentation · Prepare assessment documents · Answer regulatory questions with references AI evidence: [916]SaaS offering with a seven-day trial period and limited AI document generation; additional document types and frameworks depend on the plan. Individual functions are explicitly on the roadmap. Source check: 2026-10-15 |
| LeegleLeegle Regulatory & Product Compliance OSHeadquarters: Germany [919]The indexed legal notice names Moonblock GmbH in Munich as operator. The rebranding from Leegle.ai to Leegle does not create an additional entry.Moonblock GmbH; Leegle.ai | Leegle supports manufacturers and retailers in identifying applicable product regulations, deriving specific requirements and monitoring regulatory changes. Requirements are linked with the respective product and the source regulations. | The product description names AI for evaluating product characteristics and mapping applicable regulations. An AI assistant answers questions about legal texts with references; regulatory requirements are converted into structured lists.[917] [918] [919] [920]Specific AI functions documented Map applicable product regulations with AI support · Extract regulatory requirements · Answer questions about regulations with references AI evidence: [917] [918]Demo and customer use cases are published. The AI functions are described in indexed vendor texts; direct text retrieval of the website was partly empty. No product test of our own. Source check: 2026-10-15 |
| LegalTegrityAI legal registerHeadquarters: Germany [922]LegalTegrity GmbH, Frankfurt am Main, HRB 117038.LegalTegrity GmbH; LegalTegrity Rechtskataster | Legal register for corporate obligations, regulatory changes, owners and evidence of implementation; the provider also offers whistleblowing and ISMS software. | AI analyses legal changes, assesses their relevance to the company and supports assignment to owners. The product description also names the detection of missing evidence and gaps in the compliance process.[921] [922]Specific AI functions documented Assess legal changes · Map requirements to the company · Detect evidence gaps AI evidence: [921]Offered as a product with demo. Confirm contractually the scope of legal areas, country coverage, content updates and AI approvals. Source check: 2026-10-15 |
| LegartisLegartis Legal AI Workspace; Legal AgentHeadquarters: Switzerland [924]The legal notice names Legartis Technology AG in Zurich, CHE-438.235.861.Legartis Technology AG; Legartis Legal Agent | In addition to contract work, Legartis offers a documented process for regulatory compliance. Requirements are structured by products, countries and materials and linked with contracts, evidence and measures. | The Legal Agent researches requirements and checks documents against them. It shows deviations and missing evidence, prepares adjustments and produces compliance reports; implementation is approved by Legal and Compliance.[923] [924]Specific AI functions documented Research regulatory requirements · Check documents against requirements · Identify compliance gaps · Produce compliance reports AI evidence: [923]Demo and trial access are offered. Included on the basis of the specific regulatory compliance process; not all general legal AI functions count as GRC. Source check: 2026-10-15 |
| LicentiumCompass; Atlas; HorizonHeadquarters: United Kingdom [927]The terms of use name LICENTIUM LTD, registered in England and Wales under 17057360, with registered office in London. Consultancy and software are counted together once.LICENTIUM LTD; Licentium AI; Compass; Atlas; Horizon; Orb | Licentium offers software for regulatory research, the review of marketing content and the monitoring of regulatory changes. The tools are aimed in particular at regulated technology and financial companies. | Compass answers regulatory questions on the basis of linked legislative sources. Atlas checks advertising copy against regulatory requirements; Horizon summarises changes for compliance teams. The additional platform Orb is still being built with development partners.[925] [926] [927]Specific AI functions documented Answer regulatory questions with source references · Check marketing copy against compliance requirements · Summarise regulatory changes AI evidence: [925] [926]Compass, Atlas and Horizon are offered as usable tools with an API. Orb is explicitly in development. Check access, pricing limits and data processing before productive use. Source check: 2026-10-15 |
| LucinityLuci / Financial Crime Case ManagementHeadquarters: Iceland [929]Lucinity Group hf, no. 561118-1670, is registered in Iceland; headquarters Reykjavík. Icelandic, British and US subsidiaries are counted as one group.Lucinity Group hf; Lucinity ehf; Lucinity UK Limited; Lucinity Inc.; Luci | Software for money laundering and financial crime investigations with case management, customer data, investigations and regulatory reporting. Luci adds an AI assistant to these workflows. | Luci summarises cases and risk alerts, supports the review of adverse media, answers questions about internal policies and produces editable draft case reports and suspicious activity reports. Logs distinguish between AI actions and human work steps.[928] [929]Specific AI functions documented Summarise compliance cases · Answer policy questions · Prepare draft suspicious activity reports AI evidence: [928]Platform, plugin and demo are described. The Luci product page places the subject-matter decision with the user; audit log and case management may require an extended scope of services with the plugin. Source check: 2026-10-15 |
| LYODSBIEN AI Agents / AML-CFT SolutionsHeadquarters: Hong Kong [932]Lyodssoft Limited, Hong Kong Science Park, documented as the regional research and development unit of Lyodssoft Singapore Pte Limited. Hong Kong refers to this documented entity, not the sole group headquarters.Lyodssoft Limited; Lyodssoft Singapore Pte Limited; BIEN | AML/CFT software and supplementary AI agents for screening, PEP checks, adverse media and investigation documentation at financial institutions. | Small language models prioritise screening hits on the basis of context and risk characteristics, summarise files and group media reports and entities for case review.[930] [931] [932]Specific AI functions documented Prioritise screening hits · Consolidate adverse media and entities · Summarise review documents AI evidence: [930]BIEN is offered as a modular commercial agent offering to supplement existing AML systems; contact required for deployment. Availability of all modules is not assumed across the board. Source check: 2026-10-15 |
| MajorsMajors ConformitéHeadquarters: France [934]Majors Digital SAS, RCS Castres 987625795; registered office in Sémalens, France.Majors Digital SAS | Compliance software for financial advisers and regulated financial service providers with KYC, regulatory documents and inspection preparation. | An AI assistant answers regulatory questions on the basis of Legifrance and supports documents for AMF/ACPR inspections. AI reads customer documents and extracts data to pre-fill KYC cases.[933] [934]Specific AI functions documented Answer regulatory questions · Extract KYC data · Prepare inspection documents AI evidence: [933]Commercial product with demo. Source check: 2026-10-15 |
| MarbleMarble Detection / AI AutomationsHeadquarters: France [936]Marble SAS, RCS Paris 922444674; registered address in Paris.Marble SAS; Checkmarble | Platform for AML detection, sanctions and PEP screening and investigations with documented case handling. | AI-supported smart matching and filtering support the evaluation of sanctions and PEP hits. AI automations are shown separately in the Enterprise offering.[935] [936]Specific AI functions documented Assess screening hits · Reduce false positives · Support AML investigations AI evidence: [935]SaaS offering; Enterprise with AI automations and optional on-premises operation. AI is not automatically part of the free open-source offering. Source check: 2026-10-15 |
| MetisLegenda AMLHeadquarters: Italy [937]Metis S.r.l., Piazza Sicilia 6, Milan; P.IVA/CF 12217420962, REA 2647101.Metis S.r.l.; Legenda AML | Software for KYC/KYB and transaction monitoring with traceable dossiers, documented controls and reconstructable decisions. | An AI agent checks uploaded or integrated documents for relevance and completeness, extracts key information and supports consistent AML controls.[937]Specific AI functions documented Evaluate AML documents · Check completeness · Prepare information in dossiers AI evidence: [937]Product offered with KYC and transaction monitoring modules and existing login; demo and scope via the provider. Source check: 2026-10-15 |
| MyComplianceOfficeMCOGovernor Software and Pythagoras in the provider group. | Covers compliance programmes in banking, capital markets and insurance. Focus areas are personal trading, inside information, registrations, surveillance and regulatory changes. | Cara answers questions about the company's own compliance policies and processes from the knowledge base. MCO also describes AI for extracting regulatory obligations and mapping them to internal policies.[938] [939]Specific AI functions documented Query compliance policies and processes · Extract regulatory obligations · Map obligations to internal policies AI evidence: [939]Documented by the vendor; Cara as a named assistant, further AI functions described at platform level; check the specific module scope; no product test. Source check: 2026-10-14 |
| Napier AINapier AI Continuum / Insights AIHeadquarters: United Kingdom [942]Napier Technologies Limited, England and Wales, no. 09901129; registered address and place of business in London.Napier Technologies Limited; Napier AI Continuum; Insights AI | Specialised anti-money laundering platform with transaction monitoring, customer screening, case handling and regulatory reporting. Control rules, changes and investigation steps are logged. | Insights AI analyses behavioural patterns and risk signals within investigations. Rule-based and AI scores support prioritisation; AI provides explanatory texts on anomalous activities. The platform links these analyses with case and reporting processes.[940] [941] [942]Specific AI functions documented Detect AML risk signals · Prioritise investigation cases · Explain customer behaviour for compliance reviews AI evidence: [940] [941]Commercial modular offering with demo. According to the vendor, the current AI extensions are available in Transaction Monitoring; check configuration, models and reporting scope for each contract. Source check: 2026-10-15 |
| NeteriumJetscan / Watchlist Screening APIsHeadquarters: Belgium [944]Neterium srl, Chemin du Cyclotron 6, Louvain-la-Neuve.Neterium srl; Jetscan; Jetflow | SaaS APIs for watchlist and sanctions screening during customer onboarding, counterparty screening and ongoing monitoring. The functions can be integrated into existing platforms. | Machine learning is combined with rules and geolocation in order to match hits better and reduce false positives. Supplementary priority scores sort alerts by relevance; detections remain explainable.[943] [944]Specific AI functions documented Match sanctions and watchlist hits · Reduce false positives · Prioritise review alerts AI evidence: [943]Commercial REST APIs with integration, test environment and proof of concept. The APIs are functions for existing workflows, not a complete GRC suite. Source check: 2026-10-15 |
| NeurasixCORA; DISA; VEGA; SARAHeadquarters: India [946]The terms explicitly identify Neurasix AI Pvt. Ltd., incorporated in India, as the operator. The product page names the registered office in Bengaluru and CIN U62011KA2025PTC204071; Neurasix Inc. in Delaware is also listed, but is not a second register entry.Neurasix AI Pvt. Ltd.; Neurasix Inc.; CORA; DISA; VEGA; SARA | Neurasix brings together regulatory changes, obligations, document review and source research for finance, risk, audit and compliance teams. The focus is on financial services in India and the Gulf states. | VEGA checks uploaded policies or regulatory reports against requirements and delivers gap reports with linked references and suggested corrections. DISA supports the impact assessment of new requirements; SARA delivers regulatory answers with sources.[945] [946]Specific AI functions documented Check regulatory documents for gaps · Assess the consequences of regulatory changes · Draft policies AI evidence: [945] [946]Product demo and subscriptions are offered. Modules, jurisdictions covered and credits must be checked contractually; the terms require independent subject-matter review of the AI outputs. Source check: 2026-10-15 |
| NimonikCompliance ManagementBillTrack50 / LegiNation part of the provider group since July 2026. | Combines the monitoring of regulations and standards with audit planning, checklists, findings and corrective actions. Supports mobile audit processes. | Nimonik documents AI summaries of regulatory documents, the extraction of obligations and a chatbot on laws and selected standards. Supplementary drafts support policies, audit findings and corrective actions.[947] [948] [949] [950]Specific AI functions documented Summarise regulations and changes · Extract compliance obligations from documents · Handle regulatory questions in dialogue · Draft policies and corrective actions AI evidence: [950]Documented by the vendor; AI offering focuses on key documents and selected jurisdictions and standards. Not tested in practice. Source check: 2026-10-14 |
| Obsidian Regulatory IntelligenceObsidian; Regulator AI; Obsidian MCPHeadquarters: Switzerland [953]The terms of use name Obsidian Technologies SARL, incorporated under Swiss law and headquartered in Lausanne. Not to be equated with the note-taking software of the same name.Obsidian Technologies SARL; Regulator AI; Obsidian Monitoring Advisory | Obsidian brings together regulatory sources, monitoring and research for compliance teams. The platform can also feed regulatory data into external AI assistants. | Regulator AI supports source-referenced regulatory questions. The documented MCP connection provides the official text, jurisdiction and status of a regulation to external AI assistants. No statements about completeness or freedom from errors are derived from this.[951] [952] [953]Specific AI functions documented Answer regulatory questions on the basis of linked sources · Provide regulatory data to external AI assistants AI evidence: [951] [952]Trial access and subscriptions are offered; the MCP connection requires an account and a suitable external AI system. Confirm available markets, pricing plan and data processing in the specific offer. Source check: 2026-10-15 |
| OkaiOkCompliance; Okai Compliance HubHeadquarters: Brazil [956]Vendor contact names São Paulo. The published provider name is Okai Tecnologia Ltda.; OkCompliance not counted separately.Okai Tecnologia Ltda.; OkCompliance; Okai Compliance Hub | Okai brings together regulatory publications, obligations, deadlines and actions for Brazilian financial companies. Documents and evidence remain linked to the analysis and to the responsible persons. | The platform summarises regulatory texts, supports the assessment of their impact and suggests next steps. The product announcement for OkCompliance additionally describes AI-supported interpretation of regulations and their integration into compliance workflows.[954] [955] [956]Specific AI functions documented Summarise regulatory changes · Analyse the impact of requirements · Suggest next compliance steps AI evidence: [954] [955]Free and paid access with plan-dependent AI quotas; scope differs for companies and individual users. Regulatory focus on Brazil. Source check: 2026-10-15 |
| PolixisARDIS / PEP&REP / CheckMate / AiDAHeadquarters: Switzerland [958]Polixis SA; Geneva is named as global headquarters, 11 Rue de Cornavin.Polixis SA; AiDA; Graph AI; ARDIS; PEP&REP; CheckMate | Compliance data and applications for sanctions, PEPs, media alerts and company and ownership structures. Entity resolution and source references connect the individual datasets. | Graph AI answers natural-language questions on ownership chains, connections and sanctions exposure. The integrated AiDA chat interface combines curated data, a knowledge graph and current media sources into evidence-backed answers.[957] [958]Specific AI functions documented Investigate ownership chains in natural language · Analyse connections and sanctions exposure · Generate evidence-backed due diligence answers AI evidence: [957]Graph AI and AiDA described as integrated functions of the commercial solutions; demo offered. Source check: 2026-10-15 |
| PolziaPolzia Compliance InboxHeadquarters: Germany [961]The legal notice and terms and conditions name Owais Gharaibeh as operator in Berlin. No GmbH or other undocumented legal form is assumed.Polzia; Owais Gharaibeh (operator) | Polzia combines regulatory monitoring with an inbox, action management, a deadline calendar and reports for compliance teams. The entries refer to their original regulatory sources. | AI classifies changes by relevance and severity, creates company-specific impact notes and groups related developments. When an action is created, the title, priority, deadline and next steps are suggested.[959] [960] [961]Specific AI functions documented Classify regulatory changes · Draft impacts and summaries · Pre-fill compliance actions AI evidence: [959] [960]The current website offers a 14-day trial period and subscriptions. Older terms and conditions additionally name a free Starter plan; confirm the applicable scope before use. Advertised accuracy rates are not adopted. Source check: 2026-10-15 |
| PROXORACompliance risk monitor and action managementHeadquarters: Germany [964]Proxora GmbH; Nockherstraße 4, Munich; registered office and registry court Munich, HRB 138423. Geography checked on 15.10.2026; no conclusions on hosting or owners drawn from the registered office. | Combines compliance risk analyses with action planning and tracking. Risk drivers, responsibilities, milestones and implementation status can be mapped to one another. | Mira checks business partner assessments and related documents for plausibility, detects anomalies and derives recommendations for action for compliance teams.[962] [963] [964]Specific AI functions documented Plausibility check of business partner assessments · Detection of anomalies · Recommendations for action for compliance reviews AI evidence: [963]Documented by the vendor; no product test. Source check: 2026-10-14 |
| QuantexaDecision Intelligence / Q AssistHeadquarters: United Kingdom [966]Quantexa Limited, England and Wales No. 10045407; registered office and headquarters in London.Quantexa Limited; Q Assist; Quantexa Decision Intelligence; Aylien | Platform for connected risk and compliance investigations. In AML use, customers, counterparties and transaction relationships are carried over into case management and reports. | Q Assist supports investigative tasks via natural language. The platform combines prepared data and network analyses with AI to provide risk context for triage and investigation; workflows include case handling and report generation.[965] [966] [967]Specific AI functions documented Support compliance investigations via language dialogue · Analyse connected risk relationships · Support case handling with data context AI evidence: [965]Q Assist and investigation functions are documented as platform capabilities and offered via demo. The separately advertised cloud AML product is aimed at US banks; no general European product availability is derived from this. Source check: 2026-10-15 |
| Red-on-lineEHS PlatformPart of Infopro Digital. | Links regulatory content with site-specific compliance assessments. Supports action plans and the tracking of identified deviations. | The Red-on-line product page checked describes the management of EHS actions and compliance processes. Specific AI support for these tasks is not documented in the source check.[968] [969]Not specifically documented in the source check Action management page read and vendor domain searched for AI/intelligence artificielle. No specific product evidence found; no statement that AI is absent. Sources checked: [968]No specific available AI support documented in the source check; no product test. Source check: 2026-10-14 |
| Redica SystemsIntelligence Cloud / Redica App | Prepares regulatory developments, inspections and enforcement actions for life sciences companies. Supports audit planning and the assessment of quality and supplier risks. | The Redica App supplements regulatory signals with AI summaries and summaries of changes. Sources and reasoning steps support traceability when reviewing impacts on compliance and quality processes.[970] [971]Specific AI functions documented Summarise regulatory publications · Prepare changes for compliance assessment AI evidence: [970]Documented by the vendor within the Redica App; not tested in practice. Source check: 2026-10-14 |
| RegASKRegASK Regulatory Operating SystemHeadquarters: Singapore [973]RegASK Pte Ltd; RegASK Regulatory Operating System | RegASK combines regulatory monitoring with impact assessments, task management and documented decisions for companies in the life sciences and consumer goods sectors. Changes can be classified by product, market and business relevance. The platform combines software functions with expert subject-matter review and passes structured information to quality, regulatory approval and labelling processes. | AI prioritises regulatory changes, supports impact assessments and answers regulatory questions with source evidence. Critical analyses can be validated by specialists.[972] [973] [974]Specific AI functions documented Prioritise regulatory changes · Support impact assessments · Answer regulatory questions with source evidence AI evidence: [972]Documented by the vendor; critical results with expert review. No product test. Source check: 2026-10-14 |
| RegEd Regulatory Change Management | Regulatory monitoring, expert analyses, task allocation and evidence documentation for financial service providers; strongly US-focused regulatory references. | RegEd documents AI-supported detection of problematic advertising wording and the transcription of audio and video content for compliance review.[136] [137] [975]Specific AI functions documented Check advertising content for problematic wording · Transcribe audio and video for compliance reviews AI evidence: [975] [137]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| RegGenomeRegGenome / RG InterrogatorHeadquarters: United Kingdom [978]Regulatory Genome Development Ltd; Regulatory Genome; RG Interrogator; Interrogator | RegGenome provides structured regulatory requirements and associated models for compliance processes. The Interrogator finds relevant obligations for described business scenarios and organises results by regulatory topic. Source references and exportable reports support obligation inventories as well as the development of internal policies and controls. The data can also be integrated into existing systems. | Trained models extract regulatory obligations. The AI-supported Interrogator maps relevant requirements to a natural-language query and produces structured results with references to the original regulations.[976] [977] [978]Specific AI functions documented Extract regulatory obligations · Determine applicable obligations for business scenarios · Structure source-referenced obligation reports AI evidence: [976]Interrogator is offered as a limited beta with immediate access and a two-week trial period; general market launch is not documented by this. No product test. Source check: 2026-10-14 |
| ReggyReggyHeadquarters: Norway [980]Reggy AS (formerly Fortifai); expressly registered in Norway, head office Oslo.Former name: Fortifai | Links regulatory requirements and ISO standards with tasks, responsibilities, evidence and approvals. Addresses data protection, information security, AI governance, sustainability and anti-corruption, among other areas. | Reggy describes the translation of regulatory requirements into tasks, responsibilities and evidence. The product description checked does not specifically document which of these steps are performed with AI.[979]Not specifically documented in the source check Product page and targeted domain search checked. AI governance as a covered topic and rule automation are not evidence of AI-in-GRC functions; not confused with Reggi by Regology. Sources checked: [979]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| RegnologyRegnology Reporting Hub Ascend / Regnology ChatbotHeadquarters: Germany [983]Regnology Group GmbH; BearingPoint RegTech; RRH Ascend; Regnology Chatbot; OneSumX for Finance; OneSumX for Risk | Regnology supports financial institutions with regulatory reporting from data intake to submission to supervisory authorities. Reporting Hub combines data models, validations, exceptions and processing tasks. Traceable data lineage and audit trails make it easier to control the reports. Supplementary offerings cover risk and financial reporting; the chatbot supports subject-matter questions in the reporting process. | Reporting Hub documents AI for ongoing validation and anomaly detection. The Regnology Chatbot uses language processing and source-grounded generation to answer regulatory reporting questions on the basis of official content, historical reporting data and product documentation.[981] [982] [983] [984] [985]Specific AI functions documented Validate reporting data with AI · Detect anomalies in regulatory reporting data · Answer regulatory reporting questions AI evidence: [981] [982]Specific functions documented on current product pages; no product test. Not all announced agent functions are assumed to be available. Source check: 2026-10-14 |
| regSpaceregSpace; Watcher; Assessor; ProfilerHeadquarters: United Kingdom [986]Website names Rated Counsel Limited, trading as regSpace, Company No. 11812572, registered in England and Wales.Rated Counsel Limited; regSpace AI | regSpace combines regulatory monitoring and policy assessments with registers, risks, controls and review workflows. The software records sources, drafts and approvals in a shared workspace. | Watcher condenses relevant regulatory changes and drafts policy amendments. Assessor evaluates policy gaps and suggests clause corrections; Profiler creates an evidence-backed organisational draft from the company website. According to the vendor, the separate Privacy Inspector is rule-based.[986]Specific AI functions documented Summarise regulatory changes · Analyse policy gaps · Draft clause changes · Prepare compliance profiles AI evidence: [986]Offered with a demo and several subscription tiers. The GRC workspace and Privacy Inspector are assigned to a higher plan; regulatory results are drafts for subject-matter approval. Source check: 2026-10-15 |
| RipjarRipjar Screening / Screening AssistantHeadquarters: United Kingdom [989]Ripjar Ltd, Cheltenham, company number 08217339.Ripjar Ltd; Labyrinth; ULTRA | Platform for sanctions, PEP, watchlist and media screening as well as financial crime analyses. Dynamic risk profiles connect sources and documented decisions. | Proprietary AI matches entities and analyses risk information. The Screening Assistant also uses large language models to handle non-critical alerts, escalate relevant risks and leave an audit trail.[987] [988] [989] [990]Specific AI functions documented Prioritise screening hits · Link entities and sources · Analyse media information for due diligence AI evidence: [987] [988]Commercial screening products and Assistant offered with a demo. The scope of automation and review rules must be defined in the specific deployment. Source check: 2026-10-15 |
| RiskSafe AIRiskSafe AI; IRISHeadquarters: Australia [994]The company website names Melbourne as its location and names RiskSafe AI Pty Ltd. No separate commercial register check was carried out.RiskSafe AI Pty Ltd; IRIS | RiskSafe AI links regulatory changes with an obligations register, controls, gap analyses and a risk register for financial companies. Guided control tests support the documentation of effectiveness. | The software uses AI to extract obligations from regulatory texts and links them to the sources. IRIS drafts controls and actions, answers questions on obligations and flags gaps. Test scripts are prepared; humans carry out the tests and validate the results.[991] [992] [993] [994] [995]Specific AI functions documented Extract regulatory obligations · Detect control gaps and suggest actions · Prepare controls and test scripts AI evidence: [991] [992] [993]According to the FAQ, Australia is available; Singapore, Hong Kong and the UK are still announced. Subscriptions and demos are offered. The terms and conditions still contain placeholders for the place of jurisdiction and arbitration body; clarify the contract version before procurement. Source check: 2026-10-15 |
| SherlocqSherlocq Regulatory Research and AnalyzeHeadquarters: USA [997]According to the terms of use, Sherlocq Inc. is registered in Delaware. Its own launch announcement names offices in New York and Abu Dhabi; no European headquarters derived.Sherlocq Inc.; Sherlocq.ai | Sherlocq supports compliance, risk and internal audit teams with regulatory research and with matching internal policies against requirements. A separate module adds sanctions research. | The vendor describes source-referenced AI answers, cross-country regulatory comparisons and the analysis of uploaded policies for gaps. Analyze also generates control comparisons and management summaries.[996] [997] [998]Specific AI functions documented Answer regulatory questions with sources · Check policies for regulatory gaps · Summarise control comparisons AI evidence: [996]Registration and Free, Pro and Enterprise offerings described. Analyze is only available within the platform; some additional AI connectors are still announced. Confirm the functional scope in the chosen plan. Source check: 2026-10-15 |
| Shift TechnologyShift Risk / AMLHeadquarters: France [1000]Shift Technology SAS, RCS Paris 791862618; registered under French law.Shift Technology SAS | Software for insurers; the GRC use case checked concerns anti-money laundering and ongoing customer due diligence. | Agentic AI supports sanctions and PEP screening, assesses hits and explains risk signals for traceable AML decisions.[999] [1000]Specific AI functions documented Support AML screening · Assess sanctions and PEP hits · Document ongoing due diligence AI evidence: [999]Current commercial solution offering with demo. Source check: 2026-10-15 |
| Simmons & SimmonsSTRIDE Digital Regulation TrackerHeadquarters: United Kingdom [1001]The operator notice names Simmons & Simmons LLP, OC352713, with registered office in London. Worldwide law firm locations are not counted additionally.Simmons & Simmons LLP; STRIDE; Simmons Technology Regulation Intelligence for the Digital Economy | With STRIDE, Simmons & Simmons operates a standalone digital tracker for technology-related regulation. The inclusion relates to this software offering for regulatory research, not to general legal advice from the law firm. | According to the transparency page, AI reviews regulatory sources and suggests summaries and new entries; editors check every item before publication. Via the documented MCP connection, external AI assistants can query the regulatory data. No generative AI runs during normal browsing.[1001] [1002]Specific AI functions documented Evaluate regulatory sources for editorially reviewed entries · Query regulatory data via external AI assistants AI evidence: [1001] [1002]STRIDE is published; content is currently offered free of charge. AI is used for editorial preparation and external connection. According to the provider, the normal search is a classic text search; no integrated live chat is claimed. Source check: 2026-10-15 |
| SinpexKYC/KYB platformHeadquarters: Germany [1004]Sinpex GmbH, Munich, HRB 258620.Sinpex GmbH | Software for company verification, beneficial owners and ongoing anti-money laundering. Evidence, risk checks and traceable reports are brought together in one workflow. | AI extracts and verifies information from commercial registers, shareholder lists and other evidence. The results support AML checks; verification and risk decisions remain under subject-matter control.[1003] [1004]Specific AI functions documented Extract register data · Check shareholder information · Prepare AML evidence AI evidence: [1003]Commercial offering with demo and trial access; AI extraction described as an existing product function. Source check: 2026-10-15 |
| SiretoNormLogic / NormFlowHeadquarters: Netherlands [1006]Sireto B.V.; Sireto BV; NormLogic; NormFlow | NormLogic by Sireto converts regulatory texts into structured requirements and executable rules. The platform checks policies, procedures and control descriptions against such models, documents coverage and gaps and links findings to their source. NormFlow supports the human review of interpretations. Results and actions can be passed to existing GRC systems. | AI-supported analysis identifies provisions, definitions, terms and their relationships in regulatory documents. The interpretations prepared in this way are reviewed in the NormFlow workspace. The provider expressly separates this AI support from the subsequent deterministic rule execution. Policy generation is still in development.[1005] [1006]Specific AI functions documented Extract regulatory provisions and definitions · Structure relationships between regulatory terms · Prepare reviewable interpretations for subject-matter approval AI evidence: [1005]Documented by the vendor; not tested in practice; policy generation expressly still in development and not counted as an available AI function Source check: 2026-10-14 |
| smartKYCKYC Due Diligence / smartEYEHeadquarters: United Kingdom [1007]smartKYC, company number 08892868, registered address London.smartKYC Ltd; smartEYE | Software for sanctions and media screening, enhanced customer due diligence and ongoing risk monitoring. Research, cases, delegation and audit trails can be integrated into customer processes. | Multilingual NLP reads documents and news, extracts risk-relevant facts, assesses the match to the person or company being checked and removes duplicates. Monitoring reports new relevant information.[1007]Specific AI functions documented Evaluate adverse media · Match hits to persons and companies · Detect new risk information AI evidence: [1007]Offered as standard software with demo as well as cloud and on-premises operation; configuration and source scope are agreed. Source check: 2026-10-15 |
| StarComplianceEnterprise / Employee CompliancePentana Compliance; Redland Solutions | Specialises in employee compliance, personal securities transactions and conflicts of interest. Combines configurable controls, responsibilities and reports. | StarAssist explains multi-stage rule results in the pre-clearance process for employee transactions in plain language. It brings together triggered rules and their contributions to the result; it does not make compliance decisions.[1008] [1009] [1010]Specific AI functions documented Explain results of compliance rule checks · Bring together triggered rules for reviews and queries AI evidence: [1010]Documented by the vendor as an integrated function in pre-clearance workflows; purely explanatory. Not tested in practice. Source check: 2026-10-14 |
| SteelEyeIntegrated Surveillance / Compliance CoPilotHeadquarters: United Kingdom [1012]SteelEye Limited, England and Wales, company number 10581067; registered address London.SteelEye Limited; Compliance CoPilot | Compliance software for trade and communications surveillance, investigations and record retention. Trading activities, messages and market data can converge in one case-handling process. | AI filters and prioritises alerts and detects context-based behavioural signals. Compliance CoPilot summarises alerts, provides relevant evidence and supports traceable investigation records.[1011] [1012] [1013]Specific AI functions documented Prioritise surveillance alerts · Summarise alerts and evidence · Detect context-based behavioural risks AI evidence: [1011]Commercial AI offering with demo; gradual roll-out and human control are described. Automatic closing is a separate configurable function. Source check: 2026-10-15 |
| SygnoSygno AnalyticsHeadquarters: Netherlands [1016]Sygno B.V., KvK 58426833, Amersfoort according to the legal notice of August 2026. The contact page additionally names an office in Leusden.Sygno B.V.; Sygno Analytics | Specialised add-on to existing AML transaction monitoring systems. Generated models, validation metrics and exportable reports support the review and improvement of monitoring controls. | Sygno uses automated machine learning on the customer's own data to generate behavioural models and detect unusual transactions. Models are integrated into existing systems; configurable evaluations support validation.[1014] [1015] [1016] [1017]Specific AI functions documented Generate AML monitoring models · Detect unusual transactions · Support model validation for compliance controls AI evidence: [1014] [1015]Product and implementation services are offered. It is an add-on to existing monitoring, not a complete GRC or case management suite. Check model quality and risk coverage on a customer-specific basis. Source check: 2026-10-15 |
| TAINA TechnologyFATCA & CRS Validation / Multi-Tier ManagerHeadquarters: United Kingdom [1020]TAINA Technology Limited, UK companies register, number 10461978.TAINA Technology Limited; TAINA; Multi-Tier Manager | Software for tax-related customer and investor documentation, FATCA/CRS validation, withholding tax structures and auditable reports. Approvals and evidence are managed in the workflow. | AI reads inconsistent withholding statements, extracts data fields and maps them to the Multi-Tier Manager. This produces a structured representation of parties and allocations for further tax review.[1018] [1019] [1020]Specific AI functions documented Read withholding statements · Structure data fields for tax reviews · Prepare multi-tier ownership and allocation structures AI evidence: [1018] [1019]AI function described as a product extension with demo and already reported customer deployments; withholding tax and FATCA/CRS modules according to the agreed scope. Source check: 2026-10-15 |
| TietoTieto Banktech / AML ExploreHeadquarters: Finland [1022]Tieto Oyj / Tieto Corporation with registered office in Espoo, Finland.Tieto Oyj; Tieto Corporation; Tietoevry; Tieto Banktech; AML Explore | AML Explore supplements the existing transaction monitoring of European banks with risk analysis and support for investigations. Insights and rationales help with case closure and compliance reports. | The system learns from historical outcomes, assesses alerts and shows behavioural clusters and transaction networks. Explainable AI provides patterns and associated evidence so that analysts can prioritise risk signals and document decisions.[1021] [1022]Specific AI functions documented Prioritise AML alerts · Analyse behavioural and transaction patterns · Provide rationales for compliance investigations AI evidence: [1021]Demo and preliminary analysis with the customer's own data are offered. AML Explore is an add-on to existing systems; productive scope of services, data requirements and implementation must be agreed specifically. Source check: 2026-10-15 |
| TookitakiFinCenseHeadquarters: Singapore [1024]Tookitaki Holding Pte Ltd, One Raffles Place, Tower 2, #28-61, Singapore.Tookitaki Holding Pte Ltd; FinCense; AFC Ecosystem | AML platform for transaction monitoring, customer risk, screening, alert prioritisation and case handling. Focus on financial crime compliance. | FinCense detects suspicious transaction patterns with AI and prioritises alerts with ensemble machine learning. Explanations support subject-matter review and handling in case management.[1023] [1024] [1025] [1026]Specific AI functions documented Detect suspicious transaction patterns · Prioritise AML alerts · Assess customer risk on an ongoing basis AI evidence: [1023] [1026]Commercial platform with demo; documented AI modules and customer applications. Functional scope and deployment are agreed. Source check: 2026-10-15 |
| TrimAlertTrim Alert AI AssistantHeadquarters: Poland [1027]TrimAlert sp. z o.o., Warsaw; KRS 0001233147, NIP 5253085087.TrimAlert sp. z o.o.; Trim Alert; Clara | Tool for analysing AML alerts and publicly available company information. Current access serves the subject-matter trialling of risk assessments. | Language models via Azure OpenAI analyse register data, research and classify media information and formulate rationales. Deterministic code limits model assessments; humans must review every result.[1027]Specific AI functions documented Analyse register data · Classify media alerts · Draft risk rationales AI evidence: [1027]Free, invitation-based early-access trial programme, no general production release. Only public data under the programme terms; results do not count as statutory AML documentation. Source check: 2026-10-15 |
| VyntraFincrime / AML Transaction MonitoringHeadquarters: Switzerland [1030]Documented Swiss provider location in Yverdon-les-Bains, Avenue des Sciences 13; the group also has a Belgian location. The exact contracting entity must be clarified in the offer.NetGuardians; Intix; Vyntra Global | Platform for financial crime prevention and transaction analyses resulting from the merger of NetGuardians and Intix. The AML module combines detection, investigation and traceable cases. | Machine learning combines transaction profiles with rules to detect suspicious behavioural patterns. Explainable AI supports investigation; prebuilt models and scenarios can be managed in the Modelling Studio.[1028] [1029] [1030]Specific AI functions documented Detect suspicious transaction patterns · Prioritise AML alerts · Support investigations with explainable results AI evidence: [1028] [1029]Current commercial Vyntra platform; batch and real-time monitoring as well as prebuilt AI models documented. Source check: 2026-10-15 |
| WIDTHWIDTH Platform / AI ReviewerHeadquarters: Singapore [1032]WIDTH Pte. Ltd.; registered address 1 Raffles Place, #50-00, Singapore.WIDTH Pte. Ltd.; Cynopsis Solutions; AI Compliance Officer | Platform for customer due diligence, AML monitoring, risk assessment and case handling at regulated financial companies. Links signals, policies and documented decisions. | AI analyses customer, transaction and network data, prioritises or escalates cases and generates reasoned review recommendations with references to sources and rules.[1031] [1032] [1033]Specific AI functions documented Analyse AML cases · Create review recommendations with rationale · Prioritise risk signals AI evidence: [1031]Commercial offering with demo; platform and AI compliance functions officially launched in 2026. Specific automation rights and human approvals must be defined in the project. Source check: 2026-10-15 |
| ZangoHorizon Scanning / Ask ZangoHeadquarters: USA [1035]Zango Global Inc. is named as the US parent and standard contracting entity; contact address Wilmington, Delaware. British and Indian companies belong to the same group.Zango Global Inc.; Zango Limited; Zango Technologies Private Limited; Ask Zango | Specialist in regulatory change processes at financial institutions. Links relevant publications with internal obligations, policies, controls and documented decisions. | AI agents read regulatory texts, assess their relevance for business lines and jurisdictions and map changes to internal requirements. They give reasons for impacts and suggest actions; subject-matter experts review the obligations.[1034] [1035]Specific AI functions documented Filter regulatory changes by relevance · Map impacts to policies and controls · Suggest remedial actions AI evidence: [1034]Commercial offering with product demo and contractual subscription. Specific source coverage and implementation scope depend on the agreed deployment. Source check: 2026-10-15 |
| ZypheCompliance AI AgentsHeadquarters: USA [1037]Zyphe Inc., Delaware, registered address Camden. Italian website does not document an Italian provider headquarters.Zyphe Inc. | Agents for KYC, KYB and AML that are integrated into existing case-handling and review systems. Decision proposals and processing steps receive an audit trail. | AI agents prepare customer and company checks as reasoned decision files. Certain validated case types can be processed automatically; by default, a named person reviews the recommendation.[1036] [1037]Specific AI functions documented Prepare KYC/KYB review files · Provide rationales for AML cases · Handle screening mismatches AI evidence: [1036] [1037]Commercial agent offering; automation of individual case categories requires customer-side validation and activation. Source check: 2026-10-15 |
Compliance programmes, policies & whistleblowing
27 entries
| Provider / product | Documented focus | AI functions and classification |
|---|---|---|
| Apiax (Behavox)Policy Compliance / Policy AssistantHeadquarters: Switzerland [1039]Apiax AG, headquartered in Zurich; the geographical classification refers to this provider entity.Apiax AG; Apiax; Behavox; Policy Assistant | Policy compliance for financial institutions with organisation-specific chatbots, access rights, control of answers and audit trail. The assistant can be integrated into existing applications. | Generative AI answers questions from internal policies with compliance-oriented retrieval. Answers can be reviewed and corrected; in addition, rule-based logic can be integrated for deterministic answers.[1038] [1039] [1040]Specific AI functions documented Answer questions on internal policies · Make policy content accessible · Improve answers with subject-matter review AI evidence: [1038]Commercial product with tour and demo. According to the announcement, the acquisition by Behavox initially changes neither the product nor the responsible team. Source check: 2026-10-15 |
| Case IQCase Management / Compliance Monitoringi-Sight; Lextegrity; WhistleBlower Security | Supports investigations, disclosures, third-party checks and transaction monitoring. Brings together evidence, approvals and processing histories. | Clairia supports internal investigations through case summaries, evidence-based timelines and the matching of incidents against policies. Playbooks allow customised specifications for investigation workflows and response formats.[1041] [1042]Specific AI functions documented Case summaries · Timelines from evidence · Matching of incidents against policies AI evidence: [1042] [1041]Assistant documented by the vendor and integrated into Case Management; playbooks and AI permissions configure its use. No product test. Source check: 2026-10-14 |
| CO.DEACTA NOWHeadquarters: Italy [1043]Provider website names CO.DE S.r.l. and MA.VI. Innovative Solutions Srls, headquartered in Manfredonia with operations in Milan. The cookie policy assigns the website to CO.DE; the joint product initiative is counted once.CO.DE S.r.l. a socio unico; ACTA NOW; ActaNow; MA.VI. Innovative Solutions Srls | ACTA NOW is a specialised application for documenting Italian compliance supervisory bodies (Organismo di Vigilanza). It processes meeting material and provides editable minutes for subject-matter review and approval. | AI creates draft minutes from meeting recordings, notes, attached documents and contextual information. The user can add material and edit the result before approval. The focus is on governance documentation for OdV mandates.[1043] [1044]Specific AI functions documented Document compliance meetings · Create draft minutes from audio and documents · Prepare supervisory documentation AI evidence: [1043]Demo and quotation on request; credit-based usage model described. Specialised minutes application, not a complete GRC suite. Drafts require review and approval by the supervisory body. Source check: 2026-10-15 |
| Compliance SolutionsMCS Compliance Plattform / CS AI-AssistantHeadquarters: Germany [1047]Compliance Solutions GmbH; MCS Compliance Plattform; CS AI-Assistant | Compliance Solutions brings together software for compliance programmes, business partner checks, risk management, audits and whistleblowing systems. The modules can be used individually or within the MCS platform. The AI assistant makes accessible a customisable knowledge base with internal policies, codes of conduct and other compliance content. Employees thus receive support with questions and with finding their way through defined reporting processes. | The CS AI-Assistant answers compliance questions on the basis of a customisable knowledge base and explains internal policies. For example, it guides users through reporting violations and complying with codes of conduct.[1045] [1046] [1047] [1048]Specific AI functions documented Answer compliance questions on internal policies · Explain reporting and conduct processes AI evidence: [1046]Assistant documented by the vendor; a company-specific knowledge base and operational scope must be set up. No product test. Source check: 2026-10-14 |
| ComplyportComplyPortal; Financial Promotions AI Document ScanningHeadquarters: United Kingdom [1051]Complyport Limited; ComplyPortal; ViCA; ComplyMAP Group; Spinebiz | ComplyPortal organises compliance monitoring, registers, attestations and approvals for financial service providers. A dedicated tool checks financial promotions before publication, flags potentially risky content and suggests changes. Processing runs through configurable approval steps with a documented history. The product supplements Complyport's advisory offering with its own software for recurring compliance processes. | Documented by the vendor: Financial Promotions AI Document Scanning detects potential regulatory risks in promotional materials, checks company-specific disclaimers and names image risk detection and AI change suggestions. Flagged documents are routed to subject-matter reviewers and through approval workflows.[1049] [1050] [1051] [1052]Specific AI functions documented Check promotional documents for compliance risks · Detect image risks · Suggest changes for subject-matter review AI evidence: [1049]Documented by the vendor as an add-on tool offered with the platform; no pilot or planned status mentioned on the product page checked. Not tested in practice; check the specific module and licence scope. Source check: 2026-10-14 |
| ConfidlyConfidly Whistleblowing / AI AssistantHeadquarters: Estonia [1054]Contracting party according to the terms and conditions is Confidly OÜ in Tallinn, Estonia. The promotional note “Built in Helsinki” is not equated with the legal seat.Confidly OÜ | Whistleblowing system with reporting channels, case handling, roles, deadlines and logging. | The optional AI assistant summarises reports, suggests categories and detects similar case patterns. Suggestions are advisory; actions require human confirmation.[1053] [1054]Specific AI functions documented Summarise whistleblower reports · Suggest case categories · Group similar reports AI evidence: [1053] [1054]Trial access and subscriptions offered. According to the features page, AI is in Pro/Enterprise; the terms allow activation or deactivation per reporting channel. Source check: 2026-10-15 |
| DHC Business SolutionsDHC VISION Regulatory Compliance / SFOHeadquarters: Germany [1057]DHC VISION; DHC Business Solutions GmbH & Co. KG | DHC VISION supports the written rules of procedure (schriftlich fixierte Ordnung) and policy management in banks, insurers and other regulated organisations. Workflows accompany the creation, review, approval, publication and regular revision of requirements. Versions and acknowledgements are documented; links to processes, roles, controls and responsibilities as well as reports support compliance, internal audit and management. | In the GRU-KI research project, DHC is developing agents for reviewing and classifying deviations, for drafts of 8D reports and for corrective and preventive actions. The transfer into DHC VISION is planned; AI SEEDS additionally describes individual AI projects.[1055] [1056] [1057] [1058] [1059]Announced or in development Review deviations and compare them with historical cases · Draft 8D reports · Suggest corrective and preventive actions AI evidence: [1058] [1059]Research project and planned transfer into DHC VISION according to the announcement of 21 September 2026. No evidence of general product availability; AI SEEDS is an individual service offering. No product test. Source check: 2026-10-14 |
| EQS Compliance CockpitHeadquarters: Germany [1060]Current provider legal form EQS Group GmbH; Munich; HRB 297048. Older sources with EQS Group AG were not adopted. | Integrity Line, investigations, conflicts of interest, policies and business partner checks. | Q by EQS classifies and prioritises compliance reports, makes case files accessible via questions and links persons and companies from reports. Checks of business partners and disclosures are also supported with AI.[138] [139]Specific AI functions documented Classify and prioritise compliance reports · Search case files in natural language · Link parties from reports and documents · Support business partner and disclosure checks AI evidence: [139]Documented by the vendor; control mechanisms and approvals are adapted to the workflow and risk level. Not tested in practice. Source check: 2026-10-14 |
| EthicontrolCase Management | Links reporting channels and investigation workflows with risks, controls and remedial actions. Documents cases and how they are handled. | In the Ethicontrol product scope checked, no GRC work step specifically documented as AI was found. Case linking, translation options and rule-based routing alone are not sufficient for this.[1061] [1062] [1063]Not specifically documented in the source check Product features and release overview read, as well as targeted vendor search. Absence of evidence is not proof that AI is absent. Sources checked: [1062] [1061] [1063]No specific AI work step documented in the source check; no statement about the absence of AI. Source check: 2026-10-14 |
| Euronext Corporate SolutionsIntegrityLog / ComplyLog / PolicyLogComplyLog; IntegrityLog; InsiderLog; independent of COMPLY; PolicyLog | Supports the intake and handling of reports including activity logs. Supplements offerings for compliance and supervisory boards. PolicyLog extends the offering with policy management including versioning and approvals. | For PolicyLog, an AI summary of changes between policy versions is documented. This evidence concerns PolicyLog within the provider group and is not transferred to the IntegrityLog whistleblowing system.[1064] [1065]Specific AI functions documented Summarise changes between policy versions AI evidence: [1065]Documented by the vendor for PolicyLog; check the specific product and licence scope; no product test. Source check: 2026-10-14 |
| FaceUpEthics & Compliance Platform | Brings together report intake, case handling, investigations and disclosures. Supports different reporting channels and traceable processing steps. | FaceUp uses AI for the structured intake of hotline reports, for translating case communication and for linguistically revising replies. Case handlers decide on activation and sending.[1066] [1067] [1068]Specific AI functions documented Convert hotline calls into structured whistleblower cases · Translate case messages · Linguistically revise replies and internal comments AI evidence: [1068]According to the vendor, functions are individually optional; final sending and case handling by the team. Not tested in practice. Source check: 2026-10-14 |
| Fano LabsFano Callinter / Interaction AnalyticsHeadquarters: Hong Kong [1070]Fano Labs Limited; Hong Kong headquarters in the Hong Kong Science Park, Shatin. Further offices in Singapore, Taiwan and the USA.Fano Labs Limited; Fano Callinter; Fano AI | Conversation analysis for monitoring sales and service compliance, particularly at banks and insurers. Flags conversation content requiring review and provides scorecards, reports and dashboards. | Proprietary speech recognition and deep-learning NLP transcribe multilingual conversations, classify content and detect indications of possible compliance breaches for further review.[1069] [1070] [1071]Specific AI functions documented Analyse conversations for compliance risks · Flag risk-relevant passages · Classify conversation content AI evidence: [1069]Commercial product with demo. Models are adapted to application data before implementation; additional generative functions via third-party LLM integration must be checked separately. Source check: 2026-10-15 |
| fobi solutions.LOUPE; OlexHeadquarters: Austria [1072]Vendor website names fobi solutions GmbH in St. Georgen an der Gusen and an office in Linz. Product and legal entity are counted once.fobi solutions GmbH; LOUPE; .LOUPE; .LOUPE-AI; Olex | .LOUPE combines compliance risks, policies, conflicts of interest, business partner checks and whistleblower cases. The modules support the handling and documentation of decisions within a shared compliance workspace. | Olex answers questions from approved policies with source references, creates drafts for case assessments and suggests next processing steps. Reports and documents are turned into structured field suggestions; users review and adopt the results.[1072]Specific AI functions documented Answer policy questions · Structure compliance cases · Draft assessments and reports · Suggest follow-up steps AI evidence: [1072]Existing modular platform with demo; AI functions can be enabled individually per module. Confirm specific approvals and scope of services in the offer. Source check: 2026-10-15 |
| GAN IntegrityTo the detailed profile | Compliance programmes with third-party due diligence, conflicts of interest, gifts, incidents, policies and training. | GAN AI Analytics generates charts, summaries and trend analyses from natural-language questions on the basis of compliance and third-party risk data. The results support customisable dashboards and role-specific reports.[140] [141]Specific AI functions documented Natural-language querying of compliance data · Generation of charts and summaries · Trend analysis of third-party risks AI evidence: [141]According to the vendor announcement of 26.03.2026, available to GAN platform customers; no product test. Source check: 2026-10-14 |
| HadriusHadrius Compliance PlatformHeadquarters: USA [1076]The privacy policy names Quantbase Investments, Inc. as Hadrius at an address in New York, USA.Quantbase Investments, Inc.; Hadrius Compliance Platform | Hadrius brings together compliance processes for financial companies with a focus on US SEC and FINRA requirements. The platform combines marketing reviews, communications monitoring, employee controls, trade surveillance and examination programmes. Compliance teams handle alerts, document decisions and approvals and compile evidence for examinations. The focus is on supervised financial service providers and their ongoing control tasks. | AI checks marketing materials for risks and missing disclosures. In emails, chats and other communication channels it detects risky wording and possible policy violations and prioritises alerts. Compliance staff remain responsible for review and approval.[1073] [1074] [1075] [1076] [1077]Specific AI functions documented Check marketing materials for compliance risks · Detect possible communication violations · Prioritise review alerts AI evidence: [1074] [1075]Described as existing product functions, with human review and decision; focus on SEC/FINRA-regulated companies. No product test. Source check: 2026-10-14 |
| IntexlyIntexly Compliance Management; Intexly AuditHeadquarters: India [1080]The terms of use name Sevam Innovation Pvt. Ltd., C-33 Sector 62, Noida, Uttar Pradesh, India, as operator of the website, platform and apps. Intexly and Audit are counted once as a provider.Sevam Innovation Pvt. Ltd.; Intexly Audit; Intexly Compliance Management | Intexly by Sevam Innovation organises the statutory and labour-law obligations of Indian companies: responsibilities, filings, permits and evidence. An audit module links on-site inspections with findings and corrective actions. | The AI copilot answers compliance questions on the basis of a versioned library of laws with source references. The vendor also describes cross-document matching of filings to detect inconsistencies; relevant approvals undergo human control.[1078] [1079] [1080]Specific AI functions documented Answer compliance questions with sources · Detect inconsistencies between filings · Assess deadline risks AI evidence: [1079]Demo and pilot offers; platform access via individual contract. The vendor expressly describes efficiency and cost figures as target values still to be validated in pilots. Confirm Indian legal and language scope before use. Source check: 2026-10-15 |
| JurisTechJuris AICraft – Policy Compliance Agent and ESG Reporting AgentHeadquarters: Malaysia [1081]The vendor website names Juris Technologies Sdn Bhd, company number 200301016066 (618486-X), and the HQ in Bangsar South, Kuala Lumpur. Product agents are not counted individually.Juris Technologies Sdn Bhd; Juris AICraft; Policy Compliance Agent; ESG Reporting Agent | Juris AICraft is a configurable agent platform for financial institutions. Relevant for the register are the designated agents for policy compliance and ESG reporting within the larger product portfolio. | The ESG Reporting Agent processes reporting data, supports materiality assessments and creates draft reports with checks against reporting standards. The Policy Compliance Agent answers questions on ESG policies and regulatory requirements and supports the related communication.[1081]Specific AI functions documented Generate draft ESG reports · Check reports against standards · Answer policy questions AI evidence: [1081]Demo and customer-specifically configurable agents. The product page describes compliance and reporting use cases; productive scope of delivery, data sources and reporting standards covered must be confirmed in the project. Source check: 2026-10-15 |
| lawcodeHintbox / lawcode SuiteHeadquarters: Germany [1084]lawcode GmbH, Koblenz, HRB 28116; according to the legal notice page, Hintbox is run as part of the lawcode Suite.lawcode GmbH; Hintbox; lawcode Suite | Whistleblowing system with confidential communication and documented case handling. Hintbox is part of the lawcode Suite. | AI-based translation supports the handling of reports and messages in several languages. The user documentation shows the translation of specific report fields.[1082] [1083] [1084]Specific AI functions documented Translate whistleblower reports · Translate messages in the whistleblowing case AI evidence: [1082] [1083]Commercial offering and product documentation available. Check translation quota, languages and processing of sensitive content per licence. Source check: 2026-10-15 |
| NamiTechNamiKANHeadquarters: Vietnam [1086]The terms name NamiTech Joint Stock Company as operator and Vietnamese law. The website expressly describes Ho Chi Minh City as HQ; Japanese and other Asian offices are not counted as separate providers.NamiTech Joint Stock Company; NamiTech Inc.; NamiKAN | NamiKAN monitors compliance with compliance requirements in customer conversations of regulated companies. The vendor names in particular advisory and sales conversations of Japanese insurers, banks and securities companies. | The AI compares conversation content with regulatory requirements, internal procedures and compliance checklists. It flags missing mandatory information, impermissible content and process deviations and provides a compliance report with evidence and an audit log for each interaction.[1085] [1086]Specific AI functions documented Check conversations against compliance requirements · Detect missing mandatory information · Document compliance reviews with evidence AI evidence: [1085]Demo and individual enterprise contracts. According to the product page, Japan is the primary deployment market; the languages, regulations and local sales configuration actually supported must be checked on a project-specific basis. Source check: 2026-10-15 |
| NAVEX OneTo the detailed profile | Whistleblower reports, cases, policies, training, disclosures and third-party risks. | The integrated AI agent Nira supports whistleblowers in submitting reports, answers policy questions and helps compliance teams evaluate case information and connections and create reports.[142] [143]Specific AI functions documented Capture whistleblower reports through dialogue · Answer policy questions · Evaluate investigation cases and connections · Create compliance reports AI evidence: [143]Documented by the vendor; no product test. Source check: 2026-10-14 |
| otris compliance SUITEHeadquarters: Germany [1087]otris software AG; Dortmund; HRB 15040 Dortmund Local Court. | Policies, risks, legal register, supplier checks, ISMS and whistleblowing processes on documentsOS. | otris copilot summarises policies and documents, answers questions on regulatory content and creates draft texts. The AI also points out missing information, unusual content and possible policy violations.[144] [145]Specific AI functions documented Analyse policies and regulatory documents · Answer questions on requirements · Draft policy texts · Flag missing information and possible violations AI evidence: [145]Optional integration with the customer's own supported AI provider or otris AI service; scope varies by specialist solution. Not tested in practice. Source check: 2026-10-14 |
| SpeakUp PlatformHeadquarters: Netherlands [1088]Platform developer People Intouch B.V.; provider expressly states its headquarters in the Netherlands, address Amsterdam. | Whistleblowing system, case handling and disclosures, for example on conflicts of interest, gifts and donations. | Sienna AI structures oral reports, translates and transcribes reports, supports case assignment and detects patterns in compliance cases.[146] [147] [148] [149]Specific AI functions documented Transcribe and structure reports · Translate and assign reports · Analyse patterns in compliance cases AI evidence: [147]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| Talon GlobalTalon COHeadquarters: USA [1090]Talon Compliance, Inc., Delaware C corporation, trading as Talon Global; operational base Dubai, UAE. Country field follows the legal entity.Talon Compliance, Inc.; Talon CO; Talon Global | Compliance management for regulated operations with incident and observation reports, standard-specific registers and traceable decisions. | AI reads reports and suggests severity and classification. The suggestion, model name and human-confirmed value remain logged separately; the AI does not itself change the binding record status.[1089] [1090]Specific AI functions documented Pre-sort reports · Suggest severity and classification · Document AI suggestion and human decision AI evidence: [1089]Early commercial product with published pricing and demo; according to the provider, ready for the first operators. A broad productive customer base is not documented. Source check: 2026-10-15 |
| Wecan (SEALSQ)Wecan CopilotHeadquarters: Switzerland [1093]Vendor names WeCanGroup SA in Geneva. The entry refers to the Swiss product provider within the SEALSQ group; the stock exchange listing does not determine the country classification here.WeCanGroup SA; Wecan Group SA; Wecan Copilot; SEALSQ Corp; Wecan Comply | Wecan supports KYC and KYB dossiers from onboarding to periodic review and approval. Documents, checks, screening connections and processing steps are brought together in a shared compliance process. | The Copilot extracts structured KYC information from documents, emails and voice notes and provides confidence scores. AI supports consistency checks, risk assessment and processing on the basis of internal rules in natural language; the dossiers remain subject to human review.[1091] [1092] [1093] [1094]Specific AI functions documented Structure KYC evidence · Detect dossier inconsistencies · Support risk assessment · Prepare periodic compliance reviews AI evidence: [1091]Platform is offered with a live demo. The choice of AI engine and screening providers depends on integration; record specific productive functions and additional services contractually. Source check: 2026-10-15 |
| WhisperoWhispero WhistleblowingHeadquarters: Czechia [1096]Parhesys s.r.o., registered office Prague; registered with the Prague Municipal Court, C 344346.Parhesys s.r.o.; Whispero | Whistleblowing system with written and oral reporting channels and role-based case handling. | The vendor website describes AI-based automatic translation of the texts of multilingual reporting forms. There is no additional AI evidence here for substantive investigation or decisions.[1095] [1096]Specific AI functions documented Translate texts of whistleblowing forms AI evidence: [1095]Fourteen-day trial version and commercial contract provided for. Check language scope and translation processing in the specific offer. Source check: 2026-10-15 |
| WhispliWhispli Core | Combines whistleblowing system, disclosures and investigations. Forms, responsibilities and workflows can be adapted to different legal and organisational requirements. | Whispli describes AI summaries of whistleblowing cases and AI translation of reports and communication. The organisation can activate functions individually; decisions in the case remain with humans.[1097] [1098] [1099]Specific AI functions documented Summarise whistleblowing cases · Translate reports and case communication AI evidence: [1098] [1099]Documented by the vendor; can be activated per function, no automatic case decision; no product test. Source check: 2026-10-14 |
| Whistlelink / TrustlinksWhistlelink / Trustlinks Supplier AssessmentHeadquarters: Sweden [1104]Provider Whistleblowing Solutions AB; expressly stated headquarters Varberg, Sweden.Whistleblowing Solutions AB; Whistlelink; Trustlinks | Whistleblowing and compliance software from the same provider entity. Whistlelink supports confidential reports and case handling; Trustlinks adds supplier assessments, evidence and risk actions. | Whistlelink's AI assistant creates short summaries of whistleblowing cases that support review and triage. Automatic assignment rules and translation are not counted as additional AI steps without separate evidence. Trustlinks suggests supplier-specific risks and countermeasures with rationale; they are only transferred to the register after human approval.[1100] [1101] [1102] [1103]Specific AI functions documented Summarise whistleblowing cases · Suggest supplier risks · Draft actions for supplier risks AI evidence: [1100] [1101] [1102]Whistlelink AI according to existing product and pricing sources. Trustlinks Supplier Assessment is offered commercially separately; suggestions require approval. Confirm AI and module scope in the respective contract. Source check: 2026-10-15 |
Information security & cyber compliance
106 entries
| Provider / product | Documented focus | AI functions and classification |
|---|---|---|
| 6clicks | Controls, risks, ISMS and assessments with central management and separate entities. | Hailey AI suggests mappings between framework requirements and controls, explains gaps and creates drafts for assessment answers and actions. Suggestions can be checked on the basis of rationales and evidence.[150] [151]Specific AI functions documented Control mapping · Gap analysis · Assessment answers · Draft actions AI evidence: [151]Documented as functions of Hailey AI. The page checked does not show complete plan limits; subject-matter review and approval of the suggestions are provided for. Source check: 2026-10-14 |
| Acuity STREAMHeadquarters: United Kingdom [1106]Location of Acuity Risk Management Limited, registered in England and Wales (No. 12369714).Rizikon | Cyber GRC with risks, controls, assets, tasks and evidence. Cloud and Classic editions address different operational and complexity requirements. | For STREAM RiskOS, AI has been announced that translates GRC and supplier evidence into prioritised recommendations for action and reports for management bodies. Changes to a risk assessment are intended to require evidence and human approval.[152] [153] [154] [1105] [1106]Announced or in development Announced prioritisation of risk actions · Announced creation of evidence-based risk reports AI evidence: [154]Announced for November 2026. According to the vendor, not yet launched on the check date, without customers, without a product that can be evaluated live and without published prices. No product test. Source check: 2026-10-14 |
| AkitraAndromedaHeadquarters: USA [1108]Andromeda; Akitra Andromeda | Akitra combines compliance frameworks, controls, evidence and risks in the Andromeda platform. Integrations supply data for ongoing control testing and audit preparation. Teams can track control gaps and map evidence to multiple requirements. Supplementary functions bring supplier risks and actions to remediate identified gaps into compliance work. | The vendor describes AI agents for evidence collection, control mapping and the detection of control gaps. The statements document the provider's functions; scope, quality of results and degree of automation were not checked in practice.[1107] [1108] [1109]Specific AI functions documented Control mapping · Evidence collection · Detection of control gaps AI evidence: [1107] [1108]Documented by the vendor; not tested in practice. Source check: 2026-10-14 |
| Apptega | Security and compliance programmes with assessments, risks, third parties and evidence; also for managed security service providers. | Apptega's Assessment Completion Agent reads uploaded security policies, extracts answers for an assessment and maps them to common controls. The pre-filled baseline assessment remains intended for review by the team.[155] [1110]Specific AI functions documented Evaluate security policies · Pre-fill assessment answers · Map answers to common controls AI evidence: [1110]Documented by the vendor; no product test. Source check: 2026-10-14 |
| ArdureduArduredu GRC; ARIAHeadquarters: Sweden [1111]Homepage names Arduredu AB with headquarters in Sweden and contact locations Stockholm/Riyadh. Exact register data were not independently verified.Arduredu AB; ARIA; Arduredu Risk Intelligence Agent | Arduredu offers control monitoring, evidence collection, risks and audit reports with a focus on security requirements in the Gulf states. The product description also covers international compliance frameworks. | The vendor describes AI for extracting evidence as well as ARIA agents that assess technical findings, map risks to control requirements and escalate critical findings.[1111] [1112]Specific AI functions documented Extract evidence · Map technical risks to control requirements · Prioritise critical control gaps AI evidence: [1111]Demo, pilot installation and download subject to approval offered. Homepage and terms of use describe different deployment and pricing states; expressly confirm the current AI and operational scope. Source check: 2026-10-15 |
| AvsonPraesysHeadquarters: Spain [1116]The indexed vendor website names Spanish contact addresses in Madrid and Barcelona. Direct retrieval was partially blocked; the country classification is based on the search index of the vendor website and the supplementary company profile of its own. The precise legal company name remains open; Praesys is not counted additionally as a vendor.Avson GRC; Praesys | Praesys is Avson's own GRC SaaS for security requirements, risks, controls, evidence and continuity. The offering is aimed at both organisations and consultancies with multiple clients and includes, among other things, support for the MAGERIT risk methodology. | Avson describes the AI-supported creation of organisation-specific policies, procedures and other compliance documents. Praesys additionally names an assistant that handles questions on security frameworks on the basis of the respective project context.[1113] [1114] [1115] [1116]Specific AI functions documented Draft policies · Create compliance documents · Answer project-specific compliance questions AI evidence: [1113] [1114]Described as project-accompanying access, ongoing subscription and partner access. Vendor offers a personalised demo; define specific AI functions and support contractually. Source check: 2026-10-15 |
| BabelePULPOHeadquarters: Spain [1118]BABEL Sistemas de Información; ePULPO; Ingenia; Ingeniería e Integración Avanzadas | ePULPO is Babel's GRC product for IT processes and information security, with a particular focus on public organisations. It automatically links the inventory of technical assets with risk analysis and risk management. Further functions include action and compliance tracking, vulnerability detection and cyber incidents. Among the supported frameworks, Babel names ENS, data protection and ISMS according to ISO 27001. | No specific AI work step is documented for ePULPO in the product sources checked. Babel's general AI strategy and partnerships are not counted as evidence of an AI function in ePULPO.[1117] [1118] [1119] [1120]Not specifically documented in the source check ePULPO 4.0 names inventory, BI, risk links, vulnerability and incident management. The corporate partnership does not document any specific AI extension of this product. Sources checked: [1117] [1119]Specific AI functions in ePULPO not documented in the source check. Source check: 2026-10-14 |
| CarbideCarbide Platform | Combines compliance software with optional expert support. The platform structures security and data protection requirements, shows framework gaps and supports audit preparation and cloud monitoring. | Carbide Analyst queries current compliance data, drafts policies, initiates risk assessments and compares evidence with framework requirements for gaps.[1121] [1122]Specific AI functions documented Query compliance and control status · Draft policies · Prepare risk assessments · Detect evidence gaps AI evidence: [1122]According to the vendor, available across all plan tiers, activated by the consultant; external LLM connection via configured MCP tokens. Subject-matter approval integrated; no product test. Source check: 2026-10-14 |
| CATAAMCATAAM / OKF Context EngineHeadquarters: Canada [1124]Terms of use name TheMarkups Canada Inc. as platform provider and Mississauga, Ontario, Canada, as contact location.TheMarkups Canada Inc.; OKF Context Engine; CATAAM Claude MCP connector | CATAAM combines compliance management and evidence with technical security monitoring and security testing. Requirements, controls, assets and findings are managed together and reused for different audit frameworks. | The OKF Context Engine exports the compliance dataset as a linked knowledge structure. Via the documented Claude MCP connector, specific questions on control coverage, assets and evidence can be asked. The AI evaluation is carried out via the connected assistant; the export remains read-only with respect to CATAAM.[1123] [1124]Specific AI functions documented Query control coverage via AI assistant · Uncover connections between assets and evidence · Provide compliance context for AI-supported analyses AI evidence: [1123]The vendor describes the add-on as already activatable under Settings / AI Context Export, including MCP API key. External AI assistant required; not tested ourselves. Source check: 2026-10-15 |
| CauteraCautera; AI AssistantsHeadquarters: Portugal [1127]Terms of use name Cautera Labs, Unipessoal Lda., NIPC 519436539, with registered office in Lisbon, Portugal.Cautera Labs, Unipessoal Lda.; Cautera Labs | Cautera brings together cyber risks, controls, evidence, policies, audits and supplier assessments. The platform supports the preparation and ongoing handling of requirements from various security frameworks in a shared workspace. | The AI suggests evidence and control mappings, extracts findings from audit reports and drafts answers to security questionnaires. Further documented functions support gap analyses, action plans and risk suggestions; suggestions are intended for human review.[1125] [1126] [1127]Specific AI functions documented Map evidence to controls · Extract audit findings · Answer security questionnaires · Analyse compliance gaps · Draft action plans AI evidence: [1126]Offered as B2B SaaS with demo and customer-specific orders. Check individual AI functions and quotas in the contractual scope. Source check: 2026-10-15 |
| CisodiumCisodium ISMP; ELSAHeadquarters: Estonia [1130]Developer entry of the linked Cisodium extension names CISODIUM OÜ with an address in Tallinn, EE. The terms of use name the same legal entity.CISODIUM OÜ; Cisodium ISMP; ELSA Security Assistant | Cisodium combines security risks, controls, policies, evidence and audits with further areas such as supplier risk and continuity. The platform establishes relationships between these datasets and supports several security frameworks. | The ELSA assistant answers questions on the basis of the security programme, drafts policies and supports gap analyses. A published browser extension also generates answers to security questionnaires from the data of the Cisodium platform.[1128] [1129] [1130]Specific AI functions documented Analyse compliance gaps · Draft policies · Query security programme · Answer security questionnaires AI evidence: [1128] [1130]Vendor offers demo and trial access; ELSA browser extension is publicly listed. Functional scope and deployment depend on the agreed package. Source check: 2026-10-15 |
| Claw GRCClaw GRCOne Frequency Inc. is named in the terms as operator. A company headquarters was not separately documented in the sources checked; the choice of Delaware law alone does not determine the country classification.One Frequency Inc.; ClawGRC | Claw GRC manages security frameworks, controls, evidence, findings and actions. Alongside a focus on AI agents, the product covers general cyber compliance and security audits. | A documented MCP connector links external AI assistants to compliance data. The assistants can query control status and open findings and create action tickets. The specific evidence concerns this AI integration for GRC work, not just the monitoring of AI agents.[1131] [1132] [1133]Specific AI functions documented Query compliance status via AI assistant · Evaluate open security findings · Create action tickets from AI-supported queries AI evidence: [1132]Trial access and subscriptions offered. AI functions require a compatible external assistant and MCP access. According to the documentation, additional MCP functions for evidence uploads, control management, gap analyses and reports are still on the roadmap. Source check: 2026-10-15 |
| CloudNextAICertusHeadquarters: Canada [1134]Vendor website names CloudNextAI Inc. and Windsor, Ontario, Canada.CloudNextAI Inc.; Certus Platform | Certus focuses on cloud compliance and identity controls in Google Cloud environments. The platform combines permission reviews and remedial actions with documented evidence for SOC 2 and ISO 27001. | The vendor describes a Vertex AI-based platform with dialogue-based requests for time-limited permissions. Review and clean-up of problematic identities are linked with compliance documentation. The specific public AI description is limited to this cloud and identity context.[1134]Specific AI functions documented Handle permission requests through dialogue · Link cloud control findings with remedial actions · Create compliance evidence from cloud workflows AI evidence: [1134]Expressly a private beta with early-access request for Canadian Google Cloud customers. Not a generally available enterprise suite; functions and product maturity not tested ourselves. Source check: 2026-10-15 |
| Comp AIComp AI Compliance PlatformHeadquarters: USA [1137]Bubba AI, Inc. d/b/a Comp AI with business address in New York according to the terms and conditions; a current press release names Miami as headquarters. Both are in the USA.Bubba AI, Inc.; Bubba AI; CompAI | Comp AI combines compliance frameworks with policies, technical evidence and control checks. Integrations and configurable check workflows capture the state of the connected systems. Teams can compile evidence for audits and provide published information via a Trust Portal. Supplementary risk and supplier functions are intended to bring security and compliance work together in one platform. | Comp AI creates policies from organisational information and turns natural-language check instructions into automated control tests. An AI browser workflow is documented that checks controls and captures screenshots as evidence; AI also supports risk drafts and supplier assessments.[1135] [1136] [1137] [1138]Specific AI functions documented Draft policies from organisational context · Generate control tests from check instructions · Check controls via AI browser and capture evidence · Support risk drafts and supplier assessments AI evidence: [1135] [1136]Product functions documented by the vendor; integrations and access rights must be set up. No product test. Source check: 2026-10-14 |
| CompleyeCompleyeHeadquarters: Netherlands [1140]Compleye Online | Compleye combines its own compliance platform with accompanying professional services for technology companies. The software keeps evidence and documentation for security, data protection and quality requirements together. The described areas of use include ISO 27001, SOC 2, NIS2 and AI governance; platform-only contracts are also offered. | No specific AI work steps are documented in the accessible product description. Individual indexed vendor texts mention AI analytics in general terms without documenting a sufficiently clear product workflow.[1139] [1140] [1141] [1142]Not specifically documented in the source check Current product page read; supplementary indexed texts only general, detailed retrieval faulty. ISO 42001 and AI Act consulting not equated with AI assistants. Sources checked: [1139] [1142]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| Compliance CompassCompliance Compass GRCHeadquarters: Germany [1144]Compliance Compass GmbH, Bonn; Bonn Local Court HRB 30795.Compliance Compass GmbH | NIS2-oriented platform with risks, policies, suppliers, incidents, training and audits. Evidence and approvals are linked to tasks and controls. | AI creates and updates policies from templates, organisational context and regulatory requirements. The vendor also describes AI-supported risk detection and assessment; policy versions undergo documented approvals.[1143] [1144]Specific AI functions documented Draft policies from organisational context · Update policies · Pre-assess security risks AI evidence: [1143]Platform offered with free demo and guided onboarding. Agree the specific module and AI scope; no independent performance review. Source check: 2026-10-15 |
| ComplianceCowAgentic GRC Middleware / Automation StudioHeadquarters: USA [1146]ContiNube (differing reference to the legal entity in the terms of use) | ComplianceCow supplements existing GRC systems with ongoing evidence collection and testing of technical controls. The software connects cloud and internal systems with control requirements, test results and actions. Integrations transfer results to GRC platforms; notifications and guided workflows support the handling of identified gaps within agreed deadlines. | The Automation Studio supports building evidence collection and control tests with AI. The vendor also describes natural-language analysis of control status and trends with connected LLM providers and models.[1145] [1146] [1147] [1148]Specific AI functions documented AI-supported creation of control tests · AI-supported set-up of evidence collection · Natural-language control analysis AI evidence: [1145]Documented by the vendor; for natural-language analysis with connected LLM providers and models; not tested in practice. Source check: 2026-10-14 |
| ComplychainComplychain PlatformHeadquarters: Denmark [1150]Vendor privacy policy names Complychain ApS, CVR 45031683. Danish company; not the similarly named US consulting offering.Complychain ApS; Complychain.dk; not ComplyChain Solutions | Complychain links risks, controls, security incidents and documents with supplier and subcontractor overviews. The platform supports data protection and security frameworks, evidence management and regular compliance tasks. | The AI assistants described analyse contracts, draft policies and procedures and support supplier oversight and audits. A specific example is the AI-supported creation of subcontractors for documenting the supply chain.[1149] [1150]Specific AI functions documented Analyse contracts · Draft policies · Support supplier oversight · Document subcontractors AI evidence: [1149]Existing platform with demo, sign-up and published customer examples. Additional agents are continuously being developed; check the specifically agreed scope. Source check: 2026-10-15 |
| condignumcondignum PlattformHeadquarters: Austria [1154]condignum GmbH; condignum Software GmbH | The condignum platform links security and compliance requirements with risks, controls, actions and evidence. Its GRC area supports ISMS set-up and ongoing operation, audit management, internal controls and gap analyses. Preconfigured content addresses, for example, ISO 27001, NIS2, TISAX and IEC 62443. Dashboards and reminders accompany structured implementation within complex corporate organisations. | The platform pages checked describe security requirements, risk management, actions and reports. A specifically AI-supported GRC work step is not documented in the source check.[1151] [1152] [1153] [1154]Not specifically documented in the source check Targeted domain research did not yield sufficient product evidence; this does not prove the absence of AI. Sources checked: [1151] [1152]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| ControlCaseCompliance Hub / ONE AUDITHeadquarters: USA [1156]ControlCase LLC; Compliance Hub; ONE AUDIT; CyberNINES | With Compliance Hub and ONE AUDIT, ControlCase offers software for coordinating multiple security and compliance audits. Controls and evidence can be mapped to requirements of different frameworks and reused. Dashboards show progress and open tasks. The offering combines the software with audit and managed service offerings for carrying out audits. | The general availability announcement describes an LLM-supported preliminary review of submitted documents and answers to relevant evidence questions. The process ends with a review by a ControlCase auditor; fully automatic audit decisions are therefore not documented.[1155] [1156] [1157]Specific AI functions documented LLM preliminary review of evidence · Answering questions on evidence AI evidence: [1155]Documented by the vendor; announced as generally available since 10 June 2024; not tested in practice. Source check: 2026-10-14 |
| CosmoSecGRC platform / SiriusAIHeadquarters: Brazil [1159]Provider according to the terms of use: CosmoSec Consultoria em Tecnologia da Informação LTDA., CNPJ 66.756.382/0001-96; website describes the platform as Brazilian.CosmoSec Consultoria em Tecnologia da Informação LTDA.; SiriusAI | Platform for security controls, risks, suppliers, data protection, policies and continuous evidence. Links diagnosis, actions and audit documentation. | SiriusAI evaluates the organisation's status, prioritises actions with rationale and drafts policies and action plans. Human approval is required before drafts are adopted as evidence.[1158] [1159]Specific AI functions documented Prioritise actions from control gaps · Draft policies and action plans · Summarise security status for executives AI evidence: [1158] [1159]Commercial access after demo and conclusion of contract; customer login available. SiriusAI is described as part of the platform offered. Source check: 2026-10-15 |
| Cyber SierraCyber Sierra | Supports control gap analyses, supplier assessments and evidence review. Policies, frameworks, assets and corporate systems can be integrated into existing security and GRC structures. | Cyber Sierra describes AI analysts for framework-specific gap analyses, evidence assessments with rationales, supplier reviews and answers to security questionnaires from the customer's own documents. Results are presented to the responsible persons for review.[1160]Specific AI functions documented Framework-specific gap analysis · Assessment of audit evidence · Supplier reviews · Answering security questionnaires AI evidence: [1160]Analysts documented by the vendor, used with the chosen model and configured data connections; various operating models described. No product test. Source check: 2026-10-14 |
| CyberdayCyberdayHeadquarters: Finland [1162]Digiturvamalli | Cyberday organises information security as ongoing work with tasks, owners and documented actions. The platform combines security management with employee training and supports collaboration via connected work environments. A guided onboarding creates a suitable compliance programme from company information. | Cyberday uses AI to create an initial security profile and a compliance plan tailored to it. Policies and documentation are pre-filled; existing compliance reports can be examined for urgent gaps.[1161] [1162] [1163]Specific AI functions documented Draft security profile and compliance plan · Pre-fill security policies · Analyse compliance reports for gaps AI evidence: [1161]Documented by the vendor in the Fast-Track and ISMS offering; drafts must be reviewed and approved. No product test. Source check: 2026-10-14 |
| CyberHeedSmartPrep / Evidence & AIHeadquarters: Australia [1166]Website/terms and conditions name CyberHeed Pty Ltd, Melbourne, Australia.CyberHeed Pty Ltd | Cyber compliance with adaptive baseline assessment, control mapping, evidence and ongoing integration signals for multiple frameworks. | SmartPrep gathers organisational knowledge with AI-supported follow-up questions. Evidence Validator assesses evidence, AutoMatch maps documents to controls, and Policy Assessor checks policies for gaps. Answers can be based on existing evidence and assessments.[1164] [1165] [1166]Specific AI functions documented Support compliance baseline assessment · Assess evidence and map it to controls · Detect policy gaps AI evidence: [1164] [1165]Offered as a product with demo, interactive demonstration and customer portals; individual frameworks and integrations must be clarified before procurement. Source check: 2026-10-15 |
| CyberS3cViriatus / AI vCISOHeadquarters: Portugal [1168]CyberS3c names NIF PT515403504 and Loures, Portugal. The associated ANCIBER page describes the same legal entity as CYBERSEC, Lda.CYBERSEC Lda.; CyberS3c; Viriatus | Viriatus combines technical attack surface analysis with cyber risks, compliance and incident processes. Reports and incident workflows address NIS2 and ISO 27001, among others. | The AI vCISO answers questions from organisational data by means of retrieval-augmented generation. It supports the prioritisation of risks and prepares reports for security officers and management.[1167] [1168] [1169]Specific AI functions documented Explain cyber risks from the organisation's own data · Prioritise risks · Prepare management reports AI evidence: [1167]Vendor offers a product demonstration and a dedicated Viriatus product page. The platform is offered alongside CyberS3c services; agree scope and data connections. Source check: 2026-10-15 |
| CyberSaint CyberStrong | CyberStrong combines security data, controls and cyber risks with financial quantification. | According to the vendor, CyberSaint AI uses graph neural networks to link controls, gaps, assets and threats. The results support the detection and prioritisation of risk hotspots and the updating of risk likelihoods.[156] [157]Specific AI functions documented Detect risk and control relationships · Prioritise findings by business impact · Update risk likelihoods on the basis of new signals AI evidence: [157]Analysis functions documented by the vendor; the chat co-pilot is expressly only announced and is not counted as a usable function. Not tested in practice. Source check: 2026-10-14 |
| CyberSmartCyberSmart / Active Protect / Privacy ToolboxHeadquarters: United Kingdom [1171]CyberSmart Limited | With device controls, risk reports, training and policy workflows, CyberSmart is aimed at small and medium-sized enterprises. The platform supports, among other things, preparation for Cyber Essentials. A Privacy Toolbox adds data protection assessments, policies and processes for data subject requests. | The source check on CyberSmart did not document any specific AI function in the compliance workflows. Automated vulnerability scans and information on the secure use of AI are not counted as separate AI-GRC evidence.[1170] [1171] [1172] [1173]Not specifically documented in the source check Product and compliance descriptions and targeted vendor search checked; no statement about the general absence of AI. Sources checked: [1170] [1172] [1173]No specific AI work step documented in the source check; no statement about the absence of AI. Source check: 2026-10-14 |
| CynomiSecurity Growth Platform | Supports service providers with security programmes and vCISO services for multiple clients. Risk assessments, gap analyses, control mapping, policies and reports form repeatable service processes. | Cynomi describes AI for assessing cyber risks and for context-based recommendations. In assessments, the AI suggests content on the basis of customer data, scans, integrations and uploaded documents.[1174] [1175]Specific AI functions documented Assess cyber risks · Prepare recommendations for action · Support assessments with context-based suggestions AI evidence: [1174]Documented by the vendor; no product test. Source check: 2026-10-14 |
| CypagoTo the detailed profile | Cyber GRC for ongoing control monitoring, evidence collection, risk management and user access reviews across connected IT systems. | ChatGRC answers natural-language questions on frameworks, controls, evidence, risks and findings. AI supports linking relevant data and semantic relationships across systems.[158] [159]Specific AI functions documented Query GRC documents and data through dialogue · Detect relationships between controls, requirements and evidence · Bring together status information with document references AI evidence: [159]Documented by the vendor; not tested in practice. Source check: 2026-10-14 |
| ditis (Voith)ditis InfoSec ManagerHeadquarters: Germany [1177]ditis Systeme; ditis InfoSec Manager; JMV SE & Co. KG; Voith | The ditis InfoSec Manager maps information security management on Microsoft 365 and SharePoint Online. It links assets and protection requirements with risks, controls and actions. Responsibilities, residual risks and evidence can be handled in a structured way; audit preparation, management reviews and reports support oversight. Optional content addresses additional requirements such as TISAX or KRITIS. | The pages checked on the ditis InfoSec Manager document ISMS workflows and the extension to include AI governance. Separate offerings for secure AI and AI consulting do not document any specific AI work step in the GRC product recorded here.[1176] [1177] [1178] [1179] [1180] [1181]Not specifically documented in the source check Product relevance is decisive: other AI offerings of the provider group are not attributed as AI in the InfoSec Manager. Sources checked: [1176] [1180] [1181]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| DomynoDomyno Compliance / IA CyberHeadquarters: France [1183]Domyno SAS, Paris; SIRET 933 059 099 00012 according to the provider.Domyno SAS; Domyno IA Cyber | ISMS and cyber compliance platform with risks, policies, assets, suppliers and evidence for multiple regulations. Common controls link ISO 27001, NIS2 and DORA, among others. | Based on the organisational context, AI suggests controls, policies and actions, creates draft documents and prioritises tasks by risk. Via MCP, external AI assistants can query authorised compliance data.[1182] [1183]Specific AI functions documented Suggest controls and actions · Draft policies and reports · Query compliance data in natural language AI evidence: [1182] [1183]Commercial offering with demo. Domyno's own configurable agents are labelled as beta; a Mistral connection is described separately as future. MCP requires a suitable assistant. Source check: 2026-10-15 |
| Drata | Compliance, risk management and security evidence with reusable questionnaire answers. | Drata AI suggests policy-to-control mappings, summarises supplier reports, explains failed tests and drafts questionnaire answers from approved content.[160] [161] [1184]Specific AI functions documented Control mapping · Supplier analysis · Test remediation · Questionnaire answers AI evidence: [160] [1184]Documented in the product description; specific plan and licence limits not shown on the pages checked. Source check: 2026-10-14 |
| EFFITEKAuditor PROHeadquarters: France [1189]EFFITEK SARL; Auditor Pro; Auditor PRO; auditorpro.app | Auditor PRO by EFFITEK supports cybersecurity and compliance audits as well as ongoing risk management. The platform combines control assessments, referenced evidence, risk registers and action campaigns with recurring controls. Further modules cover suppliers, incidents and security exceptions. Technical audit reports can be imported and mapped to controls; reports and assessment programmes support internal teams and consultancies. | AI suggestions for threat scenarios, assessment of evidence relevance, draft documents and work instructions for controls are documented. The product history also mentions AI-generated risk chains from technical findings. Outputs are reviewed by auditors; scope and quotas depend on the plan.[1185] [1186] [1187] [1188] [1189]Specific AI functions documented Assess the relevance of existing evidence for controls · Suggest threat scenarios and risk chains · Draft work instructions for recurring controls · Pre-draft information security policies and other ISMS documents AI evidence: [1186] [1187] [1188]Documented by the vendor; not tested in practice Source check: 2026-10-14 |
| Egerie Cyber GRCHeadquarters: France [1194]EGERIE SOFTWARE SAS; registered office 44 Boulevard de Strasbourg, 83000 Toulon; RCS Toulon 817640998. Provider legal entity expressly named in the Legal Notice. Geography checked on 15.10.2026; no conclusions on hosting or owners drawn from the registered office. | Cyber risk analyses, compliance programmes, actions and third-party assessments on a shared platform. | The new Egerie platform uses AI agents to analyse requirements in the organisational context and suggest next actions. Jerry links documents with compliance content and prepares management reports from status and programme data. Approvals, risk acceptance and subject-matter decisions remain with the responsible persons.[162] [163] [1190] [1191] [1192] [1193] [1194]Specific AI functions documented Analyse regulatory requirements in context · Suggest prioritised actions and initial implementation plans · Link documents with compliance content · Prepare compliance reports for management AI evidence: [1190] [163] [1191]Vendor announcement of 30.09.2026 describes the new agentic platform; the compliance module has been in use since June 2026. The current product page describes Jerry as already available. Confirm specific agents, modules and approvals in the offer; not transferable to all older Egerie modules. Source check: 2026-10-15 |
| ELLIA IntelligenceELLIT Shield / ARIAHeadquarters: Estonia [1198]ELLIA INTELLIGENCE OÜ, Estonian registry number 17392889, Tallinn; registered since 11.12.2025. Provider website also uses the spelling UO.ELLIA INTELLIGENCE OÜ; ELLIA Intelligence UO; ELLIT; ELLIT Shield; ARIA; ELLIT Alert Tree | ELLIT Shield supports security risks, policies, regulatory compliance and continuity planning. ARIA supplements the platform as a virtual CISO assistant; further ELLIT products are assigned to the same provider group. | The AI policy generator creates organisation-specific security documents. ARIA supports risk assessments and prioritised recommendations, taking into account existing policies, controls and audit findings.[1195] [1196] [1197] [1198]Specific AI functions documented Draft security policies · Assess risks in context · Prioritise actions AI evidence: [1195] [1196] [1197]Public product pages offer registration, trial access and plan-dependent ARIA queries. Newer provider presence; check actual functional and licence scope in a test. Source check: 2026-10-15 |
| FEHA AssurtechFEHA GRC; GuardRiskHeadquarters: Singapore [1201]GuardRisk terms and conditions name FEHA Assurtech Pte. Ltd. in Singapore as the exclusive contracting entity. The vendor website additionally names FEHA International Consulting B.V. in Amsterdam as group HQ, KVK 86193562. Group counted once under the designated software contracting entity.FEHA International Consulting B.V.; FEHA Assurtech Pte. Ltd.; GuardRisk; FEHA GRC; 3rdComply | FEHA GRC brings together frameworks, controls, evidence and audits. GuardRisk supplements the platform as a separate assistant for regulatory research and the review of compliance documents. | The GuardRisk manual describes the review of uploaded documents against frameworks, control-specific gap reports and draft policies. A research assistant answers compliance questions with framework references; results must be reviewed by subject-matter experts.[1199] [1200] [1201] [1202]Specific AI functions documented Check documents against requirements · Identify control gaps · Draft policies AI evidence: [1200] [1199]According to the vendor, GuardRisk was launched in October 2025. Despite the stated September 2026 date, the current 2.0 page still shows a waiting list and a limited private beta; confirm the actually accessible version and functions before procurement. Source check: 2026-10-15 |
| fuentisfuentis SuiteHeadquarters: Germany [1206]fuentis AG; fuentis Suite | The fuentis Suite combines information security, data protection, risk management and emergency preparedness on a shared database. Assets, requirements, risks and actions can be linked to one another and assigned to responsible persons. Customisable catalogues and questionnaires support protection requirement analyses and target/actual comparisons; tasks, evidence and reports accompany ongoing implementation and audit preparation. | No specific AI work step of the fuentis Suite is documented in the source check. Support for ISO 42001 and automated ISMS workflows alone are not evidence of AI being used.[1203] [1204] [1205] [1206] [1207]Not specifically documented in the source check Product and function overview read; a targeted search of the vendor domain mainly returned an AI governance standard and generic tool requirements. Sources checked: [1203] [1205] [1207]AI availability not specifically documented in the source check. Source check: 2026-10-14 |
| GaleaGalea Cyber; TARSHeadquarters: France [1209]The legal notice names Galea SAS in Boulogne-Billancourt. According to the legal notice, Phishia is a brand of the same legal entity and is not counted separately.Galea SAS; Galea Cyber; Phishia; TARS | Galea Cyber links cyber risks, control requirements and measures. The platform supports EBIOS RM analyses, risk matrices and the preparation of compliance evidence. | TARS generates context-specific risk scenarios from technical and business information. The AI proposes risk assessments and measures; experts can correct assessments with a justification.[1208] [1209]Specific AI functions documented Design cyber risk scenarios · Propose risk assessments · Prioritise measures AI evidence: [1208]Demo, trial offer and product packages presented. Vendor information on the model and hosting architecture must be checked contractually before procurement; no product test of our own. Source check: 2026-10-15 |
| GRiCkGovernance, Risk, Intelligent Controls KitHeadquarters: Australia [1211]YUMA IT PTY LTD, ABN 62 684 389 839, ACN 684 389 839; registered address Watson, ACT, Australia.YUMA IT PTY LTD; Yuma IT | Cyber GRC for controls, evidence, review status and authorisation decisions. Evidence remains linked to its origin, currency and human assessment. | An MCP interface gives authorised AI agents client-specific control context. Agents can prepare evidence and submit it via limited, logged write permissions; assessment and approval remain with humans.[1210] [1211]Specific AI functions documented Provide control context for AI agents · Prepare evidence with AI agents · Log evidence handovers AI evidence: [1210]Commercial offering on order with demo. The integration of external AI agents is documented; specific functions and deployment depend on the engagement. Source check: 2026-10-15 |
| GuardisoGuardiso; Guardiso AssistantHeadquarters: Poland [1214]The terms of use name Guardiso Michał Lewandowski, NIP 6060011996, with an address in Poznań, Poland.Guardiso Michał Lewandowski; Guardiso Assistant | Guardiso manages security policies, risks, controls, evidence, incidents and audit documentation. The platform links several security and data protection frameworks and supports internal teams as well as external auditors. | The optional AI drafts policies and risk descriptions, supports security questionnaires and searches the organisation's internal documentation. Suggestions on controls and summaries remain reviewable drafts; decisions and approvals lie with humans.[1212] [1213] [1214]Specific AI functions documented Draft policies · Analyse risks · Answer security questionnaires · Propose controls · Search documentation AI evidence: [1213] [1214]Commercial subscription with trial access; AI is optional and tied to the package scope and query quotas. The transparency page names Anthropic for the assistant and analysis, and OpenAI for semantic search vectors. Source check: 2026-10-15 |
| HicomplyHicomplyHeadquarters: United Kingdom [1218]Hicomply Ltd | Hicomply links an ISMS with a risk register, control mappings, policies and audit preparation. Risks are assigned owners and treatment plans; evidence and reports support several frameworks. Additional functions handle security incidents and data protection tasks and link the results with ongoing compliance work. | Hicomply AI searches documents and emails to collect evidence, maps risks to selected assets and provides context-specific compliance assistance.[1215] [1216] [1217] [1218]Specific AI functions documented Collect evidence from documents and emails · Map risks to assets · Answer compliance questions AI evidence: [1216]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| HiScout GRC SuiteTo the detailed profile Headquarters: Germany [1220]HiScout GmbH; Berlin, Germany; HRB 119470 B. | HiScout brings together IT baseline protection (Grundschutz), information security, data protection and BCM on a common data basis. | The HiScout pages checked describe low-code configuration, a common data model and GRC workflows. Specific AI support for these tasks is not documented in the source check.[164] [165] [1219]Not specifically documented in the source check Technology page read; targeted search on the vendor domain without specific evidence of an AI function. Rule-based Business Logic Engine not counted as AI. Sources checked: [164] [1219]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| Hyperproof | Shared controls and evidence for several frameworks, risks and audits. | AI Guided Experiences proposes links between controls, policies, risks and evidence, identifies the evidence required and supports reviewing it for audit gaps.[166] [167]Specific AI functions documented Control mapping · Evidence selection · Evidence review · Validation tests AI evidence: [167]Available to existing customers; according to the announcement, selected functions are in the early-access beta programme. Source check: 2026-10-14 |
| i-doit GRC Suite+Headquarters: Germany [1222]i-doit GmbH; Düsseldorf; Düsseldorf commercial register no. 33104. | i-doit GRC Suite+ links ISMS, IT contingency planning, data protection and BCM via shared assets, risks and measures. | i-doit documents AI add-ons for CMDB queries, data maintenance, document creation and IT workflows. A specific AI function in the GRC Suite+ modules is not clearly attributed in the sources checked.[168] [169] [170] [1221]Not specifically documented in the source check No transfer of AI functions of a neighbouring product to the GRC suite without specific evidence; no evidence of the absence of AI. Sources checked: [168] [1221]CMDB AI documented; specific use in GRC Suite+ not documented within the scope of sources. Source check: 2026-10-14 |
| infodas (Airbus)SAVeHeadquarters: Germany [1224]infodas; INFODAS Gesellschaft für Systementwicklung und Informationsverarbeitung mbH; SAVe; Airbus Defence and Space | SAVe supports the set-up and operation of an information security management system in accordance with IT-Grundschutz and ISO 27001. The software links business processes and target objects with protection requirements, risks and security requirements. Modelling, baseline protection checks, risk analysis and reports accompany the work. Custom catalogues and consistency checks complement the methodological work; the provider is the German Airbus subsidiary infodas. | For SAVe ISMS, no specific AI work step was documented in the product pages checked or in the targeted vendor search. infodas's AI consulting and general AI articles are separate offerings.[1223] [1224] [1225] [1226] [1227]Not specifically documented in the source check The assessment refers to SAVe ISMS and not to all Airbus/infodas products. Sources checked: [1223] [1227]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| IntelliGRCIntelliGRC / AI-CISOHeadquarters: USA [1229]Legal documentation names Tiber Creek Consulting, Inc. – IntelliGRC with an address in Fairfax, Virginia.Tiber Creek Consulting, Inc.; AI-CISO | Multi-tenant cyber compliance platform for IT service providers and their clients, with asset scoping, control mapping, evidence and measures for CMMC, NIST, SOC 2, ISO 27001 and further frameworks. | The AI support, called AI-CISO, maps evidence, analyses compliance gaps and supports context-specific workflows as well as the preparation of auditable documentation.[1228] [1229]Specific AI functions documented Map evidence to controls · Analyse compliance gaps · Prepare context-specific compliance documentation AI evidence: [1228]The current product page describes integrated AI and offers a personalised demo. Functional scope and activation must be checked in the offer. Source check: 2026-10-15 |
| IntervalidIntervalid ISMSHeadquarters: Austria [1231]Intervalid ISMS; Intervalid DSMS; Intervalid GmbH | Intervalid ISMS links security requirements with assets, protection requirements, risks and measures. Responsibilities, deadlines and approvals steer implementation; versioned policies, evidence and reports support audits and statements of applicability. Further functions record incidents and supplier assessments. Additional modules use the common data basis for data protection as well as business impact analyses and contingency planning in the company. | Intervalid describes AI assistance for maintaining ISMS/DSMS data: the application suggests more complete and more comprehensible content and offers context-specific templates and guidance.[1230] [1231] [1232]Specific AI functions documented Supplement ISMS/DSMS documentation with suggestions · Provide context-specific templates for data entry AI evidence: [1230] [1232]According to the vendor, Intervalid 2.0 has been rolled out gradually since the beginning of 2026; new features are included in the usage fee. Check the instance-specific rollout. No product test. Source check: 2026-10-14 |
| Intuitem CISO AssistantTo the detailed profile Headquarters: France [1234]intuitem SARL; Vélizy-Villacoublay, France; SIRET 84450819200029, RCS Versailles. | Open GRC platform for security programmes with risk assessment, control mapping, evidence, audits and third parties. | CISO Assistant integrates an AI chat and MCP for suggestions on risk assessment, mapping of controls and analysis of compliance gaps. Custom models can be used in the chosen environment.[171] [172] [1233]Specific AI functions documented Prepare risk assessments · Map controls · Analyse compliance gaps AI evidence: [1233]According to the vendor, local AI engine in Community and Pro; own model required. Managed SaaS model option still in development and not counted as available. Not tested in practice. Source check: 2026-10-14 |
| isidatenisidatenHeadquarters: Germany [1237]isidaten GmbH | isidaten maps the relationship between risk register, risk treatment, controls and statement of applicability for ISO 27001. Assets and responsibilities are linked with measures and evidence. Document approvals, acknowledgements, internal audits and the handling of findings support operations. Key figures and reports make the implementation status and the effectiveness of controls traceable. | isidaten describes AI queries on current risks, measures, assets and firewall governance via MCP. The product assistant answers subject-matter questions and suggests form content or changes for confirmation.[1235] [1236] [1237] [1238]Specific AI functions documented Query risk and measure status conversationally · Suggest GRC form content · Provide governance data for AI analyses AI evidence: [1238] [1236]AI activation and authorised AI client/MCP access required; changes only after confirmation. No product test. Source check: 2026-10-14 |
| ISMS.onlineHeadquarters: United Kingdom [1240]Contracting party ALLIANTIST LIMITED; registered in England and Wales, no. 04922343; registered office Brighton, England. | Management system for assets, risks, controls, suppliers, audits and several standards. | ISMS.online describes AI governance and ISO 42001 support. Its own AI assistance for risk, control or compliance tasks is not specifically documented in the product sources checked.[173] [1239]Not specifically documented in the source check Product overview and indexed Virtual Coach description read: videos, checklists and guides are not AI evidence. ISMS Copilot is a different provider. Sources checked: [173] [1239]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| IsodoraIsodora Compliance PlatformHeadquarters: Sweden [1243]Isodora AB, organisation number 559565-0424, Enskede, Sweden.Isodora AB; IsoDora | Compliance platform with requirements, controls, owners, evidence and audit history. Automated controls against connected systems complement the documentation of several sets of rules. | Specialised AI assistants generate draft documentation from answers about the organisation and map the same answers to several sets of rules. An assistant answers questions about controls, gaps and audit readiness.[1241] [1242] [1243]Specific AI functions documented Draft compliance documentation · Map answers to several sets of rules · Answer control and audit questions AI evidence: [1241]According to a vendor announcement, open to new customers since 1 September 2026; seven-day trial access offered. The terms of use require AI-generated content to be reviewed before use for certification or by authorities. Source check: 2026-10-15 |
| KertosTo the detailed profile Headquarters: Germany [1244]Kertos GmbH; Munich, Germany; HRB 271165. | Links information security, data protection and AI governance with evidence and expert support. The platform addresses European compliance requirements in particular. | Kertos AI fills in compliance documents, suggests suitable policies and next work steps and supports the identification of risks in the compliance context.[174] [175] [176]Specific AI functions documented Draft and fill in compliance documents · Suggest suitable policies and next measures · Analyse compliance risks AI evidence: [175]Documented by the vendor within the platform; the offering combines software with expert support. Not tested in practice. Source check: 2026-10-14 |
| KRES.IDPakem NGRCHeadquarters: Indonesia [1246]The vendor and product pages name PT Karya Siber Mandiri with an address in Depok, West Java, Indonesia. KRES offers consulting and a separately described software product; the Nogo GRC brand from older product pages is not counted separately.PT Karya Siber Mandiri; KRES; Pakem NGRC; Nogo GRC System | Pakem NGRC links risk register, control mapping, statement of applicability, evidence and compliance assessments. Alongside international security standards, KRES.ID names Indonesian data protection and financial sector requirements. | The product page describes an AI pipeline that analyses control, evidence and risk data, identifies gaps and overlaps and proposes risk assessments and prioritised measures. Suggestions for improving controls are named as a further use.[1245] [1246] [1247]Specific AI functions documented Identify control and evidence gaps · Assess risks with GRC data · Prioritise remediation measures AI evidence: [1245]Product and implementation offering via vendor contact. The publicly described AI pipeline has not been tested by us; confirm the model, specific licence version and scope of local control libraries before procurement. Source check: 2026-10-15 |
| LutechLutech GRC; Eyes on ThreatsHeadquarters: Italy [1249]The company page names Lutech S.p.A., with registered office and headquarters in Milan, and REA 1666842.Lutech S.p.A.; Lutech GRC; Eyes on Threats | Lutech describes an in-house developed GRC platform for security risks and compliance. It links information on assets, threats and safeguards and is used, among other things, in its own cyber defence offering. | AI supports the processing of regulatory documents and corporate policies as well as compliance assessments. For cyber risks, Lutech also describes context-specific risk assessments and generative summaries of technical reports.[1248] [1249]Specific AI functions documented Analyse regulatory documents · Support compliance assessments · Assess cyber risks in context · Summarise security reports AI evidence: [1248]Own platform documented in the Lutech offering, including use in the A3 CyberDefence Center. Stand-alone SaaS booking or separate licensing cannot be derived from the source; clarify the offering model. Source check: 2026-10-15 |
| Make IT SafeMake IT Safe; DORA ToolkitHeadquarters: France [1251]MakeITSafe; Digitemis Make IT Safe | Make IT Safe supports security and data protection teams with internal assessments, supplier reviews, risks and shared action plans. The platform links reference frameworks such as ISO 27001, NIS2 and DORA with questionnaires and evidence. Additional tools address the DORA register of information and the integration of security into projects. | The Make IT Safe DORA Toolkit uses AI for structured import suggestions from existing files and for checking ICT contracts against DORA requirements. An assistant labelled as beta answers DORA questions with reference to the organisation's own data and regulatory texts.[1250] [1251] [1252] [1253]Specific AI functions documented Import suggestions for DORA data · DORA contract review · DORA questions with reference to company data AI evidence: [1253]AI assistant in beta with usage quotas. According to the vendor, contract analysis twice in trial access, unlimited in the subscription. Import suggestions require confirmation. No product test. Source check: 2026-10-14 |
| Meta-Data DigitalSecutivaHeadquarters: Spain [1255]Meta-Data; Meta-Data Digital S.L.; Meta-Data Digital SL; Secutiva | Secutiva by Meta-Data Digital combines information security management, control mappings, evidence and risk analyses. A common control model supports several sets of rules; document versions and approvals accompany the management of evidence. Further functions concern suppliers, incidents, internal audits and continuity. For consultancies and outsourced security officers, the platform offers separate tenants and reusable templates for supporting several organisations. | The product page names AI-generated policies and procedure descriptions as well as answering security questionnaires. A context-specific copilot complements these functions within the specialist modules. General control mapping and evidence collection are not classed across the board as AI processes.[1254] [1255] [1256]Specific AI functions documented Draft policies and procedure descriptions · Answer security questionnaires · Provide module-specific assistance AI evidence: [1254]Documented by the vendor; not tested in practice Source check: 2026-10-14 |
| MindlapseMindlapse OS; ErnestHeadquarters: France [1259]The legal notice names Mindlapse SAS, 9 rue des Colonnes, Paris, RCS 939 571 535.Mindlapse SAS | Mindlapse links cyber risks, third-party reviews and compliance. Company context, controls and evidence flow into a shared data set for assessments and reports. | Ernest proposes risk scenarios, treatments and control mappings. The AI drafts answers to supplier questionnaires from existing documents and checks statements against evidence; suggestions carry sources and are confirmed or rejected by subject-matter experts.[1257] [1258] [1259]Specific AI functions documented Propose risk scenarios and measures · Map controls · Draft questionnaire answers from evidence AI evidence: [1257] [1258]Demo offering; check the productive scope and operating conditions. The vendor describes source references and human approval; no independent performance test. Source check: 2026-10-15 |
| NaqNaqHeadquarters: Netherlands [1261]Naq Cyber; Naq Cyber B.V.; Naq Cyber UK Ltd | Naq combines controls, risks, policies, measures and evidence for several compliance frameworks. A particular focus is on healthcare companies and requirements such as NHS DSPT and DTAC. The platform also manages clinical hazards, training, suppliers and the versioning of policies. | Naq describes a read-only AI assistant for compliance questions, summaries and evidence reviews across the entire compliance programme. The assistant does not change any formal records in doing so.[1260] [1261] [1262]Specific AI functions documented Answer compliance questions · Summarise the compliance programme · Review evidence AI evidence: [1260]Documented by the vendor as a read-only assistant; no product test. Source check: 2026-10-14 |
| neonotuSightadelHeadquarters: Germany [1265]neonotu GmbH; Edelsbergstraße 8, Munich; HRB 313206, Munich Local Court. Sightadel remains a product of this provider. Geography checked on 15 October 2026; no inference about hosting or owners from the registered office.Provider: neonotu; product: Sightadel | Links requirements, assessments, risks, evidence and measures across several frameworks. Answers and documents remain assigned to the respective review items. | Sightadel uses AI to prepare draft policies and evidence from existing information, assets, evidence and previous answers. Bullet points can be developed into reviewable sections; adoption requires human confirmation.[1263] [1264] [1265]Specific AI functions documented Create draft policies from existing information · Pre-formulate control and evidence documentation · Develop bullet points for ISMS documents AI evidence: [1264]Documented by the vendor; not tested in practice. Source check: 2026-10-14 |
| OptiTechOptiTech Compliance PlatformHeadquarters: Sweden [1267]The contract terms name OptiTech Sverige AB, org. no. 559489-8917, Karlslundsvägen 8 in Sweden.OptiTech Sverige AB; OptiTech Compliance | OptiTech links security requirements, policies, control evidence, incidents and supplier registers. The offering is aimed particularly at Nordic organisations and includes Swedish as well as European frameworks. | The platform uses AI to create drafts of policies, procedures, gap analyses and questionnaire answers. It suggests control mappings and offers an assistant for organisation-specific compliance questions. Generated content must be reviewed and approved.[1266] [1267]Specific AI functions documented Draft policies · Summarise gap analyses · Prepare questionnaire answers · Suggest control mappings AI evidence: [1267]Commercial platform with demo and published pricing. Scope of service depends on the package; any beta or trial functions are subject to separate terms. Source check: 2026-10-15 |
| ORBITAssetControlHeadquarters: Czechia [1269]ORBIT s.r.o., Prague, IČ 16628110, register C 156620.ORBIT s.r.o.; AssetControl; SUDOP CIT | Cyber GRC platform for assets, risks, suppliers, controls and continuity planning. Approvals and reports link the assessment with evidence on NIS2, DORA and security standards. | AI reads internal documents and maps them to requirements. For uploaded IT supplier contracts, it identifies security clauses and missing provisions, for example on audit rights, incident reporting or subcontractors.[1268] [1269]Specific AI functions documented Map documents to requirements · Pre-review supplier contracts · Identify missing security clauses AI evidence: [1268]Product version 1.3 described with access and SaaS/self-hosted variants. AI contract review in a higher package; price table labelled as a draft. Confirm the binding functional scope. Source check: 2026-10-15 |
| OstendioOstendio | Brings together security requirements, tasks, evidence and risk assessments. Auditors, internal owners and external partners can be involved in the work. | No specific AI GRC work step was documented within the product scope checked. Ostendio's terms of use mention AI functionality but do not specify any individual function; content about AI risks is likewise not sufficient for this.[1270] [1271]Not specifically documented in the source check Product page and AI clause as well as targeted vendor search checked. The status only means that specific evidence of a function is missing, not that AI is missing. Sources checked: [1270] [1271]No specific AI work step documented in the source check; no statement about the absence of AI. Source check: 2026-10-14 |
| ParamifyParamify | Focus on security and risk documentation for US federal requirements such as FedRAMP, FISMA and CMMC. Shared data supports gap analyses, implementation planning and recurring SSP and POA&M documentation. | Paramify offers optional AI for drafting cross-framework control responses and for identifying required elements when importing existing System Security Plans. In-app agents and further AI workflows are described separately as Coming Soon.[1272] [1273]Specific AI functions documented Draft control responses from existing risk information · Identify elements from existing System Security Plans AI evidence: [1273]According to the vendor, existing AI functions are optional; model choice and AI permission in the workspace. In-app agents, Evidence Scoring and questionnaire functions that are still announced are not counted as available; no product test. Source check: 2026-10-14 |
| PeriumPeriumHeadquarters: Netherlands [1274]Perium B.V. | Perium links risk registers, control measures, assessment results and continuous improvement cycles. Predefined standards and management systems support information security and data protection in particular; custom requirement catalogues are also possible. The platform is also aimed at smaller organisations and sector-specific applications, for example in Dutch healthcare and the public sector. | No specific AI function for GRC work steps is documented in the source check. The AI topic page describes the management of AI risks; automated control tests are not in themselves AI evidence.[1274] [1275] [1276] [1277] [1278]Not specifically documented in the source check Product, AI governance and control testing pages as well as targeted vendor searches checked. The result does not mean that the provider does not use AI. Sources checked: [1276] [1277] [1278]No specific AI-in-GRC function documented in the vendor sources checked. Source check: 2026-10-14 |
| PhinasoftPhinasoftHeadquarters: France [1282]PHINASOFT SAS | Phinasoft offers a platform for cyber risks, information security management and compliance. It links risk analyses according to EBIOS RM or custom methods with impact analyses, recurring controls, evidence and action plans. Security approvals, time-limited exemptions, data protection and supplier assessments complement the functional scope. Several sets of rules can be evaluated together; dashboards and reports support management. | The vendor documents a context-specific assistant, document pre-analysis and an agent mode. The AI suggests assessments, measures and reports; changes require human approval. Documents and sets of rules used are referenced and interactions are logged.[1279] [1280] [1281] [1282]Specific AI functions documented Evaluate documents and pre-fill risk or compliance assessments · Map evidence to requirements · Suggest threat scenarios and action plans · Generate context-specific answers and reports AI evidence: [1280]Documented by the vendor; not tested in practice Source check: 2026-10-14 |
| ReglyzeReglyze NIS2Headquarters: France [1284]Operator Cyril Poder, French sole proprietorship (micro-entreprise), Mantes-la-Jolie; SIREN 440554541. Not a corporation.Cyril Poder; Reglyze NIS2 | Software for NIS2 applicability checks, gap assessment, policies, incidents and supplier risks. The offering is aimed particularly at smaller companies and supports country-specific sets of rules. | AI supports the identification of relevant obligations, creates editable draft policies and evidence and prepares answers to security questionnaires as well as incident reports. Approvals and reports to authorities remain with the user.[1283] [1284]Specific AI functions documented Draft policies · Answer security questionnaires · Prepare incident reports AI evidence: [1283]Free entry level and paid platform plans offered; local operation also available on request. Public product demos and self-created compliance evidence are described. Source check: 2026-10-15 |
| RegORegO; Compliance CompanionHeadquarters: Singapore [1287]The vendor names Singapore as HQ and Tamil Nadu as development location. The contact refers to DevOpsLabs; its general terms and conditions name DevOpsLabs Private Ltd. in Singapore. Confirm the RegO contracting entity separately.RegO OSCAL; DevOpsLabs (contact attribution) | RegO brings together controls, evidence, assessments and measures in an OSCAL-based platform. Several frameworks can use shared controls and evidence; technical checks complement manual assessments. | The Compliance Companion reads evidence, maps controls and answers questions on compliance status in natural language. The AI analysis complements the shared control and evidence model.[1285] [1286] [1287] [1288]Specific AI functions documented Evaluate evidence · Map controls · Answer compliance questions AI evidence: [1285]Demo on request. The public AI description is brief; check processing, production scope and specific contract terms separately. Source check: 2026-10-15 |
| RegScale | Continuous control capture, compliance documentation and evidence with technical automation and system connections. | RegScale RegML creates drafts of System Security Plans from documents or onboarding answers. The AI auditor checks the documentation for gaps; AI functions must be explicitly activated.[177] [178] [1289]Specific AI functions documented SSP text drafts from documents · SSP drafts from questionnaire answers · AI-assisted gap review of security plans AI evidence: [178] [1289]Opt-in with administrative activation; SaaS activation via Customer Success, local deployment described for suitable resources. No product test. Source check: 2026-10-14 |
| Risk HunterRisk Hunter / QANTIXHeadquarters: France [1293]Legal provider information on riskhunter.eu: YMUNIT, SIRET 87918933000027, France.YMUNIT; RiskHunter; QANTIX | Cyber GRC platform for risks, controls, measures and audit evidence with risk analyses oriented to EBIOS and ISO 27005. | AI supports risk analyses and action plans, explains and prioritises suggestions and documents their links to controls and evidence. Humans validate the results.[1290] [1291] [1292] [1293]Specific AI functions documented Analyse cyber risks · Prioritise measures · Document decisions with evidence AI evidence: [1290] [1291] [1292]Current product offering with demo; local and optional external models according to the provider. Source check: 2026-10-15 |
| ScalePadControlMapControlMap | Supports managed service providers with compliance and vCISO services for multiple clients. Assessments, frameworks, evidence, tasks and reports accompany ongoing audit preparation. | ControlMap Copilot supports answers to security questionnaires, policy drafts and gap analyses at requirement level. Recommendations and next steps use the context of the respective client environment.[1294] [1295]Specific AI functions documented Answer security questionnaires · Draft policies · Analyse requirement-specific gaps · Recommend follow-up steps AI evidence: [1295]Documented beta for US-based ControlMap MSP partners and Pro client environments; end-customer users excluded at launch. Global rollout only planned. No product test. Source check: 2026-10-14 |
| Scrut Automation | Organises security frameworks, risks, evidence, supplier reviews and audit preparation. Controls and documentation are used across several requirements. | Scrut Teammates suggests policy-to-control mappings, identifies policy and evidence gaps and creates drafts of questionnaire answers as well as SOC 2 system descriptions.[179] [180] [181] [1296]Specific AI functions documented Control mapping · Evidence review · Questionnaire answers · SOC 2 system description AI evidence: [180] [1296]Integrated into Scrut, optionally activatable and configurable; plan limits not stated in the help pages checked. Source check: 2026-10-14 |
| Scytale | Combines continuous control monitoring, evidence, risks and audit management with expert support. Overlapping security, data protection and AI frameworks can be mapped. | Scytale describes AI agents for reviewing evidence, identifying control gaps and preparing policies and measures. Scy also supports mapping controls between frameworks.[182] [183] [184]Specific AI functions documented Check evidence against control requirements · Flag control gaps · Draft policies and measures · Map controls between frameworks AI evidence: [183]Documented by the vendor with human compliance expertise in the process; no product test. Source check: 2026-10-14 |
| SecaniSecani; Secani MCPHeadquarters: Germany [1299]The legal notice explicitly names Jonathan Bezdek in Berlin as sole provider and contracting party. Secani is a product and business name, not an independent registered company.Secani; Jonathan Bezdek; Secani MCP; Secani Eve | Secani links requirements, controls, risks, evidence and review decisions in an ISMS workspace. Among other things, the platform uses OSCAL for structured and portable security information. | The documented MCP service allows authorised AI clients to research compliance context, qualify evidence and map requirements. Write-access evidence and inventory workflows require approvals; AI provenance and versions are recorded.[1297] [1298] [1299] [1300]Specific AI functions documented Research compliance context · Qualify evidence · Map evidence to requirements · Maintain inventories with AI AI evidence: [1297]MCP documentation names a productive service for authenticated users and external AI clients. The roadmap still lists extended workflow control, review creation and further approval functions as in progress; confirm the actual version scope. Source check: 2026-10-15 |
| SecfixSecfixHeadquarters: Germany [1303] | Secfix links security audits, risks, policies and supplier assessments for European companies. Integrations take over information from cloud, HR and identity systems; tasks and evidence support ongoing work on ISO 27001, TISAX, NIS2 and further frameworks. Expert support complements the software. | CISO AI answers compliance questions, guides users through implementing controls in Secfix and explains steps for handling audit nonconformities.[1301] [1302] [1303]Specific AI functions documented Answer compliance questions · Guide control implementation · Help handle audit nonconformities AI evidence: [1302]According to the vendor, part of the platform subscription for all Secfix customers. No product test. Source check: 2026-10-14 |
| SECJURDigital Compliance OfficeHeadquarters: Germany [1305]Datenschutz hoch 4 | The Digital Compliance Office combines information security, data protection and further compliance tasks on one platform. In addition to ISMS requirements, it manages processing activities, data subject requests and impact assessments. Additional modules concern quality management, whistleblower protection and the documentation and risk assessment of AI systems in companies. | The Digital Compliance Office connects external AI assistants to the organisation's own compliance data via MCP. The assistants answer, for example, questions about published policies, open risks and outstanding training. Access is read-only and remains limited to booked modules and existing user permissions.[1304] [1305] [1306] [1307] [1308] [1309]Specific AI functions documented Answer questions about policies and compliance evidence · Query open risks and measures via AI assistant · Query outstanding compliance training AI evidence: [1307] [1308]MCP connection publicly documented; deactivated by default. SECJUR must activate the organisation, after which the customer administrator grants user rights. An external MCP-capable AI assistant with OAuth is required; no write function and no product test of our own. Source check: 2026-10-15 |
| SecTepeSecTepe.Core / KI-AutomationHeadquarters: Germany [1312]Eckel SecTepe UG (haftungsbeschränkt), Wülfrath; Wuppertal Local Court HRB 33864.Eckel SecTepe UG; SecTepe.Core | Platform for ISMS, risks, controls, policies, audits and supplier evidence. Several security frameworks and a shared audit trail support compliance work. | The RAG assistant answers audit and questionnaire questions from the organisation's own documents, with sources. AI drafts policies, suggests evidence-to-control mappings and summarises changes. Draft policies go through a human approval process.[1310] [1311] [1312]Specific AI functions documented Answer audit questions with sources · Draft policies · Map evidence to controls AI evidence: [1311]Product and demo offered. The current AI page describes IONOS models and optional local operation; agree the operating variant and scope specifically. Draft policies remain in suggestion mode. Source check: 2026-10-15 |
| Secureframe | Security controls, risk assessments, audit evidence and security questionnaires. | Comply AI reviews evidence, supports the remediation of failed control tests, supplements risk assessments and drafts source-referenced answers for security questionnaires.[185] [186]Specific AI functions documented Evidence review · Test remediation · Risk assessment · Questionnaire answers AI evidence: [186]Comply AI is activated by default and can be switched off by administrators. Questionnaire AI requires LLM approval; AI supplier review may require a higher plan. Source check: 2026-10-14 |
| SecureSlateSecureSlate | Combines software and expert support for security audits. Controls, integrations, evidence, policies and supplier risks support, for example, SOC 2 and ISO 27001 preparation. | SecureSlate describes AI for analysing control gaps, preparing evidence-based remediation and drafting answers to security questionnaires from the organisation's own knowledge base.[1313] [1314]Specific AI functions documented Analyse control gaps and prepare remediation for approval · Find evidence for controls and check it against framework requirements · Answer security questionnaires from policies and evidence AI evidence: [1313]Offering documented by the vendor, consisting of platform and compliance support; suggested remediation and answers are submitted for review and approval. No product test. Source check: 2026-10-14 |
| SekitSekit; SekuraHeadquarters: Spain [1317]The provider page names the Sekit team in Valencia. A software legal entity of the same name can be found in the Spanish BORME; the legal attribution to the web offering has not been conclusively confirmed.Sekit AI; Sekura | Sekit offers a GRC workspace for consultancies and internal compliance teams. It links framework assessments, risk registers, evidence, measures and reports with a change history for human and agent-assisted work. | Sekura and connected AI assistants support gap analyses, check uploaded evidence against open controls and suggest risks together with treatment. Assessments and generated records remain editable in the workspace and are intended for human review.[1315] [1316] [1317]Specific AI functions documented Analyse compliance gaps · Check evidence against controls · Draft risks and treatments · Prepare compliance reports AI evidence: [1315] [1316]Explicitly beta. Connection of external AI assistants via MCP described as available for consultancies; agent access for company workspaces on request. Public skills/plugin repository on the Spanish page still announced. Source check: 2026-10-15 |
| SigeaSigea GRCHeadquarters: France [1319]Publisher and operator EURL Pierre Duval, SIREN 105332589; Avensan, France.EURL Pierre Duval; Sigea GRC | Cyber GRC software for risk analyses, controls, compliance and audits, including in the EBIOS context. | AI supports risk assessments and suggests risk mitigation measures. The function is listed in paid offerings.[1318] [1319]Specific AI functions documented Assess cyber risks · Suggest risk mitigation measures · Support control work AI evidence: [1318]Free offering explicitly without AI; Pro offering with AI and demo. Source check: 2026-10-15 |
| Sokigo (Addnode Group)AquilHeadquarters: Sweden [1320]The website names Sokigo AB, org. no. 556550-6309, Köping, Sweden. Addnode confirms the group affiliation; Aquil is not counted separately as a vendor.Sokigo AB; Aquil; Addnode Group; Addnode Group AB | Aquil links ISMS documentation, control evidence, requirement tracking, processes and audit planning. The platform supports security and other management systems as well as their recurring reviews. | AI generates organisation-specific policies, procedures and risk assessments and helps revise them. Further functions support gap analyses and the clean-up of duplicate requirements; existing documents can be used as context.[1320] [1321]Specific AI functions documented Draft policies · Prepare risk assessments · Analyse compliance gaps · Identify duplicate requirements AI evidence: [1320]Free entry level and paid packages. According to the plan overview, audit planning and requirement tracking are assigned to the Enterprise package. Source check: 2026-10-15 |
| Sprinto | Control monitoring, audits, risks and evidence with requirement and data connections. | Sprinto AI reviews supplier documents, supports answering security questionnaires and summarises or revises policies. Results are reviewable and editable.[187] [188]Specific AI functions documented Supplier review · Questionnaire answers · Policy summary · Policy editing AI evidence: [188]Can be activated and deactivated via Settings > Sprinto AI; then available in the supported modules. Plan limits not stated in the documentation checked. Source check: 2026-10-14 |
| Strike GraphStrike Graph | Links security controls, evidence and audit preparation. Shared security programmes can cover several audit requirements and reuse evidence. | With Verify AI, Strike Graph describes AI-assisted review of security controls. The AI Security Assistant answers questions from internal evidence; AI security reports use existing compliance data for supplier assessments.[1322] [1323]Specific AI functions documented AI-assisted control validation · Querying internal security documentation · Security reports for supplier assessments AI evidence: [1322]Documented by the vendor; no product test. Source check: 2026-10-14 |
| TameTrustTameTrust / Claude agent teamHeadquarters: Belgium [1325]Fabindias SRL, Brussels, company number BE0730815024, referred to in the contract as Tametrust.Fabindias SRL; Tametrust | Compliance workspaces for ISO 27001, NIS2, data protection and further sets of rules. Links policies, risk treatment, supplier review and audit evidence along the PDCA cycle. | A locally integrated Claude agent team accesses TameTrust via MCP. Specialised agents support the review of requirements and SoA decisions, identify evidence gaps and prepare evidence packages as well as management overviews.[1324] [1325]Specific AI functions documented Investigate evidence gaps · Pre-review SoA decisions · Compile audit evidence AI evidence: [1324]SaaS platform with contract terms and product tour. The AI team is described as an extension that can be combined locally via MCP; clarify Claude access, configuration and scope of service separately. Source check: 2026-10-15 |
| Teddy TechnologiesTeddyHeadquarters: Germany [1327]The legal notice names Teddy Technologies GmbH, Berlin, HRB 289626 at Charlottenburg Local Court.Teddy Technologies GmbH; Teddy | Teddy links requirements, controls, policies, evidence and measures across several security frameworks. The platform supports audit preparation as well as the handling of questionnaires and supplier contracts. | The provider describes AI agents for gap analyses, policy drafts, evidence mapping and source-referenced questionnaire answers. Contract drafts and other outward-facing results require human approval.[1326] [1327]Specific AI functions documented Analyse compliance gaps · Draft policies · Map evidence to controls · Answer security questionnaires AI evidence: [1326]The vendor describes six agents as available and offers a demo. Individual additional workflows are marked as announced; check the specific contractual scope. Source check: 2026-10-15 |
| TelconTelconisHeadquarters: Austria [1329]The legal notice names Telcon OG in Donnerskirchen, Austria, FN 537381t.Telcon OG; Telconis | Telconis combines ISMS controls, risk registers, assets, measures and continuity documentation. The platform links several security frameworks and provides reports as well as templates. | An integrated AI assistant answers organisation-specific questions on ISO controls, NIS2 measures and BCM requirements. The documented AI scope is context-specific subject-matter assistance; standard reports and framework mappings are not classed across the board as AI.[1328] [1329]Specific AI functions documented Answer ISMS subject-matter questions · Explain control requirements · Explain BCM requirements AI evidence: [1328]Trial access and paid packages are offered. AI quotas and the variant described as offline differ by plan and should be specified in the offer. Source check: 2026-10-15 |
| Telefónica TechSandaS GRCHeadquarters: Spain [1333]Telefónica; Telefonica; Telefónica Tech; Govertis; ElevenPaths; GesConsultor GRC; SandaS GRC | SandaS GRC is Telefónica Tech's own platform for security governance, risk management and regulatory assessments. It supports assessments across several standards, the assessment of risks and controls and traceable justifications for non-applicable controls. Additional modules concern data protection and business continuity; a particular focus is on the Spanish security framework ENS. | SandaS GRC describes governance of AI use cases and the associated risk and evidence documentation. Specific AI support for a GRC work step is not documented in the product articles checked.[1330] [1331] [1332] [1333] [1334]Not specifically documented in the source check Current GRC announcement and Spanish product article read, targeted vendor search. SandaS SOC offerings and governance of AI not counted as separate AI GRC assistance. Sources checked: [1331] [1334]No specific available AI support documented in the source check; no product test. Source check: 2026-10-14 |
| Thoropass | Combines an audit lifecycle platform with its own audit services. Evidence, control mappings and auditor communication are managed from the preparation stage through to the report. | First Pass uses AI to check audit evidence for missing documents, incorrect periods and inconsistencies. Smart Sort analyses GRC exports and maps the evidence they contain to matching controls and audit requests.[189] [190] [191] [192]Specific AI functions documented Pre-check audit evidence for gaps · Classify evidence from GRC exports · Map evidence to controls and audit requests AI evidence: [190] [191]Smart Sort documented as a launched platform function; First Pass described at introduction as an opt-in preview for full platform and audit customers. The current activation scope must be checked contractually; no product test. Source check: 2026-10-14 |
| TicTacStartComplyHeadquarters: Greece [1336]The terms of use name the Greek operator TicTac Cyber Security & Data Recovery Services S.A. in Athens, VAT 800782394, GEMI 140756708000. StartComply is not additionally counted as a separate vendor.TicTac Cyber Security & Data Recovery Services S.A.; StartComply; Start Comply; TicTac Laboratories | StartComply manages compliance assessments, policies, supplier risks and audit evidence. The offering focuses on European security and resilience requirements and links controls, gaps and measures in one platform. | The vendor describes an AI engine that identifies compliance gaps and suggests remediation measures. Progress and assessments are linked with the compliance workflows; the existing template library is not equated with generative policy creation.[1335] [1336]Specific AI functions documented Identify compliance gaps · Suggest remediation measures · Support compliance assessments AI evidence: [1335]Commercial SaaS with demo and subscription. Confirm the specific AI scope in the chosen package. The publicly available contract terms contain editorial leftovers; request a cleaned-up contract version and data processing terms before procurement. Source check: 2026-10-15 |
| TrustCloudTrustCloudFormer name: Kintent | Links ongoing control monitoring with compliance evidence and risk relationships. Can also be used as an automation layer for existing GRC systems. | TrustCloud documents AI-assisted answers to security questionnaires from the organisation's own controls, policies and documents. For custom compliance frameworks, AI suggests suitable controls and policies for approval.[1337] [1338] [1339]Specific AI functions documented Answer security questionnaires · Map controls and policies to frameworks AI evidence: [1338] [1339]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| TrusteroTrustero | Supports evidence collection and control mapping, the assessment of control gaps and security questionnaires. Existing policies, controls and documents form the working basis. | Trustero uses AI to map evidence to controls, frameworks, risks and policies. Further documented tasks are gap analyses, recommendations for measures and answering security questionnaires.[1340] [1341] [1342]Specific AI functions documented Map evidence to controls and frameworks · Analyse control gaps · Recommend measures for the compliance roadmap · Answer security questionnaires AI evidence: [1342]Documented by the vendor; no product test. Source check: 2026-10-14 |
| TrustMAPPTrustMAPP | Links security maturity with compliance, measures and management reports. One focus is on economic improvement planning, including capital and staffing costs. | In the joint offering with Uno.ai, TrustMAPP describes AI-assisted third-party assessments as well as the automation of evidence, control and compliance work. The AI is attributable to the partner offering.[1343] [693]Specific AI functions documented Support third-party assessments with AI · Handle evidence and control validation in the joint compliance workflow · Map controls between compliance frameworks AI evidence: [693]Joint offering with Uno.ai documented by the vendor; no statement about identical AI functions in the stand-alone TrustMAPP product. No product test. Source check: 2026-10-14 |
| TrusTrak SolutionsRiskGuardHeadquarters: United Kingdom [1346]The terms of use name TrusTrak Solutions Ltd as operator and registration in England and Wales; the website names London.TrusTrak Solutions Ltd; Trustrak Solutions Limited; RiskGuard; riskguardhq.com | RiskGuard links a risk register with controls, evidence, audit workflows and reports. Auditors receive access limited in time and scope for reviewing the documentation. | The Claude-based assistant drafts risk entries and treatments, suggests controls and checks evidence gaps per control. It answers security questionnaires on the basis of the organisation's own documents and writes management summaries from current audit data.[1344] [1345] [1346]Specific AI functions documented Draft risk entries · Suggest controls · Analyse evidence gaps · Answer security questionnaires · Summarise audit data AI evidence: [1345]Paid subscription and demo offered. Publicly described functions were not tested in practice; AI assessments require expert review. Source check: 2026-10-15 |
| TTS Trusted Technologies and SolutionsTTS traxHeadquarters: Germany [1350]TTS trax; TTS Trusted Technologies and Solutions GmbH | TTS trax organises information security via linked assets, business processes, risks and measures. Assessment workflows, deadlines, reminders and key figures support the treatment and monitoring of risks. Forms and workflows involve further participants in data collection. Additional modules link the ISMS with compliance, data protection and business continuity on the same platform. | The TTS trax function description checked documents ISMS and compliance workflows, but no sufficiently specifically described AI work step. References to AI support in writing blog articles are not evidence of AI in the product.[1347] [1348] [1349] [1350] [1351]Not specifically documented in the source check Product page and targeted vendor domain search for KI and artificial intelligence checked. No evidence of a general absence of AI. Sources checked: [1347] [1351]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| UESE ItaliaISOPILOT / ISO 27001 ISMS WorkspaceHeadquarters: Italy [1353]UESE ITALIA S.p.A.; ISOPILOT; UESE Digital | ISOPILOT offers a dedicated ISMS workspace that links assets, risk assessment, risk treatment, Annex A controls and statement of applicability. Owners document control decisions and evidence, plan audits and track nonconformities and corrective actions. UESE's platform also supports controlled documents and approvals; risk acceptance and decisions on control applicability remain explicitly assigned to authorised persons. | ISOPILOT's HoloAssistant explains missing evidence in the project context and uses facts extracted from attachments with source and confidence information. Pre-checks can pre-fill fields on the basis of documented information and flag contradictory evidence for review.[1352] [1353] [1354]Specific AI functions documented Explain evidence status and documentation gaps · Extract project information from attachments · Pre-fill documented assessment fields · Flag contradictory evidence AI evidence: [1354] [1352]Documented by the vendor with trial access; role- and project-specific context. Control applicability, risk acceptance and approvals remain human. No product test. Source check: 2026-10-14 |
| UnciaUncia SI / ConformitéHeadquarters: France [1357]Uncia SAS, Boulogne-Billancourt; SIRET 91970590500017 according to the legal notice.Uncia SAS; Uncia SI | IT architecture and documentation platform with supplementary compliance checking. It links system overviews, dependencies and data flows with ISO 27001/NIS2 requirements, deviation notices and audit exports. | AI analyses the system inventory, suggests structured modelling and creates or updates architecture documentation. These documents and overviews support evidence work; the framework-specific control check is not classed across the board as AI.[1355] [1356] [1357]Specific AI functions documented Generate system documentation for security evidence · Suggest architecture models · Update documentation when systems change AI evidence: [1355]Commercial platform with demo. The focus remains IT architecture; check the scope of the compliance functions and usable evidence formats in the offer. Source check: 2026-10-15 |
| Unicis.TechUnicis Platform; Unicis MCP ServerHeadquarters: Estonia [1360]The legal notice names Unicis.Tech OÜ in Tallinn, registry code 16566212.Unicis.Tech OÜ; Unicis; Unicis Platform | Unicis combines data protection records, security controls, risks and evidence in an open-core platform. The company also offers Atlassian applications for selected compliance processes. | The documented MCP server connects external AI assistants with compliance data. This allows users to query and update controls and risks in natural language and to edit tasks and data protection records.[1358] [1359] [1360]Specific AI functions documented Query control status via AI assistant · Edit risk register via AI assistant · Create compliance tasks from natural language AI evidence: [1358] [1359]According to the documentation, MCP functions in Premium and Ultimate, not in the Community plan. External AI assistant, API access and set-up required; no proprietary foundation model of the provider is claimed. Source check: 2026-10-15 |
| UPRIVER / AuditFlowAuditFlow ISMSHeadquarters: Japan [1363]A vendor press release names 株式会社UPRIVER with an address in Ginza, Chuo-ku, Tokyo; the current ISMS offering confirms UPRIVER as operator.株式会社UPRIVER; UPRIVER Inc.; AuditFlow ISMS; オーディットフロー | Specialist in setting up and operating an ISO 27001 management system in small companies. Guides users through work steps, registers, documentation and preparation for the certification audit. | AI creates drafts for information asset recording, risk assessment and ISMS documents on the basis of the organisation's data. Users review and amend the drafts. Completeness checks of the audit documentation, by contrast, are explicitly based on fixed rules.[1361] [1362] [1363]Specific AI functions documented Draft ISMS documents · Prepare asset recording · Prepare risk assessments AI evidence: [1361]AuditFlow ISMS is offered as a paid self-service with a 14-day document preview; downloads after paid registration. Individual ISMS consulting is not included. Source check: 2026-10-15 |
| VailorVailorHeadquarters: France [1365]VAILOR SAS | Vailor develops a platform for cyber risks and compliance with a common organisational model. Risk analyses according to EBIOS RM, risk registers, measures and controls are linked. Evidence supports the assessment of several sets of rules; configurable scales and roles represent corporate groups. The provider offers an accompanied pilot launch and a design partner programme. | The AI reads documents provided and pre-fills preliminary analyses as well as EBIOS RM analyses. An assistant answers questions in the context of the respective analysis. Suggestions cite document passages and must be confirmed by a human. AI analysis of supplier questionnaires is explicitly described as only planned.[1364] [1365]Specific AI functions documented Pre-fill preliminary analyses from project documents · Prepare EBIOS RM analyses on the basis of the organisation's own documents and security policies · Answer questions in the context of a risk analysis AI evidence: [1364]Pilot/design partner offering documented by the vendor; not tested in practice Source check: 2026-10-14 |
| Vanta | Automated security evidence, continuous control checks, risk management and Trust Center. | The Vanta AI Agent creates draft policies, reviews evidence, suggests questionnaire answers and identifies discrepancies between policies and actual implementation.[193] [194]Specific AI functions documented Policy drafts · Evidence review · Questionnaire answers · Discrepancy analysis AI evidence: [194]Functional scope depends on the products purchased; the AI review of supplier documents, for example, requires the TPRM offering. Source check: 2026-10-14 |
| VectaIAVectaIA; Julie; OscarHeadquarters: France [1367]The legal notice names VectaIA SAS, SIREN 994 933 257, with its registered office at Campus Cyber Région Sud in Marseille.VECTAIA SAS; VectaIA Copilote; Julie; Oscar | VectaIA supports the documentation and assessment of cyber security requirements. The platform links internal documents, audit and control plans, findings and measures with several security frameworks. | AI agents compare existing documents with requirements, identify gaps and suggest prioritised measures. They draft security policies and audit reports, answer security questionnaires from the internal document base and analyse the impact of changed requirements.[1366] [1367]Specific AI functions documented Check documents against requirements · Identify compliance gaps · Answer security questionnaires · Draft audit reports · Analyse impact of changes AI evidence: [1366]Platform offered with demo and expert support; clarify the scope of the agents and cloud or local deployment before procurement. Source check: 2026-10-15 |
| veriniceHeadquarters: Germany [1369]Software provider SerNet GmbH; Göttingen; HRB 2816 Göttingen Local Court. | verinice by SerNet is an open-source platform for information security, data protection and BCM. | No specific AI work step is documented in the verinice product sources checked. The representation of AI risks in IT-Grundschutz describes governance of AI and is not sufficient for this.[195] [196] [197] [1368]Not specifically documented in the source check Product presentation of the new generation and official search results on AI and assistants checked. General APIs and AI-related training not counted as an AI function. Sources checked: [195] [1368]AI availability not specifically documented in the source check. Source check: 2026-10-14 |
| VibrantiXVibrantiXHeadquarters: Singapore [1371]The contact page names Singapore as Global Headquarters, with further offices in the UAE and India. The terms of use choose UAE law; this does not evidence the registered office of a particular contracting company. The full corporate structure remains open.Vibrantix; Vibrantix Inc.; VibrantiX AI | VibrantiX links security controls, policies, evidence, risks and third-party assessments in a compliance platform. Interfaces bring in information from existing cloud and enterprise systems. Teams can provide documents for control reviews, handle security questionnaires and track measures. The public presentation names pilot customers and combines the software with ongoing support for compliance work. | VibrantiX describes agents that check document evidence against controls and flag gaps, draft answers to security questionnaires from policies and create context-specific draft policies.[1370] [1371] [1372] [1373] [1374]Specific AI functions documented Check evidence against controls and flag gaps · Answer security questionnaires from existing policies · Create context-specific draft policies AI evidence: [1370]The vendor describes active pilot customers and bookable product demos; a comprehensive general availability status is not claimed. No product test. Source check: 2026-10-14 |
| VirtualisSIGVERAHeadquarters: Croatia [1378]The vendor website names VIRTUALIS VIRTUALNI SUSTAVI d.o.o. with an address in Zagreb, Croatia, and OIB 55336668657. The SIGVERA cookie policy attributes the product to this company. The country evidence is thus secured via the company's own website rather than via LinkedIn alone.VIRTUALIS virtualni sustavi d.o.o.; SIGVERA; SIGVERA EU | SIGVERA links technical security data with compliance assessments and audit evidence. The platform brings together information from security monitoring, firewalls and identity services and links findings with requirements and measures. | The AI analyses security data, maps findings to regulatory controls and supports the identification and prioritisation of gaps. The provider also describes the creation of context-specific remediation steps and reports with references to evidence.[1375] [1376] [1377] [1378]Specific AI functions documented Analyse security data against controls · Prioritise compliance gaps · Map findings to requirements · Draft remediation steps AI evidence: [1375]NIS2 offering with contact and demo request documented; public video tour still announced. DORA and ISO 27001 are explicitly marked as upcoming extensions in the section on regulatory coverage. Confirm specific delivery and integrations before procurement. Source check: 2026-10-15 |
| xmera Solutionsxmera OmniaHeadquarters: Germany [1381]xmera Omnia; xmera Solutions GmbH | xmera Omnia links information security management with operational tasks, tickets and changes. Assets, protection requirements, risks and security requirements form the basis for action planning and risk treatment. Functions for audits, document approvals, key figures and recurring tasks support ongoing operations. Shared data can also be used for data protection, incidents and further management processes. | In the source check of the functions and release description, no specific AI work step in xmera Omnia was documented. Automated routines and tasks alone are not AI evidence.[1379] [1380] [1381]Not specifically documented in the source check Functions and targeted vendor search for KI/AI checked. No evidence in the material checked does not mean that AI is fundamentally absent. Sources checked: [1379] [1380]No specific AI work step documented in the source check; no statement about the absence of AI. Source check: 2026-10-14 |
| ZaniaZania AI AgentsHeadquarters: USA [1384]The privacy policy names the US headquarters; provider information Zania Inc., 1950 University Ave, Palo Alto, California.Zania Inc.; Zania AI | Zania links compliance evidence, control checks, internal risks and supplier assessments. The platform maps controls to several frameworks and records the status of the associated evidence. Owners can review results, sources and identified gaps and follow up on measures. Configurable responsibilities and approvals are intended to make integration into existing GRC workflows easier. | The AI agents collect evidence, test the design and effectiveness of controls and flag deviations with source references. Browser-based evidence collection under human supervision and suggestions for prioritising and handling gaps are also documented.[1382] [1383] [1384] [1385] [1386]Specific AI functions documented Collect and map evidence · Check control design and effectiveness · Identify control gaps with sources · Prioritise and forward measures AI evidence: [1382]Documented by the vendor; human supervision and configurable approvals provided for. No product test. Source check: 2026-10-14 |
Data protection & data governance
44 entries
| Provider / product | Documented focus | AI functions and classification |
|---|---|---|
| 2B AdviceAilance and PrIMEAilance and PrIME are products of the same provider. | PrIME supports data protection management; Ailance links data protection, compliance and risk processes. Shared information makes dependencies between tasks and departments visible. | On the product pages checked, Ailance AI is announced with functions for checking processing data, identifying and anonymising personal data and answering data protection questions. A clear release of these functions is not stated there.[1387] [1388] [1389]Announced or in development Check processing data · Identify and anonymise personal data · Answer data protection questions AI evidence: [1387] [1388]Announced: product pages still use future-tense wording such as in the coming months; no reliable current release date and no product test. Source check: 2026-10-14 |
| AcompliAcompli Privacy Governance PlatformHeadquarters: Ireland [1391]The privacy policy names Acompli Ltd, Block B, Maynooth Business Campus, Co. Kildare, Ireland. Not to be confused with the email provider formerly acquired by Microsoft.Acompli Ltd; Acompli Limited; acompli.ie; not the former email app Acompli | Acompli links data protection assessments, records of processing activities, data flows, third parties and risk treatment. Approved answers and evidence are reused in downstream records and linked with their review history. | AI drafts assessment questions and answers on the basis of the organisation's own documents and approved preliminary work. It identifies possible risks, flags insufficiently evidenced statements and prepares records of processing activities. Designated persons review the suggestions and approve records.[1390] [1391]Specific AI functions documented Draft data protection assessments · Derive risks from evidence · Flag evidence gaps · Prepare records of processing activities AI evidence: [1390]Platform with demo and sign-up. The separate EU AI Act area is labelled as Early Access; Code Scan is offered as an add-on module. Source check: 2026-10-15 |
| AIGOYAIGOY / Felix Compliance CoWorkerHeadquarters: Germany [1394]Thomas Brandt, sole trader operating as AX1S and AIGOY, with a business address in Hamburg; no separate AIGOY company is claimed.AX1S; Thomas Brandt; AIGOY; Felix Compliance CoWorker | Modular compliance software for smaller companies. Documented here are in particular data protection documentation and risk assessment; the broad module advertising does not establish a complete GRC function check. | Felix pre-drafts entries for the record of processing activities. The privacy information also describes model-based risk assessment on the basis of system name and intended purpose. Results require expert approval.[1392] [1393] [1394]Specific AI functions documented Pre-formulate processing activities · Prepare risk assessments AI evidence: [1392] [1393]Registration and tiered plans are offered. Several direct requests returned 503; primary content was readable in the search index. Confirm current module availability and AI services used before contracting. Source check: 2026-10-15 |
| AlgoGrassAlgoGrass GDPR Compliance ToolsHeadquarters: United Kingdom [1396]According to the terms of use, AlgoGrass Ltd is registered in England and Wales.AlgoGrass Ltd | Data protection tools for smaller companies with controls, policies, incidents, data subject requests and impact assessments. | AI creates draft compliance documents and explains identified data protection issues with guidance on action. Inclusion is based on these product-specific work steps, not merely on a general GDPR chat.[1395] [1396]Specific AI functions documented Draft compliance documents · Explain data protection findings AI evidence: [1395]Registration, trial access and paid plans are offered. The vendor describes the product as an orientation aid; outputs require expert review. Source check: 2026-10-15 |
| audatisaudatis MANAGERHeadquarters: Germany [1398]audatis Services GmbH; audatis Group | audatis MANAGER links data protection documentation with tasks, evidence and information security. Risks can be linked with measures, assets and effectiveness checks. The platform supports internal and external owners, multiple clients and additional workflows for training, audits and the handling of incoming reports. | No specific AI assistance for data protection, ISMS or compliance work is documented in the source check. The AI compliance described records and assesses the use of AI systems.[1397] [1398] [1399]Not specifically documented in the source check Product page, compliance/ISMS module and targeted vendor searches checked. Governance of AI is not counted as an AI work function; no proof of absence of AI. Sources checked: [1397] [1399]No specific AI-in-GRC function documented in the vendor sources checked. Source check: 2026-10-14 |
| BigID | Data discovery, data catalogue, retention, deletion and governance of the data used for AI. | BigID describes AI- and ML-assisted discovery and classification of sensitive data. The data is prepared for data protection and compliance with context and labels, for example for personal or regulated information.[198] [199]Specific AI functions documented Discovery of sensitive data · Classification of regulated data · Context-specific labelling for data protection and compliance AI evidence: [198]Documented by the vendor; no product test. Source check: 2026-10-14 |
| caralegal Data Responsibility PlatformTo the detailed profile Headquarters: Germany [1400]caralegal GmbH; explicit registered office Berlin; HRB 217532 B. | Processing activities, data protection risks, service providers, audits and AI systems on a shared specialist platform. | The caralegal AI assistant converts descriptions from the business department into structured drafts of processing activities. Draft risks and measures and the targeted improvement of individual documentation fields are also described.[200] [201]Specific AI functions documented Draft processing activities · Create risk and measure suggestions · Refine documentation fields AI evidence: [201]Documented by the vendor; expert and legal assessment and approval remain with humans. No product test. Source check: 2026-10-14 |
| ComplynzComplynz Compliance PlatformHeadquarters: India [1402]Complynz Labs Private Limited, Noida, Uttar Pradesh; CIN U62012UW2026PTC251272 according to the current terms of use.Complynz Labs Private Limited; ComplynZ Labs | Data protection and GRC software for Indian companies with assessments, policies, consents, evidence and supplier risks. The focus is on implementing Indian data protection requirements. | AI analyses policies and uploaded evidence against compliance requirements, creates context-specific questionnaires and suggests remediation measures. A Policy Manager supports the creation and maintenance of documents.[1401] [1402]Specific AI functions documented Identify policy gaps · Evaluate evidence against requirements · Adapt assessment questionnaires AI evidence: [1401]Commercial offering with demo, published subscriptions and free initial assessments. The scope per module and framework must be clarified separately. Source check: 2026-10-15 |
| Copilot WorksConformiPilotHeadquarters: France [1404]The legal notice names Copilot Works SAS, RCS Saint-Malo 979 951 555, with its registered office at 36 rue des Bas Sablons in Saint-Malo. The share capital field is still a placeholder; name, address and registration number are filled in.Copilot Works SAS; ConformiPilot | ConformiPilot supports smaller companies with self-assessments, a prioritised action plan and a repository for compliance evidence. Data protection sits alongside further regulatory topics in the shared dashboard. | From the company data entered, the AI creates drafts of records of processing, privacy notices and data protection impact assessments. These documents support structured data protection documentation; no independent regulatory approval is inferred.[1403] [1404] [1405]Specific AI functions documented Draft records of processing · Create privacy notices · Draft data protection impact assessments AI evidence: [1403]Seven-day trial access advertised; the website describes published feedback as beta tester testimonials. Check maturity and contract. Dynamic pages could only be read directly to a limited extent; the vendor search index returns product and legal texts. Source check: 2026-10-15 |
| DastraHeadquarters: France [1406]DASTRA SAS develops and operates the platform; headquarters Saint-Mandé, France; RCS Créteil 888 411 741. | Data protection and AI governance with records of processing activities, assessments, data subject requests and AI systems. | The Dastra AI assistant drafts descriptions of processing activities and security measures, supports DPIA questionnaires and formulates responses to data subject requests. Metadata can also be extracted from contracts.[202] [203]Specific AI functions documented Draft RoPA entries and security measures · Prepare answers for DPIA questionnaires · Formulate responses to data subject requests · Extract contract metadata AI evidence: [203]According to the documentation, available in all workspaces; can be switched off via support. Additional compliance analysis of processing activities and AI systems labelled as beta. No product test. Source check: 2026-10-14 |
| DataGrailDataGrail | Supports data inventory, data subject requests, consents and data protection risk assessments. Integrations provide the context for operational data protection processes. | DataGrail documents Vera as an AI assistant for data protection: it supports data protection impact assessments and risk assessments, suggests cookie rules and creates reports and suggested measures from data protection information.[1407] [1408]Specific AI functions documented Draft data protection assessments · Suggest cookie classification and rules · Prepare data protection risks and measures · Create data protection reports AI evidence: [1408]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| DataGuardHeadquarters: Germany [1409]The vendor names DataCo GmbH as the legal name and Munich, Germany as the company address. | Data protection and AI governance with ISMS, policies, controls and expert support. | DataGuard describes AI for drafting policies and for prioritising security and compliance risks on the basis of current data. The stated support for evidence and audit preparation must be clarified in the specific offer.[204] [205]Specific AI functions documented Draft policies · Prioritise risks by urgency AI evidence: [205]Documented by the vendor; check the scope of individual modules and AI tasks in the offer; no product test. Source check: 2026-10-14 |
| dcomplydcomply / Policy AnalysisHeadquarters: India [1411]The terms of use name Decipher Consultancy Services as developer and operator with an address in Gurugram, Haryana. Legal form not stated.Decipher Consultancy Services; dcomply.in | Compliance SaaS focusing on Indian data protection, policies, evidence and regulatory assessments. Further modules support security and corporate obligations. | AI analyses uploaded policies section by section against relevant requirements, flags missing or outdated provisions and suggests supplementary wording. Version history and re-analysis support ongoing maintenance.[1410] [1411]Specific AI functions documented Map policies to regulatory requirements · Identify missing clauses · Suggest remediation texts AI evidence: [1410]Commercial self-service with trial access and public product demo. Additional consulting and training offerings are offered separately. Source check: 2026-10-15 |
| GDPR RegisterGDPR RegisterHeadquarters: Estonia [1413]GDPR Register OÜ | GDPR Register links records of processing activities, data protection assessments, risks and supplier information in a shared system. Additional workflows record AI systems, their risk classification and associated measures. The focus is on traceable documentation and collaboration on data protection and requirements for the use of AI. | GDPR Register describes an AI assistant that suggests legal bases for processing activities, highlights data protection risks and possible measures and supports DPIA/LIA assessments.[1412] [1413] [1414] [1415] [1416]Specific AI functions documented Suggest legal bases for processing activities · Suggest data protection risks and countermeasures · Handle DPIA and LIA assessments with context-specific guidance AI evidence: [1414] [1415] [1416]According to the pricing page, AI assistant in Pro and Governance; vendor documentation, no product test. Source check: 2026-10-14 |
| GoTrustGoTrust Privacy Automation; Data Classification and ManagementHeadquarters: India [1420]The general terms and conditions and privacy policy name Tekhsters IT Services (OPC) Private Limited as operator. The terms and conditions name Indian law, Karnataka as place of jurisdiction and offices in India. The Netherlands and the UAE are also named as locations; listed once under the Indian operator.Tekhsters IT Services (OPC) Private Limited; GoTrust Privacy Automation | GoTrust links data protection processes such as records of processing activities, impact assessments, consents, data subject requests and supplier risks. Data classification and data maps provide information on sensitive data holdings and their processing for this purpose. | AI classifies personal, financial and health data in different sources. The classification feeds into data protection assessments, risk registers and rule-based measures; it thus serves a documented governance process and not merely technical data discovery.[1417] [1418] [1419] [1420]Specific AI functions documented Classify sensitive data for data protection processes · Build data maps · Prioritise data protection risks AI evidence: [1417] [1418]Demo and enterprise offering; SaaS and customer-side deployment are advertised. Check the classification model, data sources, necessary modules and handover to RoPA/DPIA processes in the specific offer. Source check: 2026-10-15 |
| heyDataHeadquarters: Germany [1422]heyData GmbH, Berlin; HRB 242016 B, Charlottenburg Local Court. | Data protection, information security and AI governance with central evidence, reusable processes and expert support. | heyData names AI support for data protection impact assessments, risk assessments and policy drafts within the compliance platform. Expert support from its own team of experts remains part of the offering.[206] [207] [1421]Specific AI functions documented Support with data protection impact assessments · Support with risk assessments · Policy drafts AI evidence: [1421]Documented by the vendor; no product test. Source check: 2026-10-14 |
| ITMLComplyBotHeadquarters: Greece [1424]On its company page, ITML names Athens, Greece. The product page attributes ComplyBot to ITML; a register check of the contracting company was not carried out.ITML; ComplyBot | Data protection software for processing activities, impact assessments, policies, incidents and evidence. ComplyBot is listed as a specific ITML product. | AI supports the recording and mapping of processing activities as well as versioned records. The product page describes suggestions for technical and organisational measures and suitable draft policies.[1423] [1424]Specific AI functions documented Record processing activities · Suggest data protection measures · Prepare draft policies AI evidence: [1423]According to the vendor, currently Early Access with free trial. Scope, contracting company and productive operation must be confirmed separately. Source check: 2026-10-15 |
| KetchKetch | Links data protection management with technical controls for personal data. Alongside consents and data subject rights, the offering includes governance for AI applications. | The Ketch Agent Network classifies data and supports data mapping, data protection assessments and ongoing gap analyses. It compares requirements and public commitments with system data and suggests attributable corrective steps.[1425] [1426]Specific AI functions documented Classify data fields by protection requirement and processing · Update data maps · Identify data protection gaps and contradictions · Derive corrective steps AI evidence: [1426]Agent function documented by the vendor with access to connected data and systems; use requires suitable integrations and governance. No product test. Source check: 2026-10-14 |
| LedgerAI (Quantyx)Compliance app / AI CopilotHeadquarters: South Africa [1428]The website names Quantyx, Johannesburg, South Africa; the App Store lists Vuyo Nkadimeng as developer. A separate legal company name is not documented.Quantyx; Vuyo Nkadimeng; SovereignSwitch | Specialist in compliance evidence, data residency and product obligations. Links obligations, controls, decisions and signed audit packages; focus on Apple devices with a supplementary web offering. | The AI copilot answers questions on obligations, controls and data sovereignty with source references. According to the app description, it uses Apple Foundation Models on the device; Apple Intelligence supports summaries of obligations and evidence where available.[1427] [1428] [1429]Specific AI functions documented Answer compliance questions with sources · Summarise obligations and evidence · Derive options for action from the compliance status AI evidence: [1427] [1429]Available in the Apple App Store, most recently version 3.0.1 of 6 October 2026 there. AI functions depend on supported devices and model availability; according to the terms and conditions, parts of the web offering are in active development. Source check: 2026-10-15 |
| LetoLeto; HariHeadquarters: France [1432]The legal notice names Ragnar Soft SAS, RCS Paris 898 548 607, with its registered office at 10 Rue de Penthièvre in Paris.Ragnar Soft SAS; Ragnar Soft; Leto.legal; Hari | Leto links data protection registers, impact assessments, security risks, subcontractors and compliance questionnaires. Documents and requirements already handled serve as a common basis for ongoing data protection work. | The assistant Hari suggests content for records of processing and supports impact assessments, data subject requests and incidents. It analyses existing compliance documentation to identify risks and answers security questionnaires on the basis of existing answers and documents.[1430] [1431] [1432]Specific AI functions documented Supplement records of processing · Support data protection impact assessments · Identify data protection and cyber risks · Answer security questionnaires · Import existing documents AI evidence: [1430] [1431]Existing software with demo and various modules. Hari is described in several products; the specific combination depends on the offer. Source check: 2026-10-15 |
| LightbeamLightbeam Privacy OperationsHeadquarters: USA [1436]Privacy policy of 18 August 2026: Lightbeam Inc., San Jose, California. Older terms and conditions: LightBeam.ai, Inc., Palo Alto. The differing spelling of the company name is disclosed; both name the USA.LightBeam.ai; Lightbeam Inc.; LightBeam.ai, Inc.; Lightbeam Privacy Ops | Lightbeam links the identification of personal data with operational data protection processes. The platform assigns data holdings to data subjects and supports access and deletion requests, records of processing activities, consents and retention rules. Data protection teams can create reports and evidence from this and trace measures. The register entry focuses on these compliance functions within the broader data security offering. | Lightbeam describes context-aware AI with NLP and RAG for identifying and classifying personal information. The results are assigned to individuals and used for data subject requests and records of processing activities.[1433] [1434] [1435] [1436] [1437]Specific AI functions documented Classify personal data for data protection registers · Find identity-related data for data subject requests AI evidence: [1433] [1434]Described as existing platform functions; data sources, approvals and licence scope depend on the implementation. No product test. Source check: 2026-10-14 |
| MineMineOSMineOS; SayMine | Links data protection processes with the recording and assessment of AI systems. Records of processing activities, data protection impact assessments and transfer assessments use shared system and data context. | MineOS supports data protection assessments through AI suggestions on data types, processing purposes and processing activities. An AI agent uses these to create drafts of the record of processing activities.[1438] [1439]Specific AI functions documented Suggest fields for data protection assessments · Prepare RoPA reports AI evidence: [1439]Documented by the vendor; not tested in practice. Source check: 2026-10-14 |
| OneTrustTo the detailed profile | Data protection, data use, AI governance, technology risks and third parties in a common model. | OneTrust uses AI to identify and classify sensitive data and to reuse existing answers in assessments. Specific AI functions in data protection and compliance workflows are thus documented.[208]Specific AI functions documented Data discovery · Data classification · Assessment answers AI evidence: [208]The functions are described in the platform presentation. Required products, connectors and licence packages must be checked separately; general activation in every OneTrust installation is not documented. Source check: 2026-10-14 |
| Osano | Data protection programmes with consents, data subject rights, data mapping and assessments. | Osano documents AI answers to data protection questions with regulatory sources, cookie classification, assignment of data subject requests and summaries of compliance reviews.[209] [210]Specific AI functions documented Answer data protection questions with sources · Classify cookies · Assign data subject requests · Summarise compliance reviews AI evidence: [210]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| preecopreeco compliance softwareHeadquarters: Germany [1442] | preeco develops a modular software family for data protection, information security, whistleblower protection and sustainability. The multi-tenant applications support collaboration and documentation across several organisations. The provider thus addresses both internal compliance officers and external data protection officers and other supporting specialists. | preeco suggests content for sections of processing activities and supports threshold analyses and the assessment of whether a data protection impact assessment is required. Suggestions are reviewed and approved by experts.[1440] [1441] [1442] [1443]Specific AI functions documented Draft sections of processing activities · Supplement threshold analyses · Suggest whether a DPIA is required, for review AI evidence: [1443]Optional, deactivated by default; activation per team with its own API key and a chosen compatible model provider; no product test. Source check: 2026-10-14 |
| Privacy ToolsPrivacy Tools; PrIAHeadquarters: Brazil [1446]The privacy notice names Privacy Tools Consultoria em Tecnologia Ltda in Porto Alegre, Brazil, CNPJ 33.468.050/0001-57.Privacy Tools Consultoria em Tecnologia Ltda; PrIA | Privacy Tools links data protection management, records of processing activities, data subject requests, risks and audit processes. The modular platform supplements these workflows with a generative assistant called PrIA. | PrIA generates suggestions for processing activities from free text or existing fields, drafts responses to data subject requests and analyses risks with suggested actions. The vendor describes the use of Amazon Bedrock for this.[1444] [1445] [1446]Specific AI functions documented Draft processing activities · Prepare responses to data subject requests · Analyse data protection risks AI evidence: [1444]Demo and modular contract offerings. PrIA covers selected modules; check the licence scope, supported languages and specific processing by the AI service. Source check: 2026-10-15 |
| PrivacyEnginePrivacyEngineHeadquarters: Ireland [1449]In its Privacy Statement of 9 March 2026, PrivacyEngine explicitly names its main establishment and registration in Ireland (529183), registered office 77 Sir John Rogerson’s Quay, Dublin 2. The current website additionally uses the name Sytorus Ltd. Geography checked on 15 October 2026; no inference about hosting or owners from the registered office. | Organises records of processing activities, data protection impact assessments, data subject requests and data breaches. Risk assessments, reports and learning functions complement the documentation. | PrivacyEngine's PrivacyPulse uses AI to summarise data protection and regulatory news and for drafts for passing on relevant developments internally.[1447] [1448] [1449] [1450]Specific AI functions documented Summarise data protection and regulatory news · Draft information emails on relevant developments AI evidence: [1448]Documented by the vendor in the PrivacyPulse offering; these functions are not transferred to all PrivacyEngine modules. No product test. Source check: 2026-10-14 |
| Privado AIPrivado AI | Links data protection assessments with actual data flows in software and enterprise systems. Technical specifications and documents feed into assessments, records of processing activities and data maps. | Privado AI analyses documents, contracts and policies to pre-fill data protection and supplier assessments, capture data flows and flag risks. Suggestions are prepared with justifications and evidence for subsequent review.[1451] [1452]Specific AI functions documented Pre-filling of data protection and supplier assessments · Preparation of data flow maps · Flagging of data protection risks AI evidence: [1451]Documented by the vendor; no product test. Source check: 2026-10-14 |
| PriverionPriverion PlatformHeadquarters: Switzerland [1454]The legal notice names Priverion Solutions AG with its registered office in Baar, Switzerland.Priverion Solutions AG; Priverion MCP | Priverion supports data protection and information security for corporate groups. Records of processing activities, impact assessments, supplier assessments and tasks can be managed across several legal entities. | The platform describes AI-assisted preliminary risk assessments with scenario and control suggestions as well as questions to the organisation's own compliance data. Via MCP, connected AI supports document review, identifies gaps and prepares tasks for owners.[1453] [1454]Specific AI functions documented Suggest risk scenarios · Suggest controls · Query compliance data · Identify documentation gaps AI evidence: [1453]SaaS offering with demo and migration test. According to the licence FAQ, AI usage is billed via separate credits; clarify MCP connection and chosen model environment in the offer. Source check: 2026-10-15 |
| PrivIQPrivIQ | Configurable data protection platform for internal teams and consulting organisations. Data inventories, records of processing activities, requests, incidents, processors and policies are managed together. | From a description, PrivIQ uses AI to generate drafts of controls, policies, assessment questions, threat analyses and remediation measures. The results remain editable and are reviewed and approved by owners.[1455] [1456] [1457]Specific AI functions documented Draft controls and policies · Generate assessment questions · Derive threats from descriptions · Suggest remediation measures AI evidence: [1456] [1457]AI-enabled user account required; human review before activation of the assessment templates. No product test. Source check: 2026-10-14 |
| ProlianceProliance 360Headquarters: Germany [1459] | Proliance 360 is aimed at data protection officers and medium-sized companies in the DACH region. The software links records of processing activities, data processing agreements, technical and organisational measures and impact assessments with versioned documentation and tasks. External data protection officers can be involved as a supplementary service. | Proliance 360 supports filling in and assessing the record of processing activities with AI. The assistance flags possible gaps and risks and supports the preparation of suitable measures.[1458] [1459] [1460]Specific AI functions documented Prepare RoPA entries · Identify gaps and risks in processing activities · Prepare data protection measures AI evidence: [1460]Documented by the vendor; not tested in practice. Source check: 2026-10-14 |
| RedactoRedacto Privacy Management; PIA AutomationHeadquarters: India [1461]The product page names VertexTech Labs Private Limited, Bengaluru, India, CIN U62099KA2025PTC197080. Distinct from similarly named redaction and document tools.VertexTech Labs Private Limited; VertexTech Labs Pvt Ltd | Redacto supports privacy impact assessments with questionnaires, central documentation and responsibilities. Data flows, risks and measures are captured in a common review workflow. | The product page names AI-assisted risk scoring for assessing data protection risks in PIA questionnaires. The assessment feeds into documented findings and action plans.[1461] [1462]Specific AI functions documented Assess data protection risks in PIA procedures AI evidence: [1461]Demo and free entry level are offered. Check the assessment methodology, AI scope and supported regulatory content on the basis of a case of your own before use. Source check: 2026-10-15 |
| Relyance AIPrivacy AutomationHeadquarters: USA [1466]The privacy policy names Relyance Inc. with a contact address in San Mateo, California. No statement on hosting or ownership structure.Relyance Inc.; Relyance Platform; Relyance Privacy Automation | Relyance AI links data inventory, record of processing activities, data protection assessments, data subject requests and consent management. The platform uses information from connected applications, data holdings and source code to keep track of data flows and processing activities. Assessments and evidence can build on this; owners review suggested information and approvals. Changes to data flows feed into further data protection work. | Current release notes document AI-generated explanations of identified suppliers in data flows, operational insights into data findings and the AI-assisted review of violations. The vendor's own use of AI in data protection and data risk work is thus documented.[1463] [1464] [1465] [1466] [1467]Specific AI functions documented Explain supplier findings in data flows · Generate insights into data risk findings · Review violations with AI assistance AI evidence: [1465]Described as existing functions in release notes from September 2026. Other functions for questionnaire generation and in the Policy Center remain separately in beta for selected customers. No product test. Source check: 2026-10-14 |
| ResponsumResponsumHeadquarters: Belgium [1470]RESPONSUM BV; Excelsiorlaan 43/3, Zaventem, Belgium; company number 0634.877.668. The privacy information confirms the headquarters. Geography checked on 15 October 2026; no inference about hosting or owners from the registered office. | Supports data protection obligations across several jurisdictions. Documentation and assessments are linked with information on systems, service providers and responsibilities. | Responsum documents AI drafts for processing activities, suppliers and assessments. The assistant finds missing or contradictory information in linked data protection data and suggests reviewable changes.[1468] [1469] [1470] [1471]Specific AI functions documented Draft processing activities and assessments · Identify incomplete data protection records · Suggest corrections for approval AI evidence: [1469]Documented by the vendor; permissions and human approval govern access and changes. Optional connection of custom models via MCP. No product test. Source check: 2026-10-14 |
| ROPAiROPAi Record / GovernHeadquarters: United Kingdom [1473]The privacy page explicitly describes ROPAi Ltd as a British software company and as controller in the United Kingdom.ROPAi Ltd | Data protection register that links processing activities with DPIAs, balancing-of-interests assessments and transfer assessments. | An AI-supported interview assists in capturing the fields of a record entry. This capture serves as the starting point for downstream data protection reviews; their automatic signals are not generally counted as AI.[1472] [1473]Specific AI functions documented Capture processing activities via AI interview AI evidence: [1472]The current homepage mentions Early Access and a waiting list. Prices and app access are visible; this does not imply general production availability of all functions. Source check: 2026-10-15 |
| Schindler IT SolutionseasyGDPRHeadquarters: Austria [1476]easyGDPR | easyGDPR guides companies step by step through capturing their data protection organisation and producing the associated documents. The offering comprises an initial inventory, documentation aids and the management of processors and agreements. The vendor is Schindler IT Solutions, headquartered in Austria. | easyGDPR describes guided data protection documentation and the management of processing activities. A specific AI work step is not documented in the product presentation checked or in the targeted vendor search.[1474] [1475] [1476] [1477]Not specifically documented in the source check Automatically generated documents and guided forms not counted as AI functions without AI evidence. Sources checked: [1474] [1477]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| Securiti AI (Veeam) | Data security, privacy operations and AI governance on a shared data graph. | Securiti describes AI for classifying sensitive and confidential data and for detecting duplicate and similar files for data controls and data minimisation.[211] [212] [1478] [1479]Specific AI functions documented Classify sensitive and confidential data with AI · Detect duplicate and similar files for data minimisation · Map personal data across data estates for data protection processes AI evidence: [1478] [1479]Product functions documented by the vendor; scope depends on the data and governance modules deployed. No product test. Source check: 2026-10-14 |
| TranscendTranscend | Implements data protection requirements across connected systems. Consents and preferences are linked with access and deletion requests and a Privacy Center. | Transcend documents LLM-supported classification of data based on metadata and, optionally, content samples. For unstructured files, the vendor also describes AI-supported detection of personal entities in context.[1480] [1481] [1482]Specific AI functions documented Classification of structured data · Detection of personal data in files · Metadata-based data classification AI evidence: [1482]Method-dependent prerequisites: local content analysis requires suitable Sombra/classifier versions and GPU resources; the hosted alternative works with metadata. No product test. Source check: 2026-10-14 |
| Trilateral ResearchTrilateral GRC SuiteHeadquarters: United Kingdom [1484]Legal notice names the British Trilateral Research Ltd, Company No. 08698690, London, and a wholly owned Irish company (616396). One shared provider entry; no additional EU headquarters derived.Trilateral Research Ltd; Trilateral Research LTD; Trilateral GRC Suite | The GRC Suite brings together data protection assessments, records of processing activities, risks, policies and incidents. It also includes AI governance functions; shared responsibilities and audit trails support processing by multiple teams. | For data protection impact assessments, AI generates draft answers within structured workflows. The software also supports the creation and maintenance of records of processing activities with AI. These data protection functions justify inclusion independently of the additional AI governance module.[1483] [1484]Specific AI functions documented Support data protection impact assessments · Create draft answers · Maintain records of processing activities AI evidence: [1483]Proprietary software with demo and GRC Suite sign-in. Confirm module and AI scope as well as required subject-matter reviews in the offer. Source check: 2026-10-15 |
| TrustArc | Privacy programmes, data inventories, consents, data subject rights and assessments. | Arc Intelligence answers data protection questions, summarises legal and specialist content and supports the creation and editing of records and assessments. Write actions must be approved by a human before execution.[213] [214]Specific AI functions documented Answer data protection questions using specialist sources · Compare and summarise legal developments · Prepare records and assessments · Pre-fill evidence and process details AI evidence: [214]Documented by the vendor; write actions with human approval. MCP connections inherit existing permissions. No product test. Source check: 2026-10-14 |
| UnnaDataUnnaData Privacy ManagementHeadquarters: Estonia [1486]The pricing page explicitly names UnnaData OÜ as the Estonian operating entity. The terms of use checked do not give a full registered address.UnnaData OÜ | Data protection and compliance workspace for documents, impact assessments, evidence and collaboration. | The terms of use describe AI-supported analysis of uploaded documents, document generation and context-based compliance answers with Claude. Outputs must be reviewed by subject-matter experts.[1485] [1486]Specific AI functions documented Analyse data protection documents · Create documentation drafts AI evidence: [1485]Free and paid access tiers are offered. Product positioning and pricing plans differ between data protection and procedural support; confirm required modules and limits in the offer. Source check: 2026-10-15 |
| ValdraValdraHeadquarters: Canada [1488]Terms of use name Canuckt Synergy Solutions Inc. as operator and an address in Bedford, Nova Scotia, Canada. Valdra and other suite functions are not counted as multiple vendors.Canuckt Synergy Solutions Inc.; Canuckt; Valdra AI | Valdra connects data protection compliance with risks, data flows, incidents, suppliers and control evidence. The focus is on Canadian organisations; in addition, the platform covers AI governance and information security programmes. | The features page describes Claude-supported drafts of data protection impact assessments from project descriptions as well as AI-generated data protection documents. For incidents, AI supports triage and guides users through risk questions. AI support therefore exists outside the additional AI governance module.[1487] [1488]Specific AI functions documented Draft data protection impact assessments · Prepare privacy policies and contract documents · Handle data protection incidents and risk questions AI evidence: [1487]Free entry tier and paid plans are offered. The scope of individual AI functions must be checked per plan; no product test of our own. Source check: 2026-10-15 |
| WillawWillaw; CopilotHeadquarters: France [1490]Legal notice names WILLAW SAS, SIREN 995 029 832, RCS Paris and registered office at 30 Boulevard de Sébastopol in Paris.WILLAW SAS; Willaw Copilot | Willaw offers a data protection and compliance platform with records of processing, impact assessments, data subject rights, incident and processor management. Consulting services can be booked in addition to the software. | The Copilot creates register entries and other compliance documents as well as draft answers for security and data protection questionnaires. The documentation can be derived from the record of processing. According to the vendor, Mistral AI or Google Gemini are available as a choice for the AI.[1489] [1490]Specific AI functions documented Draft records of processing · Create compliance documents · Answer security questionnaires · Update data protection documentation AI evidence: [1489]Monthly platform subscriptions and demo; set-up and ongoing expert support are optional services. Specify the AI and hosting variant contractually. Source check: 2026-10-15 |
| WitikWitik; Agentic ComplianceHeadquarters: France [1492]Legal notice names WITIK SAS, RCS Paris 844 516 245, with registered office at 64–66 Rue des Archives, Paris.WITIK SAS; Witik Agentic Compliance | Witik combines data protection compliance, anti-corruption, third parties and risk management. Records of processing, data protection impact assessments, questionnaires and evidence are maintained in a shared SaaS environment. | AI analyses compliance gaps and supports the set-up of workflows. It drafts audit reports, data protection impact assessments and management summaries. During import, agents analyse existing spreadsheets and PDF registers and structure their contents for Witik.[1491] [1492]Specific AI functions documented Analyse compliance gaps · Draft audit reports · Draft data protection impact assessments · Structure existing registers AI evidence: [1491]Existing SaaS with demo and published product functions. Confirm specific agents and contractual scope before procurement. Source check: 2026-10-15 |
AI governance & model risk
20 entries
| Provider / product | Documented focus | AI functions and classification |
|---|---|---|
| ActifyAI Act complianceHeadquarters: Italy [1494]BD TR S.R.L., Via Santa Tecla 4, Milan; P.IVA 14777710964.BD TR S.R.L.; Actify AI Act | Specialist software for AI inventory, compliance gaps, training records and documentation with an audit trail. Focus on European AI requirements and Italian companies. | AI supports the analysis of open compliance gaps. Amazon Nova Pro via AWS Bedrock is explicitly named for generating reports and documents; results are intended for subject-matter review.[1493] [1494]Specific AI functions documented Analyse compliance gaps · Draft compliance documents · Create reports AI evidence: [1493] [1494]Paid SaaS plans and a free initial assessment publicly described. Official content was available via the search index; direct retrievals partly returned errors. Access and current functional scope need to be confirmed. Source check: 2026-10-15 |
| ai.resAI risk and governance platformHeadquarters: Italy [1496]AI.RES S.R.L., Viale Gramsci 16, Naples; P.IVA 10605591212.AI.RES S.R.L.; ai-res | Specialist in inventory, risk assessment and monitoring of AI systems. Combines metrics, tests, remediation measures, policies and exportable audit evidence. | AI suggests risks suited to the respective system and provides a rationale and confidence level. Business users can adopt suggestions and then assess likelihood and severity.[1495] [1496]Specific AI functions documented Suggest relevant AI system risks · Justify risk suggestions AI evidence: [1495]Product offered with demo request; AI risk suggestions described on the features page. Licence and deployment scope to be requested. Source check: 2026-10-15 |
| AsenionAI Control SystemFairly AI; anch.AI | Combines AI assessment with pre-release testing and operational controls. Requirements are mapped to controls and evidence for models, copilots and agents. | Asenion describes AI-supported assistance for translating natural-language compliance requirements into structured controls. ControlGen contextualises the controls for the organisation and links them to the underlying clauses; the responsible subject-matter owners approve them before use.[1497] [1498] [1499] [1500]Specific AI functions documented Translate compliance requirements into draft controls · Adapt controls to organisational context and risk objectives AI evidence: [1499] [1500]Documented by the vendor in the AI Compliance-in-a-Box and ControlGen offering; no product test. Source check: 2026-10-14 |
| ConformamiAI Act compliance for Italian SMEsHeadquarters: Italy [1502]Digital Automations S.r.l., Venezia Mestre; P.IVA 04592170270. Conformami is described as its brand.Digital Automations S.r.l. | Specialist software for AI inventory, risk classification, policies, training records and compliance documentation. Includes approvals and exportable audit logs. | Generative AI creates context-based drafts of policies, information notices and data protection impact assessments. RAG draws on legal sources and adds article references; users revise and approve the drafts.[1501] [1502]Specific AI functions documented Draft policies · Create information notices · Prepare data protection impact assessments AI evidence: [1501]Commercial SaaS plans with a 30-day trial period. AI action quotas and mandatory approval workflows depend on the plan; broader standards coverage and parts of the FRIA function are on the roadmap. Source check: 2026-10-15 |
| Credo AICredo AI Governance Platform | Captures AI applications, models, agents and external AI products. Risks, controls, policies and requirements provide the context for governance decisions and their evidence. | Credo AI documents GAIA agents that compile evidence, support risk assessments and generate governance plans. This documents the vendor's own use of AI in governance work steps, beyond the mere management of AI systems.[1503] [1504]Specific AI functions documented Compile governance evidence · Support risk assessments · Create governance plans AI evidence: [1504]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| DaikiDaiki AI Governance PlatformHeadquarters: Austria [1506]DAIKI GmbH | Daiki offers a central register for AI applications and systems as well as workflows for risks, requirements and documentation. The platform supports building an AI management system and collaboration among the specialist departments involved. Additional testing tools address bias and security aspects of language models. | Daiki documents an AI assistant for classifying AI systems into risk classes as well as for answering compliance questions and creating MDR documents. This documents AI support for compliance work in addition to governance of AI.[1505] [1506] [1507] [1508]Specific AI functions documented Support AI risk classification · Answer compliance questions on ISO 13485 · Draft MDR documentation AI evidence: [1507] [1508]Documented by the vendor; ISO 13485 assistant described in the eQMS product, check the respective module and licence scope; no product test. Source check: 2026-10-14 |
| DeeployDeeployHeadquarters: Netherlands [1510] | Deeploy connects the inventory of AI systems with risk classifications, controls, approvals and ongoing monitoring. The platform collects evidence and supports documentation along the life cycle. Technical functions for model monitoring and guardrails complement organisational governance and the mapping to frameworks. | Deeploy uses language models and document retrieval to extract information from documents for AI vendor assessments and to prepare draft answers for assessments.[1509] [1510] [1511] [1512]Specific AI functions documented Extract relevant information for AI vendor assessments from documents · Generate suggested answers for assessment templates AI evidence: [1511] [1512]Technical documentation version 1.60: AI support for the AI vendor assessment; activation is required for private cloud operation. No product test. Source check: 2026-10-14 |
| EnzaiEnzaiHeadquarters: United Kingdom [1515]Enzai Technologies Limited; active entry in the official Companies House, registered office Belfast, Northern Ireland. Vendor privacy policy at https://www.enz.ai/policies/privacy-policy confirms the same legal entity. | Brings together the capture, assessment and approval of internal and external AI applications. Requirements and evidence support collaboration between business units, legal and technology. | Enzai documents workflows for the governance of AI systems, inventories and automated assessments. However, no sufficiently specific AI work step of its own in the GRC process was evidenced in the sources checked.[1513] [1514]Not specifically documented in the source check Vendor pages and targeted search for proprietary AI support checked. External AI products in the sample inventory, such as Perplexity, are not Enzai AI functions. Sources checked: [1513] [1514]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| Fiddler AIAI Observability and Security | Combines the monitoring of models and agents with governance controls. Behaviour, actions and performance metrics provide evidence for risk and compliance work. | Fiddler uses its own Centor AI models to evaluate model and agent outputs against security, data protection and accuracy requirements. This documents AI-supported control checks, not merely an inventory for the governance of AI.[1516] [1517] [1518]Specific AI functions documented Detect data protection violations in inputs and outputs · Check outputs against security requirements · Assess hallucination and accuracy risks AI evidence: [1517] [1518] [1516]Evaluation models and guardrails documented by the vendor; configure thresholds and integration. Limited to technical AI risk controls, not a general GRC copilot. No product test. Source check: 2026-10-14 |
| Holistic AIHolistic AI Governance Platform | Combines AI inventory with risk analyses, tests and governance workflows. Security and bias risks as well as controls are documented along the AI life cycle. | Holistic AI describes Guardian Agents as AI for overseeing other AI: they assess ongoing behaviour against policies, detect risks and can intervene or escalate when limits are breached. This specifically names an AI-supported governance work step.[1519] [1520] [1521] [1522]Specific AI functions documented Assess agent behaviour against policies · Detect runtime risks and classify them in context · Block or escalate policy violations AI evidence: [1520] [1521]The vendor explicitly describes Guardian Agents as a function in production use; permissions and scope of intervention depend on configuration. No product test. Not all EndLayer functions are AI: sensor and policy functions work partly deterministically. Source check: 2026-10-14 |
| Lumenova AILumenova AI | Combines AI risk assessments with monitoring, policy controls and audit trails. Guardrails and the tracking of actions complement the control of generative and agentic applications. | Lumenova documents LLM and agent judges for evaluating AI agents before release and in operation. AI-supported evaluations are compared with human reviewers' judgements and examined on the basis of execution traces.[1523] [1524]Specific AI functions documented Validate model and agent behaviour with AI support · Evaluate production agent execution traces AI evidence: [1524]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| ModelOpEnterprise AI Command Center | Central inventory and control system for AI applications and models. Life-cycle processes and governance include classic models, generative AI, agents and external offerings. | ModelOp documents inventory, control workflows, model cards and monitoring of AI systems. A proprietary AI assistant for these governance tasks is not specifically documented in the sources checked.[1525] [1526] [1527]Not specifically documented in the source check AI as the subject of governance, automated documentation and the Governance Score are not evidence of the use of AI to perform tasks. Targeted search for a proprietary assistant without clear evidence. Sources checked: [1526] [1527]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| MonitaurMonitaur | Organises governance and evidence for statistical models, generative AI and agents. One industry focus is on insurance models for underwriting, claims handling and risk management. | For selected FlightSim tests, Monitaur describes the use of language models as reviewers; results from several models are combined in order to limit individual evaluation bias.[1528] [1529] [1530]Specific AI functions documented Evaluate selected AI assurance tests with language models · Aggregate evaluations from several language models for test results AI evidence: [1530]Documented by the vendor for selected FlightSim tests; statistical and simulation-based test procedures are also described. No product test. Source check: 2026-10-14 |
| QuantPiQuantPiHeadquarters: Germany [1533]QuantPi GmbH, Saarbrücken, Germany; HRB 106305. | Specialises in the technical validation of AI systems across their life cycle. Quality and risk checks provide evidence for approvals and ongoing controls. | QuantPi uses AI tools such as CLIP and LLMs for missing annotations in test data and AI evaluators for checking model outputs. The platform describes calibration of the evaluators against reference data and taking their error rates into account.[1531] [1532]Specific AI functions documented AI-supported annotation of test data · Calibrated AI evaluation of model outputs AI evidence: [1532]Documented by the vendor; no product test. Source check: 2026-10-14 |
| SaidotSaidotHeadquarters: Finland [1538]Saidot Ltd., Helsinki, Finland; provider of the Saidot platform and contractual data processor according to the privacy policy. | Combines an AI inventory with a knowledge base on risks, controls, policies and external AI products. Risks, measures and responsibilities can be documented across the life cycle. | Saidot's AI assistant fills in EU AI Act classification questions from system data with labelled suggestions that can be overwritten. Via MCP, connected assistants can additionally prepare risk assessments, treatment plans and governance reports.[1534] [1535] [1536] [1537]Specific AI functions documented Pre-fill classification questions from system data · Prepare risk analyses and treatment plans · Create governance and transparency reports AI evidence: [1536] [1537]Classification assistant documented by the vendor; MCP workflow skills as a functional preview on request, with customer-specific adaptation and human review. No product test. Source check: 2026-10-14 |
| TrusentaTRUSENTA.IO / Smart VoiceHeadquarters: Australia [1542]Trusenta Pty Ltd according to the contract terms; Australian business orientation and Queensland jurisdiction. Privacy policy confirms the same legal entity.Trusenta Pty Ltd; TRUSENTA.IO | Modular platform for AI inventory, risk assessments, control evidence, compliance gaps and governance assessments; consulting services are also offered. | The Smart Voice module conducts structured stakeholder interviews with AI voice agents. It transcribes conversations, identifies speakers and condenses statements into topics, decisions and actions for governance assessments.[1539] [1540] [1541] [1542]Specific AI functions documented Conduct governance interviews in a structured way · Transcribe assessment conversations · Consolidate findings and actions from interviews AI evidence: [1540]Offered as a named module of the TRUSENTA.IO platform with a demo. Contractual scope and combination with consulting are to be clarified individually. Source check: 2026-10-15 |
| UNAITUNAIT Compliance / RisikotoolHeadquarters: Germany [1544]UNAIT GmbH, Berlin, Amtsgericht Charlottenburg HRB 290532 B.UNAIT GmbH; UNAIT Risikotool; UNAIT Compliance | Platform for AI inventory, risk classification, approvals and documentation under the EU AI Act. Assessments and associated evidence can be exported as an audit report. | The AI assistant explains questions in the assessment questionnaire and gives guidance on classification. The actual risk classification explicitly follows fixed decision logic; it is not counted as an AI decision.[1543] [1544]Specific AI functions documented Explain assessment questions · Support the classification of AI applications AI evidence: [1543]AI assistant described as a new product function; full version can be tested on request. GWDG AI models are named as the basis. No independent legal assessment by the assistant. Source check: 2026-10-15 |
| ValidMindValidMind | Combines model testing, independent validation, documentation and audit trails. The offering is aimed particularly at regulated companies such as banks and insurers, as well as generative and agentic AI. | ValidMind uses language models to create test descriptions and summaries for model validation documentation. The drafts support traceable model risk and audit documentation.[1545]Specific AI functions documented Draft descriptions of model validation tests · Summarise validation results for audit documentation AI evidence: [1545]Documented by the vendor; not tested in practice. Source check: 2026-10-14 |
| VerifyWiseVerifyWise | Brings together AI inventory, supplier oversight, risk registers, frameworks and policies. Self-hosting and a cloud offering support structured AI governance. | The VerifyWise AI Advisor queries governance data on risks, suppliers, incidents and policies in natural language and generates summaries and analyses. Aids for policy drafts and gap analyses are also documented.[1546] [1547] [1548]Specific AI functions documented Analyse governance data via dialogue · Create risk reports and summaries · Support policy drafts and gap analyses AI evidence: [1548]Documented by the vendor; own API key for Anthropic, OpenAI or OpenRouter and configuration in the organisation account required. No product test. Source check: 2026-10-14 |
| VidimusVidimus AI Compliance TestingHeadquarters: France [1551]VIDIMUS SASU, RCS Nanterre, SIREN 106772619; Colombes, France.VIDIMUS SASU | Testing platform for AI agents with regulatory tests, traceable results and human approval. | An LLM evaluates responses of tested AI systems against defined requirements and cites relevant passages. Critical errors are checked with a second model; borderline cases are decided by humans.[1549] [1550] [1551]Specific AI functions documented Check AI responses for compliance · Create test evidence · Submit critical test results for review AI evidence: [1549] [1550]Paid two-week pilot and annual offering; not an independent certification body. Source check: 2026-10-15 |
Third-party & supply chain risk
46 entries
| Provider / product | Documented focus | AI functions and classification |
|---|---|---|
| Abiton VenturesMaditon / NormiqHeadquarters: Sweden [1553]Abiton Ventures AB, Gothenburg, Sweden, No. 559576-3797 according to the Maditon terms and conditions. Normiq also names Abiton Ventures AB.Abiton Ventures AB; Maditon; Normiq | Compliance assistant for smaller organisations with supplier documents, questionnaires and EU AI Act documentation. Maditon and Normiq are combined under the same provider entity. | Maditon has AI analyse published supplier documents and prepare evidenced findings. The assistant drafts answers to security and data protection questionnaires from the organisation's own data. Humans review the drafts.[1552] [1553] [1554]Specific AI functions documented Analyse supplier documents · Pre-fill security questionnaires · Draft compliance documentation AI evidence: [1552] [1553]Maditon offers sign-up and pricing plans; the EU AI Act module is described as live, GDPR/NIS2 to follow. Normiq is also attributed to Abiton; its current separate availability was not confirmed. Source check: 2026-10-15 |
| Aravo Intelligence First PlatformTo the detailed profile | Third-party life cycle, due diligence and multiple risk domains with shared supplier data. | Aravo AI answers questions about third-party data, pre-fills assessments with source references and recommends corrective actions. Configurable agents also support risk-based processing within defined policies.[215] [216]Specific AI functions documented Query third-party data in natural language · Pre-fill assessments with source references · Recommend corrective actions AI evidence: [216]Documented by the vendor; agents and preferred language models configurable in AI Studio; no product test. Source check: 2026-10-14 |
| ArvexLabArvexLab AI TPRMHeadquarters: United Kingdom [1556]Current legal notice: ArvexLab Ltd, London, United Kingdom, No. 17070015. It explicitly states a registered office outside the EU/EEA.ArvexLab Ltd | Supplier risk software for security documents, evidence, questionnaires and risk measures. | AI extracts controls and evidence from audit reports, penetration tests and contracts with page references and confidence information. It pre-fills questionnaires and suggests further review or remediation work; approval remains with humans.[1555] [1556] [1557]Specific AI functions documented Analyse supplier documents · Pre-fill questionnaires · Suggest risk measures AI evidence: [1555]Product offered with demo and sign-up. No practical test of our own; check extraction quality and permitted actions on a specific document. Source check: 2026-10-15 |
| AsiaVerifyAsiaVerify KYB / UBO / AMLHeadquarters: Singapore [1560]UNSD Information Technology Pte Ltd, incorporated in Singapore since April 2019; current privacy page confirms the same operating company.UNSD Information Technology Pte Ltd; AsiaVerify | Company verification and ongoing monitoring of Asian business partners with register information, beneficial owners, sanctions and adverse media. Results support documented due diligence. | AI-supported matching reduces irrelevant hits in compliance checks and supports focusing on risk-relevant corporate relationships.[1558] [1559] [1560]Specific AI functions documented Match hits in company checks · Narrow down risk signals for due diligence AI evidence: [1558]Commercial web portal and API offerings with demo and subscription plans. AI matching documented; model architecture and specific licence delineation not publicly checked. Source check: 2026-10-15 |
| Atlas SystemsComplyScoreHeadquarters: USA [1562]ComplyScore; ComplyScore TPRM | ComplyScore by Atlas Systems supports the assessment and ongoing management of supplier risks. The software combines questionnaires with security evidence, audit findings and remediation measures. Analysts can check, edit and approve suggested findings. Approved measures are tracked with owners and deadlines; evidence references and approvals remain traceably documented. | AI Control Review analyses supplier evidence such as SOC 2 reports, ISO certificates and policies, matches it against questionnaire answers and drafts findings and remediation measures. The documented workflow provides for review and approval by analysts.[1561] [1562]Specific AI functions documented Evidence matching · Drafting of audit findings · Suggested measures AI evidence: [1561]Documented by the vendor; with human review and approval; not tested in practice. Source check: 2026-10-14 |
| AuditiveAuditive Risk AutomationHeadquarters: USA [1565]Official indexed Customer Agreement explicitly names Auditive, Inc. as a Delaware corporation. Direct retrieval of the PDF was unsuccessful; the contract text was readable in the search index.Auditive, Inc.; Supplier Questionnaire Copilot; auditive.ai | Auditive supports the onboarding, assessment and ongoing monitoring of third parties. The platform bundles supplier data, security evidence and questionnaires for risk and procurement teams. Reusable trust profiles provide information for reviews. Companies can align assessments with their requirements and bring together evidence for internal approvals, collaboration with partners and later audits. | The Supplier Questionnaire Copilot uses AI to create answers to security questionnaires from existing controls and evidence and aligns them with the respective frameworks.[1563] [1564] [1565]Specific AI functions documented Answer security questionnaires from controls and evidence AI evidence: [1564]Documented by the vendor; agree the pricing plan and module scope offered. No product test. Source check: 2026-10-14 |
| Bitsight Vendor Risk Management | Supplier inventory, assessment and ongoing monitoring combine questionnaires and documents with external cyber risk data. | Bitsight Framework Intelligence uses AI to extract controls and evidence from supplier documents, map them to security frameworks and prepare structured gap analyses.[217] [218] [1566]Specific AI functions documented Extract control evidence from SOC reports and questionnaires · Map evidence and controls to security frameworks · Create structured gap analyses for audit and third-party review AI evidence: [1566] [218]Function documented by the vendor within Bitsight Continuous Monitoring; supported frameworks are listed on the product page. No product test. Source check: 2026-10-14 |
| Black KiteBlack KiteFormer name: NormShield | Analyses externally detectable cyber risks of suppliers and other dependencies. Ongoing monitoring and risk assessments support the prioritisation of reviews and measures. | With Assess AI, Black Kite describes the analysis of supplier documents, mapping to control frameworks and validation of supplier responses for third-party risk management.[1567] [1568]Specific AI functions documented Analysis of supplier documents · Mapping to control frameworks · Review of supplier responses AI evidence: [1567]Functions documented by the vendor in the Assess offering; check the specific contractual scope. No product test. Source check: 2026-10-14 |
| CertaThird Party Operating SystemOpinr is the former name. | Orchestrates onboarding, screening, due diligence, approvals and monitoring of third parties. Business rules and audit trails connect the specialist departments involved. | Certa AI converts policies into configurable review workflows, reads documents for questionnaire drafts and analyses third-party risks from due diligence documents. The agents described also support reasoned handling of screening hits.[1569] [1570]Specific AI functions documented Convert policies into review workflows · Questionnaire drafts from documents · Analysis of third-party risks AI evidence: [1570]Documented by the vendor; clarify specific agents, configuration and approval rules in the offer. Not tested in practice. Source check: 2026-10-14 |
| CHEVORABusiness Verification / Due DiligenceHeadquarters: Estonia [1573]CHEVORA OÜ, Tallinn, Estonia; registration number 17237686 according to the terms of use.CHEVORA OÜ | Specialist in counterparty checks, register and sanctions information and structured due diligence reports. No full TPRM life cycle claimed. | Language models extract structured facts from sources and support linguistic preparation. According to the methodology, risk assessments and check results are produced in a deterministic layer; these decisions are not LLM judgements.[1571] [1572] [1573]Specific AI functions documented Extract facts for counterparty checks · Prepare check information in written form AI evidence: [1571] [1572]Individual products offered with ordering and an account. Country coverage and depth of checks apply per product; extended capabilities are partly available for pre-order and are not counted across the board as available. Source check: 2026-10-15 |
| ConitivConitiv DatahubHeadquarters: France [1575]Conitiv SAS, RCS Aix-en-Provence 938381183; registered office in Aix-les-Milles, France.Conitiv SAS | Platform for supplier and third-party risks with credit, cyber and ESG ratings as well as compliance questionnaires. | Proprietary AI models support risk scores; generative AI creates reports and recommendations for action on third parties. The contract terms point out that LLM outputs are probabilistic.[1574] [1575]Specific AI functions documented Assess third-party risks · Create supplier reports · Monitor risk signals AI evidence: [1574]Commercial Datahub service; supplementary human audit services are to be considered separately. Source check: 2026-10-15 |
| ConveyorConveyorAI / ClearHeadquarters: USA [1578]Current privacy policy names Conveyor, Inc. as a Delaware corporation and its US headquarters.Conveyor, Inc.; ConveyorAI; Sue; Clear by Conveyor; Conveyor TPRM | Conveyor combines the handling of security questionnaires with an approved knowledge base and a Trust Center. Answers can be traced back to underlying documents and reviewed before being shared. The supplementary product Clear collects supplier evidence and creates risk assessments; sources, review dates and changes remain traceable in the supplier portfolio. | ConveyorAI drafts answers to security questionnaires with sources and a confidence estimate. The Clear agent reads supplier evidence, detects outdated information and gaps and creates risk assessments for human decision-making.[1576] [1577] [1578] [1579] [1580]Specific AI functions documented Answer security questionnaires with sources · Analyse supplier evidence · Detect gaps and outdated evidence · Create supplier risk assessments AI evidence: [1576] [1577]ConveyorAI documented by the vendor. Clear is described as a usable separate offering with activation on application for qualified TPRM users; no general open access assured. No product test. Source check: 2026-10-14 |
| CoverbaseCoverbase TPRM and Risk Assessment CopilotHeadquarters: USA [1582]The privacy policy names Coverbase Inc. with a contact address in San Francisco, California.Coverbase Inc.; Coverbase.ai | Coverbase combines supplier onboarding, third-party assessments, ongoing monitoring, findings and contractual obligations in a shared workflow. | According to the provider, the Risk Assessment Copilot analyses questionnaires, contracts and evidence against the customer's own controls. It detects exceptions and drafts follow-up questions. Further AI functions extract contractual obligations and support the preparation of supplier assessments.[1581] [1582] [1583]Specific AI functions documented Check questionnaires and evidence against controls · Prepare exceptions and follow-up questions · Extract contractual obligations AI evidence: [1581]Demo, product documentation and customer case studies are published. The scope of the individual assessment and monitoring modules must be confirmed contractually. Source check: 2026-10-15 |
| DueSphere AICorporate Supply Chain Due Diligence DashboardHeadquarters: Hong Kong [1588]Hong Kong Companies Registry: DueSphere AI Limited, BRN 78976423, incorporated 20.10.2025. HKU TEC attributes the supply chain due diligence platform of the same name to this company; the provider states it was founded in October 2025.DueSphere AI Limited; DueSphere AI; PoBot | Platform for ongoing review of labour and human rights risks in supply chains. Brings together anonymised worker reports, compliance documents, cases and supplier relationships for review and remediation. | AI analyses reports as well as documents or images and creates summaries for human case review. The dashboard shows patterns, violations and affected suppliers over time.[1584] [1585] [1586] [1587] [1588] [1589]Specific AI functions documented Analyse worker reports for supply chain reviews · Summarise compliance documents · Prepare risk cases for human review AI evidence: [1584] [1589]Product demo, paid trial plan and enterprise offering published. The public demo does not evidence comprehensive production readiness; project scope needs to be clarified. Source check: 2026-10-15 |
| EnlightaEnlighta TPRM and Vendor GovernanceHeadquarters: USA [1592]The contact page names San Ramon, California. Not to be confused with the Canadian health/biotechnology company of the same name.Enlighta Inc.; Enlighta Spice; Govern ML; Genie Chatbot | Enlighta connects third-party risks with contractual obligations, supplier performance, evidence and ongoing governance. The workflow ranges from onboarding and due diligence to monitoring and termination of the relationship. | According to the vendor, AI compares contract clauses and service commitments with internal standards, checks supplier documents for gaps and assesses evidence against controls. Further functions classify adverse news and support risk assessments.[1590] [1591] [1592] [1593]Specific AI functions documented Compare contract clauses and SLAs · Check supplier evidence for gaps · Classify risk alerts AI evidence: [1590] [1591]Commercial platform with demo offering and specific AI modules. Confirm module access, models and configuration of the evidence review in the offer. Source check: 2026-10-15 |
| Ethixbase360Third Party Risk Management PlatformTcompliance belongs to the provider group. | Supports third parties from onboarding to the termination of a relationship. Combines risk review, due diligence, training and approvals for integrity and supply chain issues. | Ethixbase360 documents AI-supported screening checks with human involvement. The support is intended to reduce false positive hits and escalate genuinely relevant risks for further assessment; the specific evidence also lies in the managed services offering.[1594] [1595] [1596] [1597] [1598]Specific AI functions documented Check screening hits for possible false alarms · Highlight relevant third-party risks for human assessment AI evidence: [1596] [1597]Documented by the vendor; AI-supported review explicitly described in the offering with analyst support. Not assumed to be a self-service function included across the board in every platform package; no product test. Source check: 2026-10-14 |
| GalinkGalink / Seel AIHeadquarters: France [1600]Galink SAS, SIREN 933246274, registered office Poissy, France. Official company entry in the search index and published articles of association match.Galink SAS; Seel AI | Software for supplier risks, evidence, measures and registers of information. The focus is on the security assessment of external service providers. | AI recognises certifications, analyses supplier evidence and identifies gaps against the selected control framework. Results feed into risk assessment and the tracking of measures.[1599] [1600] [1601] [1602]Specific AI functions documented Analyse supplier evidence · Detect control gaps · Capture certifications from evidence AI evidence: [1599]Commercial product with demo and customer access. The provider names various deployment regions; data residency cannot be derived from the French headquarters alone. Source check: 2026-10-15 |
| Hatfield.aiHatfield AI Third-Party Risk ManagementHeadquarters: USA [1607]The company's own profile names St. Petersburg, Florida, USA, as headquarters. Not to be equated with other companies named Hatfield; the exact name of the legal entity is not separately confirmed.Hatfield AI; Hatfield.ai TPRM; Hatfield Advisory | Hatfield.ai targets its TPRM platform at financial institutions. It combines supplier information, risk assessments, ongoing monitoring and regulatory classification. The consulting services offered in addition are not counted as further software providers. | The provider describes AI-based matching of supplier identities and automated assessments. NLP models analyse negative coverage; further agents link financial, legal and cyber risk signals. On this basis, risk profiles are updated and follow-up reviews are triggered based on predefined thresholds.[1603] [1604] [1605] [1606] [1607]Specific AI functions documented Match supplier identities and reduce duplicates · Prepare third-party assessments · Analyse risk signals for ongoing supplier monitoring AI evidence: [1607] [1604]The company page explicitly invites demos and participation as a beta customer. Functions are specifically described, but this does not evidence general production availability. Confirm the contracting entity and the modules actually activated. Source check: 2026-10-15 |
| HICXSupplier Management | Combines supplier master data and onboarding with validation, compliance and risk review. Suitable for processes across multiple regions and ERP systems. | HICX documents AI agents for supplier compliance: they check documents and validation data, monitor supplier risks and generate supplier reports or ESG summaries.[1608] [1609]Specific AI functions documented Check supplier documents and compliance information · Monitor supplier risks · Draft supplier and ESG reports AI evidence: [1609]Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| Innova IbéricaInnova GRC; Innova SuppliersHeadquarters: Spain [1612]Legal notice names 115INNOVA24H S.L., CIF B91812511, with registered office in Seville and commercial register details.115INNOVA24H S.L.; Innova Suppliers; Innova GRC; Innova Ethics; Innova Check; Innova Learn | Innova Ibérica offers GRC, whistleblowing and compliance applications. Innova Suppliers combines supplier qualification and customer due diligence with documents, questionnaires, risk assessments, approvals and ongoing monitoring. | Innova Suppliers extracts and checks document content with AI, generates questionnaires from requirements and suggests assessments. The AI can also draft a risk dossier on the third party. Responsible staff review the suggestions and decide on approval.[1610] [1611] [1612]Specific AI functions documented Analyse supplier documents · Draft questionnaires · Suggest assessments · Summarise third-party risks AI evidence: [1611]Offered as SaaS with demo. The AI evidence relates specifically to Innova Suppliers; it is not attributed across the board to every module. Transaction pattern detection is explicitly described on the product page as a rule-based calculation. Source check: 2026-10-15 |
| interos.aiSupply Chain Risk Management | Maps multi-tier supply chains and monitors risks beyond direct suppliers. Supports procurement, compliance and preparation for disruptions. | AI and language processing uncover multi-tier supplier networks and dependencies. The platform assesses suppliers against multiple risk types and monitors changes.[1613] [1614] [1615]Specific AI functions documented Uncover supplier networks and dependencies · Assess suppliers against multiple risk types · Monitor risks continuously AI evidence: [1615]Documented by the vendor; no product test. Source check: 2026-10-14 |
| LystaLysta Third-Party IntelligenceHeadquarters: France [1618]Company Lysta, RCS Bordeaux 984648048; registered address in Bordeaux, France.Lysta | Platform for investigating and monitoring companies, suppliers, subcontractors and business partners. | AI analyses relationships between companies and executives and supports the detection of dependencies and the assessment of third-party risks. Document review and public risk signals complement the workflow.[1616] [1617] [1618]Specific AI functions documented Analyse supplier interconnections · Detect concentration risks · Monitor critical third parties AI evidence: [1616] [1617]Offered commercially as a web platform and API with demo. Source check: 2026-10-15 |
| MagnitudeMagnitude TPRM PlatformHeadquarters: USA [1622]The launch announcement published by the provider names San Francisco as headquarters. The website footer names Magnitude Platforms, Inc.; not to be confused with the coding provider of the same name at magnitude.dev.Magnitude Platforms, Inc.; Magnitude TPRM; magnitude.ai | Magnitude supports the third-party risk life cycle, including onboarding, assessment, monitoring, tracking of measures and dependencies on further supplier tiers. | The product page describes specialised AI agents for document collection, control analysis and risk classification. Further agents prepare recommendations and management reports and handle follow-up questions and measures with suppliers.[1619] [1620] [1621] [1622]Specific AI functions documented Analyse supplier evidence and controls · Prioritise third-party risks · Prepare risk reports and measures AI evidence: [1619]Live demo offered; the provider's own launch announcement already describes customers in production. Check deployment limits, approvals and the available scope of agents specifically. Source check: 2026-10-15 |
| MastercardRiskReconRiskRecon is listed once under Mastercard. Whistic is an independent partner and remains separate. | RiskRecon monitors the externally visible cyber security posture of service providers and suppliers. Security findings, risk ratings and remediation plans support ongoing third-party assessment. | RiskRecon Assessments Powered by Whistic uses AI to answer security questionnaires, summarise supplier documents and SOC 2 reports and analyse information for third-party assessments.[1623] [1624] [1625]Specific AI functions documented Generate suggested answers for security questionnaires · Summarise supplier and SOC 2 reports · Analyse evidence for third-party assessments AI evidence: [1625] [1624]Documented by the vendor in the integrated offering RiskRecon Assessments Powered by Whistic; according to the product page, the licence scope depends on the number of assessments. No product test. Source check: 2026-10-14 |
| NeotasAutomated Due DiligenceHeadquarters: United Kingdom [1627]Neotas Limited, Coppergate House, 10 Whites Row, London.Neotas Limited | Self-service software for customer and third-party checks drawing on sanctions, PEP data, media, registers and other public sources. Editable reports contain source references and audit trails. | AI confirms the subject under investigation, cleans up mismatches and duplicates and condenses parallel research into a risk-flagged report. The platform allows the choice of the AI model used.[1626] [1627]Specific AI functions documented Consolidate due diligence research · Clean up mismatches · Create evidenced risk reports AI evidence: [1626]Self-service reports and a free first report offered; in-depth analyst-led investigations are separate from this. Source check: 2026-10-15 |
| OPEN / RoboRoboRoboRobo Compliance CheckHeadquarters: Japan [1630]Seller and operator オープン株式会社 (OPEN, Inc.), Tokyo, explicitly named in the statutory seller disclosure.OPEN, Inc.; オープン株式会社; RoboRoboコンプライアンスチェック | Cloud software for compliance checks of business partners based on adverse media, register and supplementary database information. Manages check results, business decisions and exportable evidence. | AI ranks articles found by level of attention required; generative AI summarises conspicuous articles and LLM analysis assesses their risk level for the subject-matter decision.[1628] [1629] [1630] [1631]Specific AI functions documented Prioritise adverse media · Summarise conspicuous articles · Assess article risks for partner checks AI evidence: [1628] [1629]Commercial cloud service with free trial. Additional databases and API connection are separate options; AI functions documented on current product pages. Source check: 2026-10-15 |
| OrbiqVendor AssuranceHeadquarters: Germany [1633]Orbiq GmbH, Hamburg, HRB 192841 according to the legal notice.Orbiq GmbH; Orbiq Vendor Assurance | Supplier assessment with questionnaires, evidence, assessment histories and ongoing monitoring for security and compliance teams. | AI suggests control-related questions and evaluates answers based on supplier criticality. It flags contradictions and changes compared with earlier answers and creates reasoned assessment reports for approval.[1632] [1633]Specific AI functions documented Prepare supplier questionnaires · Detect contradictions in answers · Draft assessment reports AI evidence: [1632]Product page offers a demo. Questionnaires, analysis and monitoring are described as modular; confirm the specific licence and subject-matter approvals. Source check: 2026-10-15 |
| PanoraysPanorays Third-Party Cyber Risk ManagementHeadquarters: USA / Israel [1636]Current vendor information: headquarters in New York and Israel. The terms and conditions name Panorays Ltd. and affiliated companies; the specific contracting company may depend on the contract. Headquarters not derived from the choice of law alone.Panorays Ltd.; Panorays TPCRM | Panorays combines supplier questionnaires, security evidence, external observations and business criticality in a single process for assessing third-party risks. Teams can classify suppliers, verify information, agree on measures and track changes. The platform supports collaboration with suppliers as well as the documentation of assessments for those responsible for security, compliance and procurement. | Panorays describes NLP for checking supplier answers against documents, certifications and evidence. AI also suggests questionnaire answers from existing assessments and researched information; an ML model supports risk classification.[1634] [1635] [1636] [1637]Specific AI functions documented Check supplier answers against evidence · Suggest questionnaire answers · Classify supplier risks with AI support AI evidence: [1634]Documented by the vendor; agree licence and configuration scope. No product test. Source check: 2026-10-14 |
| PrewaveSupplier Risk Management / Action PlatformHeadquarters: Austria [1640]The vendor explicitly names Vienna, Austria as headquarters; the legal notice had little content for technical reasons when currently retrieved, so the official company announcement is used as evidence. | Combines the detection of supplier risks with measures and collaboration with suppliers. Supports the documentation of due diligence. | Prewave describes specialised AI models for analysing and classifying external risk events. Events are matched against supplier locations and prioritised by severity and dependency; experts review the results.[1638] [1639]Specific AI functions documented Classification of risk events · Matching against supplier locations · Prioritisation of risk alerts AI evidence: [1639]Documented by the vendor; no product test. Source check: 2026-10-14 |
| ProcessUnity TPRM Platform | Third parties from request to offboarding with shared records, assessments and monitoring. | Assessment Autofill creates draft answers for supplier questionnaires from existing risk and compliance documents. Evidence Evaluator supports the analysis of evidence for control reviews. Suppliers and analysts review the results in the respective assessment workflow.[219] [1641] [1642]Specific AI functions documented Draft answers for supplier questionnaires · AI-supported evidence analysis AI evidence: [1641] [1642]Documented by the vendor in TPRM Platform and Global Risk Exchange; suppliers review the drafts before submission. Licence scope not fully established; no product test. Source check: 2026-10-14 |
| RescanaRescana Vendor Risk ManagementHeadquarters: Israel [1644]The privacy policy names Rescana Ltd., registration number 515442077, with an address in Tel Aviv, Israel.Rescana Ltd. | Rescana combines supplier identification, risk assessment, continuous monitoring and tracking of measures. The GRC relevance lies in particular in documented third-party reviews, control assessments and reports. | The AI agents described collect supplier documents, analyse questionnaires and check information against external risk intelligence. Contract reviews identify missing security provisions; further agents coordinate requests for additional information and escalations.[1643] [1644]Specific AI functions documented Analyse supplier documents and questionnaires · Detect contractual security gaps · Support follow-up requests and risk reports AI evidence: [1643]Demo access offered; the vendor describes enterprise deployments. Check AI results and automated follow-up steps against your own approval processes. Source check: 2026-10-15 |
| ResilincAgentic AI Supply Chain Risk PlatformEventWatch and RiskShield are product names. | Monitors risks relating to suppliers, sites and materials. Combines events and compliance risks with assessments and coordinated measures. | Resilinc EventWatchAI detects supply chain disruptions from news and other event sources. NLP and generative AI classify and explain relevant events; the platform also describes AI-supported recommendations on possible countermeasures.[1645] [1646] [1647] [1648]Specific AI functions documented Identify events with supply chain risks · Summarise and classify event research · Suggest risk mitigation options AI evidence: [1647] [1646]Documented as an available provider offering in the Microsoft Marketplace; scope depends on the product and the integration. No product test. Source check: 2026-10-14 |
| Risk LedgerHeadquarters: United Kingdom [1649]Risk Ledger Ltd.; Companies House 10831970, registered office Adam House, 7–10 Adam Street, London. The provider policy names Risk Ledger Ltd. as the responsible company. Geography checked on 15.10.2026; hosting or ownership not derived from the registered office. | Network for supplier assessments with a shared question framework, evidence, approvals and visibility of further supply chain tiers. | Risk Ledger documents AI-generated supplier summaries from completed assessments. They consolidate the risk profile and compliance information and suggest next review steps.[220] [221] [1649] [1650]Specific AI functions documented Summarise supplier assessments · Suggest next steps in the supplier review AI evidence: [221]Documented in the vendor changelog since July 2026; activation via Customer Success or support. No product test. Source check: 2026-10-14 |
| S&P GlobalKY3PIHS Markit KY3P; TruSight | Offers processes for the entire third-party life cycle. Supports control assessments, due diligence and the review of cyber risks and resilience. | Agentic AI for due diligence has been announced for KY3P: it is intended to compile customer data, monitor profiles for material changes and trigger reviews. This does not yet evidence an available AI work step in KY3P.[1651] [1652]Announced or in development Compile data for due diligence (announced) · Monitor profile changes and trigger reviews (announced) AI evidence: [1652]AI KYC and due diligence, including KY3P connection, are explicitly on the roadmap. No documented available pilot; no product test. Source check: 2026-10-14 |
| SAFE SecuritySAFE One / TPRM AI Co-WorkerHeadquarters: USA [1654]SAFE; Lucideus; RiskLens; Balbix | SAFE Security combines supplier review, risk assessment and tracking of measures with a platform for cyber risks. The TPRM area runs from onboarding a supplier via questionnaires and evidence to approval and ongoing monitoring. Findings are linked to business impacts and remediation measures; status and communication remain traceable in the review history. | Documented agents analyse policies, audit reports and attestations, check questionnaire answers against standards and flag gaps. The TPRM AI Co-Worker also supports remediation with evidence and guidance on actions. Marketing claims of complete autonomy were not adopted as verified in practice.[1653] [1654] [1655] [1656] [1657] [1658]Specific AI functions documented Analysis of supplier evidence · Matching of questionnaire answers · Support for remediation measures AI evidence: [1653]Documented by the vendor; not tested in practice. Source check: 2026-10-14 |
| SayariSayari Pilot / Mirato TPRMHeadquarters: USA [1662]The company's own job advertisement explicitly names Washington, D.C., as headquarters; the contact page confirms the US office and further international locations.Sayari Labs; Sayari Labs Inc.; Mirato; Sayari Pilot; Mirato TPRM | Sayari combines corporate and ownership data with review workflows for third-party risks. Pilot supports screening, document analysis and ongoing supplier assessments. Mirato's TPRM technology, acquired in 2026, is managed within the same provider group. | Pilot uses AI to extract information from complex documents and maps it to company-specific risk controls. The platform combines screening, evidence analysis and risk assessment with source references and escalation. More advanced functions of the Pilot Superagent have been announced separately as the next development stage.[1659] [1660] [1661] [1662]Specific AI functions documented Analyse supplier documents for risk information · Map evidence to your own control requirements · Support third-party assessments with a documented audit trail AI evidence: [1659]Pilot is offered with specific functions and demo access. Pilot Superagent, autonomous investigation workflows and the Regulatory Co-Pilot are listed under “Coming Next” and are not counted as functions already available. Source check: 2026-10-15 |
| Schwarzthal TechWunderschild / Know Your NetworkHeadquarters: United Kingdom [1665]Schwarzthal Tech Ltd, Devonshire House, 582 Honeypot Lane, London.Schwarzthal Tech Ltd; Wunderschild; Know Your Network; KYN | Software for network-based checks of customers, contacts and business partners. Connections, data sources and potential financial crime risks are brought together into a single picture. | Machine learning supports network assessments, data linking and the aggregation of relationships. Entity resolution links information on persons and companies even where there are multiple name variants.[1663] [1664] [1665]Specific AI functions documented Analyse business partner networks · Link personal and company data · Investigate hidden risk connections AI evidence: [1663] [1664]The provider documents software and a use case; commercial deployment and data scope are to be clarified on request. Source check: 2026-10-15 |
| ScriooSupplier / Third-Party IntelligenceHeadquarters: Luxembourg [1667]Scrioo S.à r.l., Grevenmacher, Luxembourg; company address in the vendor footer.Scrioo S.à r.l. | Software for due diligence and ongoing monitoring of suppliers and other business partners based on public and supplementary data sources. | AI agents check and compare external signals and prepare their relevance for the assessment of business partners. The results support prioritised handling of risks.[1666] [1667]Specific AI functions documented Analyse business partner signals · Prioritise external risk indicators AI evidence: [1666]Platform access, pricing and demo offerings available. Check data coverage, historical look-back and optional data sources in the contract. Source check: 2026-10-15 |
| SecurityPalVendor Assess / VinnyHeadquarters: USA [1669]SecurityPal AI; Vendor Assess; Vinny | With Vendor Assess, SecurityPal supports the structured assessment of suppliers. Companies define the depth of review and risk criteria and receive reports with findings, ratings and recommended measures. A central repository keeps evidence and assessment results together. The software combines automated work steps with additional review by experts where the case in question requires it. | The AI agent Vinny researches suppliers, collects and analyses security and compliance documents, maps findings to frameworks and creates TPRM reports. The product description supplements this workflow with risk-based human review; results were not verified in practice.[1668] [1669]Specific AI functions documented Supplier document analysis · Framework mapping · TPRM report drafts AI evidence: [1668]Documented by the vendor as a combination of platform, AI agent and managed supplier review; certified analysts support in-depth reviews and provider communication. Not tested in practice. Source check: 2026-10-14 |
| SecurityScorecard TITAN AITITAN AI; TITAN Assess; HyperComplySecurityScorecard; TITAN AI; TITAN Assess; HyperComply; RespondAI | SecurityScorecard combines security ratings, supplier assessments and continuous monitoring of third-party risks. Evidence, questionnaires and measures support assessment and collaboration with suppliers. HyperComply has belonged to the provider group since the acquisition completed in September 2025 and is counted together here; the scope of integration remains product-dependent. | SecurityScorecard TITAN AI describes AI for checking supplier statements against evidence, extracting SOC 2 content and prioritising third-party risks.[222] [223] [1670]Specific AI functions documented Check supplier statements and questionnaire answers against evidence · Extract details from SOC 2 reports · Prioritise third-party risks and remediation steps AI evidence: [222]Documented by the vendor in the TITAN AI platform, in particular TITAN Assess; no product test. Source check: 2026-10-14 |
| ShieldByte InfosecShieldRisk AIHeadquarters: India [1673]ShieldByte Infosec lists Mumbai, India, as headquarters. The ShieldRisk contact page names ShieldByte Infosec Pvt. Ltd. as provider; product and vendor are counted only once.ShieldByte Infosec Pvt. Ltd.; Shieldbyte Infosec Private Limited; ShieldRisk; ShieldRisk AI; ShieldRisk TPRM | ShieldRisk supports third-party risk management with supplier onboarding, questionnaires, assessment dimensions, control mapping, evidence storage and reports. Data protection, business continuity and regulatory risks are part of the assessment scope presented. | The product page describes AI models that update risk scores based on supplier answers, threat intelligence and reassessments. The vendor assigns this function to its ongoing third-party risk process.[1671] [1672] [1673]Specific AI functions documented Assess supplier risks with AI support · Update risk scores based on new information · Prioritise third-party assessments AI evidence: [1671]SaaS platform with demo and sign-up offering. Confirm available assessment models, data sources and configuration in the specific product access. Source check: 2026-10-15 |
| Supply WisdomContinuous Monitoring | Monitors suppliers and locations for financial, operational, cyber, compliance and ESG risks. Supports the ongoing detection of changes. | Supply Wisdom describes AI-supported analysis of public data on third-party and location risks. This produces context-based risk alerts and up-to-date information for assessing new and existing suppliers.[1674] [1675] [1676] [1677]Specific AI functions documented Analysis of public third-party risk signals · Context-based supplier and location alerts · Support for supplier assessments AI evidence: [1676] [1677]Documented by the vendor; no product test. Source check: 2026-10-14 |
| UpGuard Vendor RiskTo the detailed profile | Assess and monitor third parties: security profiles, questionnaires, evidence, controls and measures in one workflow. | Vendor Risk analyses security documents, maps findings to control requirements and creates risk-related draft reports. Source citations show the basis of the assessment; analysts can comment on or correct results.[224] [225]Specific AI functions documented Map document findings to controls · Draft risk reports · Trace assessments with source citations AI evidence: [225]Documented by the vendor for Vendor Risk; check scope of services and pricing in the specific offer. Human correction provided for; no product test. Source check: 2026-10-14 |
| VendoricaVendorica / MCP ServerHeadquarters: Lithuania [1679]Pillar labs, UAB, Vilnius, Lithuania, company code 308103902.Pillar labs, UAB; Vendorica | DORA-oriented supplier and evidence management with documented connection of external AI assistants. AI processing takes place in the connected tool, not in a proprietary Vendorica language model documented here. | The MCP server provides organisation-specific data on controls, supplier risks and evidence. Connected AI agents can use this for GRC queries, gap analyses and policy drafts; access is read-only and logged.[1678] [1679]Specific AI functions documented Query GRC evidence with external AI assistants · Prepare gap analyses with connected agents · Create policy drafts from GRC context AI evidence: [1678]Current product documentation describes a shipped MCP server with OAuth and revocable tokens. An external AI tool and its contract are required; no evidence of autonomous AI supplier assessment by Vendorica itself. Source check: 2026-10-15 |
| Whistic | Supplier assessments, security evidence and monitoring; additionally internal control testing and a Trust Center for customer enquiries. | Whistic uses AI to analyse supplier evidence and to create source-referenced findings. For this purpose, the Automation Orchestrator coordinates evidence collection, analysis and the management summary; the final risk assessment remains with the team.[226] [227]Specific AI functions documented Analyse supplier evidence against selected frameworks · Prepare findings with sources and confidence information · Create management summaries for approval AI evidence: [226] [227]Currently documented for the Assess workflow with four individually configurable agents. Further Orchestrator workflows are on the roadmap and are not counted as available; no product test. Source check: 2026-10-14 |
| ZentaZenta AI / TPRMHeadquarters: Spain [1681]ADVISORY & TECH SL, CIF B01669225, address in Valencia. The legal notice still uses the name RISKALLAY.ADVISORY & TECH SL; Riskallay; Zenta AI | Platform for third-party risks, due diligence, questionnaires and compliance controls. Assessments, evidence and decisions are handled in shared workflows. | AI extracts findings from security reports and questionnaires, drafts answers from existing documents and recommends policies or tests for controls. Uncertain extractions are flagged; third-party approvals remain with subject-matter experts.[1680] [1681]Specific AI functions documented Analyse third-party evidence · Draft questionnaire answers · Suggest policies and tests for controls AI evidence: [1680]Zenta AI is described on the current product page with demo and platform access. Agree the specific AI and module scope; no product test. Source check: 2026-10-15 |
Resilience & business continuity
17 entries
| Provider / product | Documented focus | AI functions and classification |
|---|---|---|
| 4C Strategies Continuity ManagerHeadquarters: Sweden [1682]The official articles of association name 4C Group AB (publ) with registered office in Stockholm. The region refers to the provider group, not to individual international branches. Geography checked on 15.10.2026; hosting or ownership not derived from the registered office. | Manage critical services, dependencies, BIA, continuity plans, exercises and improvements centrally. | 4C Strategies documents AI-generated, editable continuity plans based on risks and operational processes. The Pro package of the Continuity Manager additionally names AI-supported scenario testing.[228] [1682]Specific AI functions documented Draft continuity plans · Test continuity scenarios with AI support AI evidence: [228]Documented by the vendor; AI scenario tests are assigned to the Pro package. Agree the specific licence scope. No product test. Source check: 2026-10-14 |
| Blue CipherFortify / Continuity BuilderHeadquarters: United Kingdom [1685]Blue Cipher Ltd, No. 17183812; the provider names Cambridge, UK. Companies House names the registered office as St. Ives, England, and incorporation on 27.04.2026.Blue Cipher Ltd; Blue Cipher Advisory; Fortify; Fortify Portal | Fortify combines digital resilience assessments with a risk register, policies, incidents and compliance evidence. The Continuity Builder adds BIA, recovery objectives, technical plans and tests. | AI guides users through the BIA, drafts an initial continuity policy from the company description and creates exercise scenarios. Additional AI functions prepare policy changes and risk entries.[1683] [1684] [1685] [1686]Specific AI functions documented Prepare BIA in a structured way · Draft continuity policies · Create exercise scenarios AI evidence: [1683]Free assessments and a paid portal offered. Continuity Builder described from the Strategic tier upwards. According to the terms, results are based on user input and do not replace an independent system audit. Source check: 2026-10-15 |
| CLDigital 360 | BCM with BIA, plans and exercises on a configurable platform; additional risk and compliance applications. | CLDigital AI supports pre-filling business impact analyses, mapping regulatory requirements and detecting risk patterns. Generative AI can draft and summarise content.[229] [230]Specific AI functions documented Pre-fill business impact analyses · Map regulatory requirements · Detect risk patterns · Draft and summarise GRC content AI evidence: [230]Documented by the vendor in CLDigital 360. Administrators control functions, permissions and reviews; external models configurable via CLDigital Flow. No product test. Source check: 2026-10-14 |
| Continuity2 Meridian | Meridian brings together business impact analysis, emergency plans, exercises, incident communication and corrective actions. | No specific AI work step was documented in the publicly indexed official Meridian product descriptions. The workflows, analyses and intelligent automations described are not in themselves sufficient as AI evidence.[231] [1687] [1688] [1689] [1690]Not specifically documented in the source check Detailed indexed official product texts and targeted AI search checked; direct retrievals return 403. Check limited to this public index content. Third-party Meridian products and general articles on AI risk were not adopted as evidence. Sources checked: [231] [1687] [1688] [1689] [1690]No specific AI work step documented in the indexed vendor material checked; no statement about the absence of AI. Source check: 2026-10-14 |
| Controllit[alive-IT]Headquarters: Germany [1693]Controllit AG; explicit registered office Hamburg, Germany; HRB 124406.Controllit AG | Supports business impact analyses, resource overviews and recovery plans. Links approvals, reminders, documented tests and tasks during disruptions. | The alive product pages of Controllit checked describe automated business impact analyses, emergency plans and reports. A specific AI work step in the product was not documented; general statements on AI trends are not sufficient for this.[1691] [1692]Not specifically documented in the source check Vendor product pages and targeted AI search checked. General resilience trends and questions about AI use in market surveys not counted as product evidence. Sources checked: [1691] [1692]No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| CryptaguardResiPlan; AI AnalystHeadquarters: Belgium [1695]Legal notice names Cryptaguard BV, Belgian company number 1007.610.660, registered office Sint-Pieters-Leeuw.Cryptaguard BV; ResiPlan | ResiPlan supports business impact analyses, continuity plans, exercises and evidence. Risks, incidents and regulatory requirements are managed in a shared workspace for internal teams and consultants. | AI Analyst analyses BIA, risk and incident data and creates management summaries and suggested actions. Also described are the detection of conspicuous incident and control patterns and drafts for crisis communication.[1694] [1695]Specific AI functions documented Analyse BIA and risk data · Draft management reports · Detect incident patterns · Prepare crisis communication AI evidence: [1694]Trial access and publicly described product packages offered. Review AI outputs and industry-specific requirements from a subject-matter perspective before use. Source check: 2026-10-15 |
| DalysieResiliencePilot; rAIleyHeadquarters: Norway [1697]Privacy policy describes Dalysie AS as a provider registered in Norway; the hosting location is treated separately.Dalysie AS; ResiliencePilot; rAIley; resiliencepilot.no | ResiliencePilot combines risk management, audits, incidents and business continuity. The platform brings together controls, evidence and recovery planning for regulated organisations. | The AI assistant rAIley drafts policies and audit reports, suggests risks and controls and supports the analysis of incidents. The provider also describes BIA support and gap analyses based on uploaded documents.[1696] [1697]Specific AI functions documented Suggest risk descriptions and controls · Support BIA and continuity plans · Analyse compliance gaps · Draft audit reports AI evidence: [1696]Demo and trial access offered. AI suggestions must be confirmed by users; check specific module activations and operating conditions in the customer contract. Source check: 2026-10-15 |
| Everbridge 360 AIPrepare / Bridge / Critical Event Management | Prepare and Bridge support business impact analyses, continuity plans, dependencies, recovery and exercises. The supplementary Critical Event Management combines risk intelligence, alerts, crisis communication and response workflows. The specific scope depends on the products and modules selected. | In the Everbridge 360 AI offering for Critical Event Management, AI summaries of alerts, suggested actions, drafts for crisis communication and natural-language analyses are documented. These functions are not attributed across the board to every Prepare or Bridge module.[232] [233] [234] [1698] [1699]Specific AI functions documented Summarise alerts · Draft crisis communication · Analyse event and risk data AI evidence: [1698] [1699] [233]Documented by the vendor for the CEM portfolio; agree specific modules and licence packages. Separate AI functions within Prepare/Bridge not consistently evidenced; no product test. Source check: 2026-10-14 |
| FortivFortiv Business ContinuityHeadquarters: Denmark [1701]Fortiv ApS, Copenhagen, CVR 45231283.Fortiv ApS | BCM platform for business impact analyses, dependencies, continuity plans, exercises and incidents. Plans are given responsibilities, approvals, versions and an audit trail. | AI voice and chat agents collect BIA data in conversations. AI flags contradictions, suggests corrections, drafts continuity plans from validated data and checks them for gaps against standards.[1700] [1701]Specific AI functions documented Support BIA interviews · Detect contradictions in BIA data · Draft and pre-check continuity plans AI evidence: [1700]Platform offered with login and demo. Data validation by administrators and approval workflows are described; specify modules and agents in the offer. Source check: 2026-10-15 |
| Fusion Enterprise Resilience Decision System | Operational resilience, BCM, IT recovery, crises and third parties based on critical services. | Fusion Intelligence uses generative AI to transfer existing continuity plans into structured records, answer programme questions on the basis of data and prepare recovery strategies and parts of the business impact analysis. Test scenarios and summaries are also generated.[235] [236]Specific AI functions documented Import continuity plans in structured form · Prepare recovery strategies and BIA sections · Draft test scenarios and exercise summaries · Analyse resilience and programme data via chat AI evidence: [236]Documented by the vendor; not tested in practice. Source check: 2026-10-14 |
| HoliSentraDORApp / DORAssistantHeadquarters: Slovenia [1704]HoliSentra d.o.o., Maribor, Slovenia, LEI 4851000MUH2GSF6FF822. Product footer names HoliSentra; linked web terms still name U-centrix d.o.o.HoliSentra d.o.o.; DORApp; DORAssistant; U-centrix d.o.o. | DORA platform for registers of information, ICT third-party risks, incidents, governance and reports. Documented workflows connect reviews, changes and evidence. | DORAssistant checks contracts with regard to DORA, transfers contract information into the register of information and answers questions in the context of the institution. The provider description also mentions guided data entry and reporting support.[1702] [1703] [1704] [1705]Specific AI functions documented Check ICT contracts · Populate the register of information from contracts · Answer institution-specific DORA questions AI evidence: [1702] [1703]Commercial platform with demo and 14-day trial access; AI assistant described as a module. Specific scope of services and contracting party are to be checked in the offer. Source check: 2026-10-15 |
| InoniBusiness Continuity Software | Offers software for business continuity analyses and plans. The company's own software offering can be supplemented by consulting services. | No specific AI work step of the Inoni software was documented in the source check. Inoni does describe its consultants' use of AI for text quality, consistency checks and exercise scenarios, but no corresponding available software function.[1706] [1707]Not specifically documented in the source check Software page and targeted AI article checked. AI use in consulting was not adopted as an AI function of the software product. Sources checked: [1706] [1707]No specific AI work step documented in the source check; no statement about the absence of AI. Source check: 2026-10-14 |
| Motorola SolutionsNoggin Enterprise ResilienceNoggin part of Motorola Solutions since 2024; one provider entry. | Combines business continuity with operational risks, crisis management, third-party risks and critical events. Supports collaboration in preparing for and dealing with disruptions. | Noggin documents AI-supported threat intelligence. Via the Dataminr integration, relevant events and emerging risks are detected in real time to support crisis and incident response.[1708] [1709] [1710] [1711]Specific AI functions documented Detect critical events and emerging risks via Dataminr AI evidence: [1710] [1711]Documented by the vendor via the Dataminr integration in Noggin; integration and corresponding scope of services required. No product test. Source check: 2026-10-14 |
| Premier Continuum ParaSolutionTo the detailed profile | ParaSolution combines BIA, risk assessment, plan creation, activation and exercises. | ParaSolution uses machine learning and language models to analyse external threat signals for business continuity, classify them by location and industry relevance and prioritise alerts according to possible impact.[237] [1712]Specific AI functions documented Analyse external climate, cyber and geopolitical risk signals · Classify threats by location and industry relevance · Prioritise alerts according to potential impact AI evidence: [1712] [237]Documented by the vendor in the Automated Threat Monitoring and Analysis module; no product test. Source check: 2026-10-14 |
| RiskFinderRiskFinder BCM / BCPHeadquarters: Denmark [1714]RiskFinder ApS, Denmark, CVR 44911760.RiskFinder ApS | BCM software, in particular for utilities and critical operational processes. Risk assessments, BIA, recovery plans, owners, tests and documentation are linked with one another. | AI analyses BIA data and suggests recovery procedures tailored to facilities and processes. This includes suggestions for resources and time frames; users can adopt or adapt the content.[1713] [1714]Specific AI functions documented Draft recovery procedures · Suggest resources and time frames · Analyse BIA data for continuity plans AI evidence: [1713]Commercial SaaS platform with product demonstration. According to the vendor, the platform is in Danish; plan approval and documented tests are part of the workflow described. Source check: 2026-10-15 |
| SolustiqResiliraHeadquarters: Türkiye [1717]Solustiq Yazılım ve Yapay Zeka Teknolojileri A.Ş., Edirne, Türkiye; MERSİS 0773094263800001. The documented company location of Edirne lies in European Thrace. The assignment to Europe outside the EU follows this location, not a blanket classification of Türkiye as a whole.Solustiq Yazılım ve Yapay Zeka Teknolojileri A.Ş.; Resilira | BCM software for business impact analyses, risks, recovery plans, exercises and incidents. Plan content is linked with regulatory requirements and exportable audit evidence. | AI creates drafts of business impact analyses, impact matrices and recovery procedures from organisational information. The terms of use require human review and approval before use.[1715] [1716] [1717]Specific AI functions documented Prepare BIA drafts · Suggest impact matrices · Draft recovery procedures AI evidence: [1715] [1716]Commercial subscription with fourteen-day trial access. The contract terms describe AI drafts as starting points that must be reviewed; no product test. Source check: 2026-10-15 |
| VeociBusiness Continuity | Guides teams through the creation and maintenance of emergency plans. Captures dependencies, recovery objectives, staff and resources for continuity planning. | With VIA, Veoci Vantage offers AI support for pre-filling forms, after-action reports and exercise scenarios from existing information. The vendor also describes summaries of incoming reports in the respective work context.[1718] [1719] [1720]Specific AI functions documented Pre-filling of forms · After-action reports from operational data · Exercise scenarios from existing sources · Summaries of incoming reports AI evidence: [1719] [1720]According to an announcement dated 28.09.2026, Vantage is generally available; VIA is optional and activated via opt-in. No product test. Source check: 2026-10-14 |
Audit & audit management
57 entries
| Provider / product | Documented focus | AI functions and classification |
|---|---|---|
| A-LIGNA-SCEND | A-SCEND is the software platform for preparing and conducting external compliance audits by A-LIGN. It bundles evidence, controls and communication with the auditor and is provided within the corresponding audit engagement; it is not a separately offered GRC suite. | A-SCEND analyses evidence documents, suggests matching audit requirements and explains the mapping. The AI supports audit preparation; according to the usage policy, it does not make automated audit decisions.[1721] [1722] [1723]Specific AI functions documented Map evidence to audit requirements · Summarise how documents relate to the audit requirement AI evidence: [1721] [1723]Platform tied to an A-LIGN audit engagement. AI can be deactivated; auditors remain responsible. No product test of our own. Source check: 2026-10-14 |
| Alea360Alea360 SaaSHeadquarters: France [1726]ALEA360 | Alea360 supports cross-site controls and operational compliance, particularly in branch-based organisations. The software combines customisable inspection checklists, automatically generated reports, central documentation and corrective actions. Dashboards enable sites to be compared and provide an overview of open tasks and the documented level of compliance. | No specific AI work step is documented in the Alea360 product sources checked. Automatic PDF reports, checklists, compliance scores and reminders are described, but not sufficiently identified as AI methods.[1724] [1725] [1726] [1727] [1728]Not specifically documented in the source check Product description and domain/provider searches for IA and intelligence artificielle checked. The terms intelligent and automated are not sufficient as AI evidence; neighbouring search results from other providers were excluded. Sources checked: [1724] [1725]AI availability not specifically documented in the source check. Source check: 2026-10-14 |
| AnderaAndera Audit AI / Andera GRCHeadquarters: USA [1731]Privacy notice names RegCheck Inc. under the Andera brand with an address in Evanston, Illinois, USA.RegCheck Inc.; Andera Audit AI; Andera GRC | Andera combines control testing with a risk control matrix, process descriptions, risks, findings and evidence. The GRC module establishes the link between the control inventory and the audit work performed. | AI agents collect evidence from connected systems, carry out control tests and re-tests and, in the event of deviations, draft findings and compensating controls. Rationales are set against the underlying evidence; unclear results are passed on for human clarification.[1729] [1730] [1731]Specific AI functions documented Collect and check control evidence · Prepare control tests and re-tests · Draft findings with evidence and rationale AI evidence: [1730] [1731]Andera declares the GRC module available since 14 September 2026; initially tied to the offering for control testing. Demo offered, no product test of our own. Source check: 2026-10-15 |
| AssurAIAssurAIHeadquarters: USA [1733]Terms of use name AssurAI Inc. as a Delaware C corporation. No affiliation with an audit firm derived from the marketing comparisons.AssurAI Inc. | AssurAI supports SOX programmes, internal audit, risk assessment and compliance documentation. Control descriptions, evidence, audit working papers and measures are handled in shared workflows. | According to the vendor, the platform uses Claude for drafts of working papers, control assessments and evidence classification. Further workflows described include risk registers, control mapping between regulatory frameworks and gap analyses. Results are intended for review and approval by experts.[1732] [1733]Specific AI functions documented Draft audit working papers · Classify evidence and support control testing · Prepare control gaps and measures AI evidence: [1732] [1733]Subscriptions and trial access offered. The terms require subject-matter review of all AI results; for the BSA/AML module, additional restrictions to anonymised or sample data apply. Source check: 2026-10-15 |
| AudavisAUDAVIS AIHeadquarters: Germany [1735]Legal notice names Audavis GmbH in Munich, HRB 286180.Audavis GmbH; AUDAVIS AI; AUDAVIS GenAI | AUDAVIS supports external audit, tax audit and internal audit with data analyses and working papers. Accounting data is examined in the context of the respective engagement and results are transferred to the audit documentation. | AI assesses anomalies at the level of individual journal entry lines and supports risk-oriented audit analyses. An engagement-specific copilot uses context documents; generative AI enables additional analyses in natural language.[1734] [1735]Specific AI functions documented Detect posting risks · Prioritise conspicuous transactions · Analyse audit data in natural language AI evidence: [1734]Existing analytics platform with login and sales offering. The additional complete documentation of the statutory audit is explicitly announced on the features page only from 2027. Source check: 2026-10-15 |
| AudiriumAudit Suite; AQUA; CRAFT; GRIPHeadquarters: Netherlands [1738]Contact page names Audirium B.V., KvK 73543616 and a Dutch VAT identification number; the homepage explicitly describes the offering as a Dutch software platform.Audirium B.V.; Audirium BV; AQUA; Audirium Audit Suite; CRAFT; GRIP | Audirium develops its own software for internal audit, risk and compliance. Audit Suite combines risk-based planning, audit files, review and measures; AQUA supports the quality assessment of the internal audit function. | Audit Suite creates drafts of management, file and interview summaries as well as review notes. AQUA reads evidence and suggests a reasoned assessment with a source citation for each requirement. An assistant answers questions on audit standards; auditors confirm or reject the suggestions.[1736] [1737] [1738] [1739] [1740]Specific AI functions documented Summarise audit reports · Draft review notes · Analyse evidence · Suggest reasoned assessments · Query audit standards with sources AI evidence: [1736] [1737]Proprietary apps are licensed separately and also used in consulting services. Other modules such as DIVE and Modelio are labelled as beta on the tools page; the AI description here refers to Audit Suite and AQUA. Source check: 2026-10-15 |
| Audit CompassAudit Compass AIHeadquarters: Austria [1742]Legal notice names Audit-Compass.AI FlexCo in Vienna, company register number 662520w. The VAT ID given there appears to be a placeholder and was not adopted as verified.Audit-Compass.AI FlexCo; Audit Compass AI; Audit-Compass.AI | Audit Compass links data from ISO management systems with audit documentation and sustainability requirements. The platform is aimed at companies, management representatives and certification teams. | The vendor documents AI-supported risk and deviation detection as well as the identification of possible non-conformities. Analyses are logged and subject-matter reviews are confirmed by humans.[1741] [1742]Specific AI functions documented Analyse audit risks · Detect non-conformities · Prioritise deviations AI evidence: [1741]A pilot and a Premium package with AI risk analysis are offered. Enterprise with the full AI suite and predictive analysis is explicitly still announced; confirm the scope of delivery before procurement. Source check: 2026-10-15 |
| Audit SightAudit & Review Analytics / Audit SightHeadquarters: USA [1746]The provider confirms its operations in the USA. The LEI entry of Audit Sight, Inc. gives an address in Atlanta, Georgia.AuditSight; Audit Sight Inc.; FARS | Audit Sight supports external auditors in verifying financial transactions as well as in audit planning and analytical audit procedures. The offering processes general ledger and trial balance data and uses it to provide working papers, key figures and risk-oriented analyses. | The documented AI model Financial Anomaly Risk Score assesses postings in context and flags anomalies relating to financial reporting and internal controls. Adjustable materiality and deviation thresholds support the preparation of the audit scope and specific audit questions.[1743] [1744] [1745] [1746] [1747]Specific AI functions documented Prioritise conspicuous postings for the audit · Analyse risks in financial reports and controls · Support audit planning with traceable analyses AI evidence: [1744]Since September 2025, the product documentation has explicitly described Audit & Review Analytics as available to all Audit Sight subscribers. Function access is via the engagement dashboard. Source check: 2026-10-15 |
| AuditBrainAuditBrain Internal | Supports the planning, execution and documentation of internal audits. Risks, controls, findings, tests and reports are linked with the tracking of measures. | AuditBrain IA documents AI agents in production that read audit evidence, explain audit results and suggest risks, controls and work programmes. Documentation drafts remain linked to source documents and require human approval.[1748] [1749]Specific AI functions documented Analyse audit evidence on the basis of documents · Explain and document audit findings · Suggest risks, controls and work programmes AI evidence: [1749]According to the vendor, already in production; add-on to AuditBrain External Pro or Internal, usage-based credit quota and activation per user. No product test. Source check: 2026-10-14 |
| AuditHeroesFlowAuditor; Integra; InspectHeadquarters: Germany [1752]Product legal notice names AuditHeroes GmbH in Munich, HRB 296819. FlowAuditor and the module names are not counted separately.AuditHeroes GmbH; AuditHeroes AS; FlowAuditor; FlowAuditor Integra; FlowAuditor Inspect | FlowAuditor combines audit planning, risk assessment, execution and documentation for external audit, IT audit and internal audit. Inspect adds the analysis of accounting data to the core platform. | AI supports the mapping of different data sources, the analysis of audit-relevant documents and the creation of audit documentation. An agent can prepare sample sizes; scope, selection and the audit opinion remain with the auditor.[1750] [1751] [1752]Specific AI functions documented Analyse audit documents · Prepare audit documentation · Map data sources · Support sample planning AI evidence: [1750]The vendor describes SaaS, application hosting and on-premise deployment as well as the connection of customers' own AI providers. Current product texts were readable in the search index; direct retrievals of individual app pages did not return any extractable text. Source check: 2026-10-15 |
| AuditJetAuditJetHeadquarters: Austria [1754]DataWave GmbH, Vienna; company register 648990y, Commercial Court of Vienna; VAT ID ATU81934846.DataWave GmbH; AuditJet | Audit software for external auditors with accounting data analysis, sampling, voucher checking and exportable working papers. | AI assesses journal entries by risk and makes conspicuous items visible. Uploaded client vouchers are matched to the selected postings; findings and comments are included in working papers.[1753] [1754]Specific AI functions documented Assess journal entries by risk · Detect conspicuous postings · Match audit vouchers to postings AI evidence: [1753]Platform access, feature overview, prices and demo are offered. Subject-matter sampling and audit decisions are to be validated within your own audit approach. Source check: 2026-10-15 |
| AuditX / HiAAuditXHeadquarters: Japan [1757]HiA合同会社, Shibuya, Tokyo; the seller disclosure gives invoice registration number T7011003023146.HiA LLC; HiA合同会社; AuditX Japan | Software for internal audit with policy management, audit planning, working papers, evidence and tracking of measures. The focus is on Japanese financial institutions; general companies are also addressed. | AI breaks policies down by clause, refines audit programmes and matches evidence received against audit steps. It drafts conclusions and flags missing evidence; auditors confirm results and reports.[1755] [1756] [1757]Specific AI functions documented Refine audit programmes · Match evidence against audit steps · Draft audit findings AI evidence: [1755]Commercial cloud service with published subscriptions; trial access after consultation. General availability since July 2026 according to the provider. Source check: 2026-10-15 |
| AudomateAudomate Compliance AuditsHeadquarters: Poland [1759]DeepTech sp. z o.o., Warsaw, KRS 0001127965; product assignment and address in the Trust Center.DeepTech sp. z o.o.; Audomate | Regulatory audit software with documents, control checklists, prioritised gaps, tasks and reports for DORA, NIS2 and MiCA, among others. | AI compares uploaded policies, contracts and evidence with controls, produces a prioritised gap list and suggests supplementary documents. A source-referenced review chat supports the screening.[1758] [1759]Specific AI functions documented Check evidence against controls · Prioritise compliance gaps · Prepare documentation drafts AI evidence: [1758]The vendor describes a productive deployment at an insurer and a four-week pilot access. Free/Pro are listed for Q4 2026, Standard for Q2 2027; EU AI Act coverage is on the roadmap. Source check: 2026-10-15 |
| AudveraControls & EngagementsTerms of use name Audvera AI, Inc.; a company headquarters was not sufficiently documented. The choice of Delaware law is not treated as location evidence.Audvera AI, Inc.; auditplanner.app | Audvera links internal controls and audit engagements with a shared risk context. The workflows described range from audit planning and evidence processing to the preparation and approval of working papers. | The AI drafts risk assessments, control descriptions, audit procedures and preliminary test conclusions. The terms of use explicitly classify these outputs as preparatory work requiring review.[1760] [1761] [1762]Specific AI functions documented Draft risk assessments · Formulate controls and audit procedures · Prepare preliminary test conclusions AI evidence: [1760]Controlled pilot/design-partner access according to terms of use dated 28.07.2026, by invitation or agreement only. Public initial assessment is separate from product access. Homepage and contractual information on trial access differ; confirm the agreed scope. Source check: 2026-10-15 |
| CapItAllAuditNexia / Audytr AI / DataNexiaHeadquarters: India [1764]Capitall India Private Limited, Central Delhi; CIN U93090DL2019PTC354741.Capitall India Private Limited; AuditNexia; Audytr AI; DataNexia | Platform for internal audit, financial controls and continuous monitoring. Links audit planning, risk control matrices, tests, findings and reports across multiple entities. | Audytr AI agents read business documents and correlate data from multiple sources in order to check transaction populations and prepare exceptions with the associated evidence. Results feed into control overviews and risk analyses.[1763] [1764]Specific AI functions documented Evaluate business documents for control tests · Connect data sources for audits · Prepare control exceptions with evidence AI evidence: [1763]Commercial offering with a demo on the customer's own processes; Audytr AI and AuditNexia are offered together. Implementation, coverage and degree of automation are project-specific. Source check: 2026-10-15 |
| CasewareInternal Audit, IDEA, Validate and VerityCaseware; IDEA; Validate; Verity; Disclosure Checklist Agent | Internal Audit links governance and audit execution for internal audit teams. IDEA adds data analytics, full-population testing and anomaly investigations. Validate and Verity support financial statement audits and disclosure checklists. | Caseware Validate uses AI for arithmetic and consistency checks in financial statements. The Verity Disclosure Checklist Agent drafts evidenced answers to disclosure checklists; this agent is offered only for the USA.[1765] [1766] [1767] [1768] [1769]Specific AI functions documented Check financial statements for arithmetic errors and inconsistencies · Draft answers to disclosure checklists with source references AI evidence: [1767] [1768] [1769]Validate is documented as a product. Verity Disclosure Checklist Agent available only in the USA according to the vendor; other Verity agents in some cases only announced so far. No product test. Source check: 2026-10-14 |
| CircitCircit VerifyHeadquarters: Ireland [1771]Circit Limited; Circit Ltd; Audapio | Circit provides software for the independent obtaining and verification of financial evidence. The platform links confirmation requests, verified bank data and collaboration with clients. Transaction histories and balances support reconciliations, cut-off testing and further audit procedures. Results can be integrated into existing audit workflows, taking into account data provenance and the required access rights. | Circit Verify uses AI to extract counterparties and references from transaction data. AI-supported categorisation and proprietary matching support two-way and three-way reconciliations between bank data, general ledger and further evidence.[1770] [1771] [1772] [1773]Specific AI functions documented Extract counterparties and references from transactions · Categorise transaction data · Reconcile bank data, general ledger and further evidence AI evidence: [1770]Verify offering documented by the vendor; available data sources, bank connections and permissions determine the usable scope. No product test. Source check: 2026-10-14 |
| clueteccluetec Audit; Audit IntelligenceHeadquarters: Germany [1775]Legal notice names cluetec GmbH in Karlsruhe, Amtsgericht Mannheim HRB 109205.cluetec GmbH; cluetec Audit; mQuest Audit; Audit Intelligence | cluetec Audit manages internal, supplier, system and other quality audits, including capture, evaluation and actions. Audit Intelligence adds AI support to these workflows. | Audit Intelligence answers questions about audit reports, creates summaries and analyses images in the audit context. From findings and previously documented actions, the AI generates suggestions for corrective actions.[1774] [1775] [1776]Specific AI functions documented Query audit reports · Summarise audit reports · Evaluate audit images · Suggest corrective actions AI evidence: [1774]Integrated extension of the existing audit platform. The published AI privacy notices name Azure OpenAI and Azure AI Services; check the specific package and deployment. Source check: 2026-10-15 |
| ComplyonComplyon IT Audit; Complyon AIHeadquarters: Denmark [1777]Complyon Software ApS; Complyon IT Audit | Complyon supports IT audits with frameworks such as ISAE 3402 and ISO 27001 as well as requirements from NIS2 and DORA. Audit engagements link controls, evidence, audit plans and approvals. AI collects and organises evidence, creates draft audit plans and flags insufficient or contradictory evidence. Reviewed results then feed into reports based on the audit firm's templates. | Documented by the vendor: AI collects and organises audit evidence, drafts audit plans and flags insufficient or contradictory evidence. Reports are compiled from reviewed evidence and approvals.[1777] [1778]Specific AI functions documented Collect and assign audit evidence · Draft audit plans · Detect contradictions in evidence · Compile audit reports AI evidence: [1777]Documented as offered on the current product page, without any reference to a pilot or plans. Not tested in practice; agree integrations and frameworks. Source check: 2026-10-14 |
| ControlHatchControlHatchHeadquarters: USA [1780]Terms of use name Lawson Advisory Group LLC as the operator of ControlHatch with an address in Denver, Colorado.Lawson Advisory Group LLC; Lawson Advisory Group LLC d/b/a ControlHatch | ControlHatch supports SOX compliance and internal audits with risk control matrices, evidence requests, working papers, control tests and recurring attestations. Audits and exceptions are linked to the respective risks and controls. | According to the vendor, AI drafts risks, controls and audit-related assertions for a risk control matrix from a process description. Teams review and edit the draft together before adopting it.[1779] [1780]Specific AI functions documented Draft risks from process descriptions · Suggest controls and audit-related assertions · Prepare risk control matrices AI evidence: [1779]Registration is offered. Home page advertises fully free use, older terms also mention paid tiers; confirm package and AI usage limits before deployment. Source check: 2026-10-15 |
| CORAA AICORAA Internal AuditHeadquarters: India [1782]CauseConnect AI Solutions Pvt Ltd, Bellandur, Bangalore; CIN U62090KA2025PTC202597.CauseConnect AI Solutions Pvt Ltd; CORAA | Audit software for internal audit, risk control matrices, evidence requests, control tests, findings and reports. Links the ongoing audit with actions and status overviews. | AI formulates drafts of findings and management summaries from existing audit results. Narratives are marked as drafts and are flagged as outdated when the underlying controls or findings change; auditors decide on adoption.[1781] [1782]Specific AI functions documented Draft findings · Formulate management summaries · Prepare the wording of audit reports AI evidence: [1781]Commercial SaaS offering with login and free initial trial. AI narratives are optional; scope of modules and implementation are agreed. Source check: 2026-10-15 |
| CorteaCortea AI AuditHeadquarters: Germany [1784]Privacy policy names AI Audit Systems GmbH with an address in Berlin as the operator of cortea.ai.AI Audit Systems GmbH; Cortea; Cortea AI Audit | Cortea supports financial statement audit, IT audit and internal audit with audit planning, evidence management and controlled AI work steps. The product places results within the respective audit engagement. | AI agents check documents and samples against specified criteria, flag discrepancies and support completeness checks. They analyse evidence and prepare results that auditors confirm and sign off.[1783] [1784]Specific AI functions documented Analyse audit evidence · Detect contradictions in documents · Check completeness · Prepare audit results AI evidence: [1783]Product with demo and existing login. Check individual agents, criteria and supported audit methods within the scope of services offered. Source check: 2026-10-15 |
| DataSnipperDataSnipper / DocuMine / AlwinHeadquarters: Netherlands [1787]DataSnipper B.V.; DocuMine; Alwin by DataSnipper; UpLink | DataSnipper supports audit and finance teams in processing audit evidence within Excel and supplementary platform functions. Documents, answers and source locations are linked to one another. Auditors can trace, approve or reject suggested results. DocuMine supports in particular the structured review of multiple documents, for example for disclosure checklists and contract reviews. | DocuMine answers audit questions from multiple documents and refers to specific source locations. The AI suggestions are reviewed by subject-matter experts in the workflow, adjusted and approved.[1785] [1786] [1787]Specific AI functions documented Answer audit questions from multiple documents · Link suggested answers to evidence locations AI evidence: [1785]DocuMine documented as a usable product; review and approval by users. No product test. Source check: 2026-10-14 |
| DenkiDenki Assurance PlatformHeadquarters: USA [1789]The accelerator profile lists Denki as an active company in San Francisco. The exact contracting entity is not separately confirmed in the sources checked.Denki AI; Denki.ai | Denki is aimed at internal audit and control teams with SOX and other financial compliance programmes. The platform links audit planning, evidence, control tests and working papers and can supplement existing audit and ERP systems. | The founders' description at Y Combinator names AI-supported evidence collection, walkthrough interviews, control tests and the creation of traceable working papers. Control processes can be related to COSO.[1788] [1789]Specific AI functions documented Collect and structure evidence · Support control tests · Prepare working papers with audit trail AI evidence: [1789]Active accelerator company profile with demo access and a specific founders' description. The vendor's own homepage returned no readable content in the text retrieval; confirm contract scope and product access before procurement. Source check: 2026-10-15 |
| Digital AirwaysQuKI; ISO 9001 BuilderHeadquarters: Switzerland [1791]Legal notice names Digital Airways GmbH in Basel, CHE-325.993.118. QuKI and ISO 9001 Builder are products of the same vendor.Digital Airways GmbH; QuKI; ISO 9001 Builder | QuKI supports the ongoing operation of a quality management system with documents, internal and external audits, risks and actions. Digital Airways additionally offers an ISO 9001 Builder for setting up the system. | QuKI reads process documents and suggests standard-related audit questions. During audits, AI supports the summarising of findings and the preparation of the report. Management data can also be queried in natural language.[1790] [1791]Specific AI functions documented Create audit questions from process documents · Summarise audit findings · Draft audit reports · Query QM data AI evidence: [1790]Modular web offering with live demo. According to the vendor, AI runs via Azure AI; whether it can be switched off and the scope of services depend on the function. Source check: 2026-10-15 |
| FieldguideFieldguide / Field Auditor / Field AgentsHeadquarters: USA [1794]Fieldguide Inc.; Fieldguide.io; Field Agents; Field Auditor; Field Orchestrator | Fieldguide links audit planning, evidence requests, control tests, working papers and reports in one platform for audit and advisory teams. Incoming documents are assigned to a traceable audit workflow. Teams can work on samples, exceptions and associated evidence together. Configurable audit steps follow the methodology of the respective organisation and end with a subject-matter review. | Field Auditor analyses evidence, flags gaps and inconsistencies, performs documented control tests and prepares evidenced exceptions for review. Agent results are checked and approved by the team.[1792] [1793] [1794] [1795]Specific AI functions documented Analyse audit evidence for gaps and contradictions · Perform control tests with evidence · Document audit exceptions with supporting evidence AI evidence: [1793] [1792]Documented by the vendor as an agent platform in use; configuration according to audit methodology and subject-matter approval required. No product test. Source check: 2026-10-14 |
| GO SELLGO CHECKHeadquarters: France [1797]GOSELL SAS, trading as GO SELL, Neuilly-sur-Seine; RCS Nanterre / SIREN 890284961.GOSELL SAS; GO SELL; GO CHECK; GO ECOSYS; GO VISION; GO VERIFY | Mobile site audits and inspections for quality, safety and conformity with photo evidence, deviations and tracked actions. | The AI compares photos and videos with specified standards, assesses the degree of conformity and classifies deviations by risk. It recommends suitable actions from other sites.[1796] [1797] [1798]Specific AI functions documented Compare image evidence with standards · Classify deviations by risk · Suggest proven corrective actions AI evidence: [1796]GO CHECK is offered with trial access, published pricing and online sign-up. Confirm AI scope of services and operating variant for the specific deployment. Source check: 2026-10-15 |
| GRCfyGRCfy Maestro; Maestro LiteHeadquarters: India [1800]The privacy policy names GRCfy Technologies Private Ltd as the platform operator and a business address in RMZ Millenia Business Park, Chennai, Tamil Nadu, India.GRCfy Technologies Private Ltd; GRCfy Maestro; Maestro Lite | GRCfy Maestro manages audit planning, control assessments, evidence, findings and reports for companies and audit service providers. The platform supports multiple clients and the reuse of evidence across audits. | The optional AI analysis compares accepted evidence documents with individual audit controls, identifies requirement-related gaps and suggests remediation actions. Draft assessments must be confirmed by an auditor before they become part of the audit file.[1799] [1800]Specific AI functions documented Check audit evidence against controls · Identify control gaps with remediation actions · Prepare draft assessments AI evidence: [1799] [1800]Demo and free DPDP entry-level check are offered. The AI evidence analysis is optional and limited to subscription tiers enabled for it; the auditor triggers it and confirms the results. Source check: 2026-10-15 |
| Groupe LefebvreLefebvre Dalloz Auditsoft PremierHeadquarters: France [1802]Legal notice names Lefebvre Dalloz SAS with registered office in Courbevoie, RCS Nanterre 572 195 550, and Lefebvre Sarrut as the main shareholder. The group page assigns the French brand to Groupe Lefebvre.Groupe Lefebvre; Lefebvre Sarrut; Lefebvre Dalloz; Lefebvre Dalloz Logiciels; Auditsoft Premier; AUDITSOFT | Auditsoft Premier supports the planning, execution and documentation of financial statement audits. Audit programmes, risk consideration, working papers and reports are linked to one another and take French audit practice into account. | The vendor describes AI support for voucher and accruals/cut-off checks, consistency controls and the analysis of anomalies in social security reporting data. AI drafts and revises audit reports and adds explanatory comments. OCR functions are described separately.[1801] [1802] [1803]Specific AI functions documented Support voucher checks · Check data consistency · Analyse anomalies in reporting data · Draft and revise audit reports AI evidence: [1801]Existing licensed audit software with demo and documented AI functions. Check product modules and any additional options in the specific offer. Source check: 2026-10-15 |
| IntemicIntemic AI AgentsHeadquarters: Spain [1805]Platform privacy policy names Intelligent Chemistry, S.L., CIF B72532692, with registered office in Sant Cugat del Vallès, Spain. The public start-up directory of the Catalan business location agency confirms the assignment.Intelligent Chemistry, S.L.; Intelligent Chemistry SL; Intemic AI Agents | Intemic connects enterprise systems and documents for compliance, audit and quality processes. The platform prepares evidence packages, deviation reports, supplier dossiers and recurring regulatory evaluations for subject-matter approval. | AI agents read and consolidate data from ERP, QMS, document repositories and other sources. They create audit documentation with source references, support root cause analyses and draft corrective and preventive actions. Responsible persons review and approve the results.[1804] [1805] [1806]Specific AI functions documented Consolidate audit evidence · Draft audit documentation · Support root cause analyses · Draft corrective actions · Prepare supplier dossiers AI evidence: [1804] [1805]Platform offered with customer-specific integration and phased implementation. Privacy notices confirm external language model processing but still contain open information on model providers, subcontractors and processing locations; clarify these before procurement. Source check: 2026-10-15 |
| Irame TechIntelligent Risk Auditor (IRA)Headquarters: India [1809]Irame Labs Private Ltd, registered office New Delhi; CIN U22300DL2019PTC350901. Additional corporate office in Gurgaon.Irame Labs Private Ltd; IRAME.AI; Intelligent Risk Auditor; IRA | Software for data analytics, internal controls and audit automation. Reusable controls, evidence packages and exception tracking support internal audit and ongoing monitoring. | The AI agent IRA interprets natural-language audit instructions, maps data fields and analyses ERP exports and documents. Analysts can review and adjust processing steps and save them as reusable control tests.[1807] [1808] [1809]Specific AI functions documented Analyse audit data in natural language · Map data fields · Create control tests from analyses AI evidence: [1807] [1808]Commercial offering with demo and customer-specific implementation. Published case study references are in some cases still marked as available in future. Source check: 2026-10-15 |
| LitmusLENS / SCOUT / PEN / CHECKHeadquarters: United Arab Emirates [1812]Privacy notice names Litmus AI Labs Software Designing L.L.C, registered in Abu Dhabi, UAE.Litmus AI Labs Software Designing L.L.C | Specialised software for internal audit and assurance: document research, risk-based audit planning, findings, reports and follow-up. | AI reads policies, procedures and earlier audit reports, answers questions with document and page references and shows contradictions. It drafts audit plans and reports from reviewed findings; approvals remain with auditors.[1810] [1811] [1812]Specific AI functions documented Search audit documents with sources · Detect contradictions and control gaps · Draft audit plans and reports AI evidence: [1810]Commercial offering with product demo and own, managed or isolated deployment. Published sample outputs are explicitly based on synthetic demonstration documents. Source check: 2026-10-15 |
| LOKIQNORMARISHeadquarters: Germany [1813]Product page names LOKIQ GmbH in Munich, HRB 310574, and explicitly names NORMARIS as its own product.LOKIQ GmbH; NORMARIS; Normaris | NORMARIS is aimed at internal audits of IFS broker companies. The product is intended to bring existing evidence, audit notes, gap indications and draft reports together in one workflow. | The announced AI supports the mapping of evidence to audit requirements, points out missing or unclear documents and formulates draft reports. Subject-matter assessment and approval remain with the auditors.[1813]Announced or in development Map audit evidence · Detect documentation gaps · Draft audit reports AI evidence: [1813]Validation phase before the general launch: free practice-partner tests with early access are offered. Therefore conservatively listed as announced; no general market availability assumed. Source check: 2026-10-15 |
| MindBridgeMindBridge AI / Transaction Risk AnalyticsHeadquarters: Canada [1815]MindBridge Analytics; MindBridge AI; Ai Auditor; Transaction Risk Analytics | MindBridge analyses financial transactions to support financial statement audits, internal controls and the monitoring of financial risks. The platform assesses transactions on the basis of combined audit characteristics and makes unusual patterns visible. Audit and finance teams can investigate conspicuous entries in a targeted way and incorporate the results into their risk-based audit planning and control work. | MindBridge combines machine learning with statistical methods and rules in order to detect unusual transaction patterns and prioritise financial risks for audits. Not every individual control point is therefore itself an AI method.[1814] [1815] [1816]Specific AI functions documented Detect unusual patterns in financial transactions · Prioritise transaction risks for audits AI evidence: [1814]Documented by the vendor; use in audit and control workflows. No product test. Source check: 2026-10-14 |
| NCS SoftSolutionseTHICNCS SoftSolutions; eTHIC | Digitalises audit and compliance processes, in particular for banks and insurers. Configurable checklists, data analytics and audit frameworks are combined with industry-specific audit modules. | For eTHIC C-Life, NCS describes AI for evaluating supplier due diligence, highlighting contract risks and supporting supplier assessments.[1817]Specific AI functions documented Evaluate supplier due diligence data · Highlight contract risks · Support supplier assessments with AI AI evidence: [1817]Documented by the vendor for eTHIC C-Life; no product test. Source check: 2026-10-14 |
| nextAuditAuditCloud / KIRAHeadquarters: Germany [1820]nextAudit GmbH, Aachen, HRB 23192, Amtsgericht Aachen.nextAudit GmbH; nextAudit UG; AuditCloud; KIRA | Audit management for planning, execution, findings, actions and reports. KIRA supports the evaluation of existing audit information. | KIRA detects similar findings across areas and languages, suggests actions and maps findings to requirements. Earlier audit data feeds into the current audit.[1818] [1819] [1820] [1821]Specific AI functions documented Detect similar audit findings · Suggest actions · Map findings to requirements AI evidence: [1818] [1819]KIRA is offered with a demonstration; a vendor report from September 2024 already describes its use in audits. Confirm the specific functional scope in the AuditCloud offering. Source check: 2026-10-15 |
| OP.Serv (ROK Solution)ROK RiskHeadquarters: France [1824]ROK Solution; ROK; ROK Risk; OP.Serv | ROK Risk supports the preparation, execution and evaluation of internal audits as well as the subsequent tracking of actions. Dynamic risk maps and key figures supplement the audit workflows. The solution is part of a platform for process automation and access rights management, which allows audit tasks to be linked to roles and organisational responsibilities. | ROK Solution describes AI support for creating audit processes and risk reference frameworks in its no-code platform. Users describe their requirements; configurable process drafts are generated from them.[1822] [1823] [1824]Specific AI functions documented AI-supported drafting of audit processes · Creation of risk reference frameworks AI evidence: [1822]AI support for no-code configuration documented by the vendor; adaptation to own workflows required. No product test. Source check: 2026-10-14 |
| OxusOxus Internal Audit PlatformHeadquarters: USA [1827]The active accelerator profile names San Francisco; the privacy policy refers to the provider as Oxus AI, Inc. Not to be confused with Oxus Acquisition Corp.Oxus AI; Oxus AI Inc.; Oxus, Inc. | Oxus links audit planning, process documentation, control tests and reporting for internal audit and SOX teams. The platform manages evidence, risk control matrices, working papers and the tracking of identified deficiencies. | The AI creates process descriptions and flowcharts from walkthrough recordings, tests controls against evidence and prepares audit reports. The evaluation of SOC reports and the mapping to user-side controls are also documented. Auditors retain review and approval.[1825] [1826] [1827]Specific AI functions documented Create process documentation from walkthroughs · Test controls on the basis of evidence · Evaluate SOC reports and document findings AI evidence: [1825]Specific product modules and demo access documented. The accelerator profile mentions the onboarding of early customers; the contractually available module scope needs to be confirmed. Source check: 2026-10-15 |
| PetualPetual SOX TestingHeadquarters: USA [1829]The privacy policy explicitly names the headquarters in San Francisco, California, USA.Petual Inc.; Petual AI | Petual supports companies and audit firms with SOX and internal control testing. The starting point is existing risk control matrices, test procedures and evidence; results and deviations are brought together in working papers for review and remediation. | AI agents read and structure evidence, map it to controls and samples and perform defined test procedures. The vendor describes annotated evidence, the examination of complete data populations and the highlighting of conspicuous matters. Human review remains part of the workflow.[1828] [1829] [1830]Specific AI functions documented Map evidence to controls and samples · Perform defined control tests · Prepare working papers and deviations AI evidence: [1828]Vendor offers demo and control tests on request; specific workflows are described. Confirm licence, integration and deployment scope before procurement. Source check: 2026-10-15 |
| proISMSproISC@Headquarters: Germany [1832]proISC@; proISMS GmbH | proISC@ supports the planning, execution and documentation of information security audits. The application organises audit criteria and audit topics, takes qualifications into account when putting together the audit team and records findings during the audit. Audit reports and deficiency lists are produced from these. Own criteria catalogues can be imported; named areas of use include ISO 27001, IT-Grundschutz, KRITIS and TISAX. | The product and company pages checked describe guided audit workflows, audit bases and report documentation. A specific AI work step within proISC@ is not documented in this scope of sources.[1831] [1832] [1833] [1834]Not specifically documented in the source check Product page, company page and targeted AI search checked. Standardised answers and planned benchmarks alone are not evidence of an AI function. Sources checked: [1831] [1834]AI availability cannot be determined within the scope of public sources checked. No product test. Source check: 2026-10-14 |
| PwC DeutschlandKIRA (Knowledge IntegRation Assistant)Headquarters: Germany [1837]PwC; PwC Deutschland; PricewaterhouseCoopers GmbH Wirtschaftsprüfungsgesellschaft; KIRA; Knowledge IntegRation Assistant; KIRA as One | KIRA is SaaS audit software offered by PwC Germany for internal audit and compliance. Users upload documents, select predefined or their own checklists and receive analyses with source references. The solution supports design audits, document-based control tests, service provider monitoring and self-assessments. A central directory of own use cases enables the repeated use of defined work programmes. | KIRA analyses documents on the basis of customisable audit programmes, extracts relevant information and compares requirements with policies or control evidence. The AI creates suggested answers and summaries and flags deviations with reference to the source document. Control tests presuppose existing documented evidence.[1835] [1836] [1837]Specific AI functions documented Analyse documents on the basis of audit checklists · Compare policies with regulatory requirements · Check control evidence on a document basis · Summarise audit reports and highlight deviations AI evidence: [1835]Documented by the vendor; not tested in practice Source check: 2026-10-14 |
| QualityReadyQualityReady AuditmanagerHeadquarters: Germany [1840]QualityReady UG (hb); QualityReady Auditmanager | QualityReady offers browser-based software for audit planning, execution and action tracking. Own and predefined questionnaires support internal and external audits as well as self-assessments. Findings, responsibilities and deadlines remain linked in the same system. The Auditmanager adds draft reports, assessment suggestions and support in reviewing submitted corrective actions to this workflow. | The Auditmanager uses Azure OpenAI for audit reports from answers and notes, assessment suggestions for audit questions, mapping of deviations and reasoned assessments of submitted actions. Those responsible in the specialist areas can use the suggestions for their decisions.[1838] [1839] [1840]Specific AI functions documented Draft audit reports from answers and notes · Assess audit questions on the basis of comments · Map deviations to audit questions · Assess actions with reasoning AI evidence: [1839]Vendor describes the functions as productive; connection via Microsoft Azure OpenAI, named on the page as GPT-4o. No product test. Source check: 2026-10-14 |
| Regulatory Intelligence Compliance SolutionsGAIA and GAIA | RIAHeadquarters: USA [1841]The vendor website names Regulatory Intelligence Compliance Solutions Inc. and a contact address in Ramsey, New Jersey. RICS, GAIA and GAIA | RIA are combined in one entry.RICS; Regulatory Intelligence Compliance Solutions Inc.; Global Artificial Intelligence Auditor; GAIA; GAIA RIA; GAIA | RIA | Regulatory Intelligence Compliance Solutions develops software for compliance audits and financial market compliance. GAIA | RIA targets the planning, execution and documentation of annual compliance reviews at US investment advisers. | The specific product announcement describes AI for planning and conducting the Annual Review and for documenting the results. For GAIA | RIA, human control steps are explicitly named; product access is still listed as Early Access.[1841] [1842] [1843]Specific AI functions documented Plan compliance reviews · Perform audit steps with AI support · Document Annual Review results AI evidence: [1843] [1842]Early access programme since January 2026, extended according to an announcement of 8 July 2026 and already used by early access customers. General availability not documented. No blanket promise of fully autonomous or legally binding correct audits. Source check: 2026-10-15 |
| RINAADAM by RINAHeadquarters: Italy [1845]RINA S.p.A., headquarters Via Corsica 12, Genoa; company register and VAT no. IT03794120109.RINA S.p.A.; ADAM by RINA; ADAM | Browser-based platform for internal ISO audits: audit plan, documents, checklists, interviews and report with gap analysis. | ADAM generates questions from the uploaded documents, searches for answers with source locations and flags gaps. Asynchronous interviews supplement the evidence; the report structures conformity status and missing elements.[1844] [1845]Specific AI functions documented Create audit checklists from documents · Map evidence and gaps · Prepare audit reports with gap analysis AI evidence: [1844]RINA describes ADAM as operational and tested internally; a demo is offered. Additional ISO standards are in some cases only announced so far. Final assessment and approval remain with the auditor. Source check: 2026-10-15 |
| RozRoz Audit & AdvisoryHeadquarters: USA [1847]Contracting party Hampton Innovations Incorporated; legal contact Newark, Delaware, according to the terms of use.Hampton Innovations Incorporated d/b/a Roz | Roz links evidence collection, control mapping and audit processing for audit and advisory teams. Existing policies, configurations and documents can be linked to own frameworks and control requirements. | AI agents map collected evidence to controls and support the search for gaps. Ask Roz answers questions about policies, controls and evidence with references to the documents used.[1846] [1847]Specific AI functions documented Map evidence to controls · Identify gaps between requirements and evidence · Answer questions on policies and evidence AI evidence: [1846]Demo and contractually delimited trial/production offerings. The terms of use generally limit trial data to approved sample or synthetic content; check the functional scope in the offer. Source check: 2026-10-15 |
| RunAuditIT audit platformHeadquarters: Ireland [1848]Provider names Dublin and, in the footer, RUN Audit Ltd with the addition trading as Cyb3rboard GRC Ltd. CYB3RBOARD GRC LIMITED is listed in the Irish CRO new incorporations report under 774953; confirm the exact contracting entity.Run Audit; RUN Audit Ltd; Cyb3rboard GRC Ltd; CYB3RBOARD GRC LIMITED | Specialised software for internal and external IT auditors. Links audit documentation with controls of multiple frameworks and supports gap analysis, actions and editable audit reports. | AI reads and indexes uploaded evidence, maps it to controls and supports mapping across multiple frameworks. It flags possible gaps and suggests remediation actions.[1848] [1849]Specific AI functions documented Evaluate audit evidence · Map evidence to controls · Suggest gaps and remediation actions AI evidence: [1848]Software platform offered with demo request; supplementary audit services for selected customers. Licence scope and deployment available on request. Source check: 2026-10-15 |
| SANNOSSANNOS AI Compliance ManagerHeadquarters: Denmark [1851]Provider page names SANNOS ApS with an address in Græsted, Denmark. CoreStream GRC is presented as a partner, not as an identical provider.SANNOS ApS; E-V-E AI | SANNOS checks policies, contracts and control evidence against defined criteria. Findings remain linked to their source material and can be used for control tests, supplier audits and internal audits. | The AI analyses the relevance of evidence, maps it to controls and identifies insufficiently evidenced requirements. Subject-matter reviewers confirm findings or document divergent assessments.[1850] [1851] [1852] [1853]Specific AI functions documented Check control evidence · Map evidence to requirements · Identify gaps and exceptions AI evidence: [1850]Product briefing and commercial service agreements offered. Confirm specific frameworks, audit rules and mode of operation in the offer. Source check: 2026-10-15 |
| SkeptaSkepta Audit Platform, AI Analyst and Ask SkeptaA regional website for India does not document a legal headquarters assignment. Legal entity and headquarters are not conclusively documented in the primary sources checked; no assignment to the British company of the same name.Skepta AI; Ask Skepta; Skepta AI Analyst | Skepta bundles audit planning, information requests, findings, responses and action tracking for internal audit teams. Approvals and the review of implemented actions remain within the documented audit process. | According to the product description, Skepta AI Analyst performs audit data analyses and documents the audit steps. Ask Skepta answers questions about the audit inventory. Data sets, thresholds and working papers are reviewed and approved by named persons.[1854] [1855]Specific AI functions documented Analyse audit data · Prepare audit steps and working papers · Query audit inventory in natural language AI evidence: [1854]Demo and plans with included AI assistant described. Product functions are documented; confirm legal entity, contractual terms and productive access separately. Source check: 2026-10-15 |
| Skeptics.aiSkeptics.ai SOX & ICFR PlatformHeadquarters: USA [1859]The company's own profile names Bellevue, Washington, USA. The exact contracting entity is not separately confirmed in the sources checked. Independent brand and domain; not to be equated with Skepta in the inventory.Skeptics AI; SKEPTICS; Skeptics.ai SOX | Skeptics.ai combines software and supplementary managed services for SOX compliance and internal controls over financial reporting. The platform covers audit scope, risk control matrices, tests, deficiency tracking and management reports. | The AI evaluates trial balances, annual reports and policies in order to narrow down audit-relevant entities, accounts and business processes. The provider also describes the analysis of complete data populations to prioritise particularly high-risk matters.[1856] [1857] [1858] [1859]Specific AI functions documented Derive audit scope from financial data and policies · Identify high-risk items in data populations · Support SOX and ICFR audit workflows AI evidence: [1856]Public product page, login access and demo request available; software and managed services are offered in combination. Confirm specific modules and contract scope. Source check: 2026-10-15 |
| SOX-AISOX-AI Audit AutomationHeadquarters: Israel [1861]The legal notice names SOX-AI Ltd., Raanana, Israel, as parent company and operator of the English website. SOX-AI GmbH in Munich is a subsidiary; no European group headquarters is derived from this.SOX AI; SOX-AI Ltd.; SOX-AI GmbH | SOX-AI offers a platform for SOX control programmes with test execution, evidence processing and audit documentation. The provider works with existing test plans and describes the connection to internal IT systems. The Israeli group includes a German subsidiary. | According to the vendor, a language model supports the execution of SOX tests on structured tables and unstructured documents. The platform combines this processing with predefined audit logic and documents results with test and decision logs.[1860] [1861] [1862]Specific AI functions documented Support SOX tests from existing test plans · Process structured and unstructured evidence · Record test decisions and audit documentation traceably AI evidence: [1860]Public product description with demo request. Clarify scope of available tests, human approvals and contracting entity before procurement. Source check: 2026-10-15 |
| SumeruAudit360Headquarters: India [1863]The current product footer names Sumeru Technology Solutions Private Limited with a corporate office in Bengaluru; the older privacy policy names Sumeru Software Solutions. Both are listed under Sumeru; a legal change of name is thus not conclusively documented.Audit360; Audit 360; Knowledge360; Sumeru Technology Solutions Private Limited; Sumeru Software Solutions Pvt. Ltd.; Sumeru Software Solutions Private Limited | Audit360 supports internal audits from planning through checklists and digital evidence to the follow-up of findings. Audit teams can evaluate risks, create reports and track results across multiple sites. In addition, Knowledge360 offers a search function for internal audit knowledge; managed audit services are offered separately. | According to the vendor, Knowledge360 uses AI and machine learning to make content in videos of internal audit knowledge searchable.[1863] [1864]Specific AI functions documented Search audit knowledge within video content AI evidence: [1863]Documented by the vendor as Knowledge360; package scope not specified. No product test. Source check: 2026-10-14 |
| SupervizorSupervizor Financial Risk Discovery & MonitoringHeadquarters: USA [1867]SUPERVIZOR CORP | Supervizor supports internal audit and financial control through ongoing analyses of financial transactions. The software combines ERP data with predefined controls, prioritises anomalies by risk and supports investigations, task allocation and documented findings. The focus is on audit analytics, fraud detection and continuous controls in financial processes such as purchasing, sales, general ledger and travel expenses. | Supervizor supplements financial controls with unsupervised machine learning and language models in order to detect hidden risks and trends in transaction data. The results feed into a prioritised review of conspicuous transactions.[1865] [1866] [1867]Specific AI functions documented Detect hidden risks and patterns in financial transactions · Prioritise conspicuous transactions for audit and control AI evidence: [1866]Documented by the vendor; not tested in practice. Source check: 2026-10-14 |
| TrentaTrenta Audit ExecutionHeadquarters: USA [1870]Contact address San Francisco according to the website terms and conditions; privacy policy names Trenta, Inc. Legal information is not fully worked out.Trenta, Inc. | Trenta supports IT audits and compliance audits for SOC 2, ISO 27001 and PCI DSS, among others. The software works with existing document repositories, GRC tools and working papers instead of requiring a complete changeover of the audit process. | AI agents analyse evidence, perform described control tests and write results into working papers. Draft reports with source references are produced from test results; consistency checks compare reports with notes and evidence.[1868] [1869] [1870]Specific AI functions documented Prepare and perform control tests on the basis of evidence · Create working papers and draft reports · Flag discrepancies between reports and evidence AI evidence: [1868]Vendor names ongoing audit engagements and offers demonstrations. Check functions and approvals using own test cases. Website terms and conditions still contain placeholders for the choice of law; check binding product terms separately. Source check: 2026-10-15 |
| TrullionTrullion Internal Audit and TrulliHeadquarters: Israel [1873]The privacy policy explicitly designates Israel as the headquarters; it also names a contact address in New York. Provider is Trullion Ltd.; no European assignment derived from European customer coverage.Trullion Ltd.; Trulli; Trulli Agents | Trullion offers a workspace for internal and external audits, control tests, reconciliations and evidence. The entry relates to audit and control functions, not to the general accounting also offered. | The vendor describes AI-supported evidence collection, data reconciliations and control tests across complete data populations. The assistant Trulli researches uploaded documents; results are linked to sources and reviewed by humans before decisions are made.[1871] [1872] [1873]Specific AI functions documented Support control tests and evidence collection · Reconcile data and detect exceptions · Answer audit questions on the basis of documents AI evidence: [1871] [1872]Commercial audit platform with sign-up, demo and product tours. Check control coverage, integrations and accessible agents in the desired package. Source check: 2026-10-15 |
| Valid8 FinancialValid8 Verified Financial IntelligenceHeadquarters: USA [1877]The contact page names Boulder, Colorado, and Seattle, Washington. Valid8 Financial, Inc. is named as the provider in the privacy policy.Valid8; Valid8 Financial Inc.; Verified Financial Intelligence | Valid8 Financial prepares financial evidence for audits, forensic investigations and the investigation of suspicious payment flows. The software links bank records and accounting data to traceable transactions; a partnership supplements Thomson Reuters audit workflows. | The vendor describes AI-supported extraction of financial evidence and prompt-based categorisation of transactions. Auditors can specify categories on the basis of payee, amount, date or description. The assignments are logged and carried over into evaluations; original evidence is retained.[1874] [1875] [1876] [1877] [1747]Specific AI functions documented Structure financial evidence for audits · Categorise transactions on the basis of specified criteria · Create traceable data foundations for fraud investigations AI evidence: [1875] [1876]Product access, demo and the Prompt Categorization function are publicly documented. The Thomson Reuters announcement describes an available integration for evidence verification; confirm scope per contract. Source check: 2026-10-15 |
| Vero AIVero AI Audit Platform / SOX TestingHeadquarters: USA [1880]The terms of use name Vero AI, Inc. as the operator and North Carolina, USA, as the location. Not to be confused with AI products of the same name from other vendors.Vero AI Inc.; Vero AI SOX | Vero AI offers software for evaluating audit evidence and automating control tests. The SOX offering is aimed at internal audit, control owners and audit and advisory firms; further compliance frameworks can be included. | The documented AI agents read evidence, map it to controls, check requirements and flag gaps or exceptions. Further agents prepare traceable working papers, quality reviews and draft reports; results are made available for human review.[1878] [1879] [1880] [1881]Specific AI functions documented Map evidence to controls · Detect control deviations with source references · Prepare working papers and reports AI evidence: [1878]Product description, demo and SOX pilot offering publicly documented. The specific production and licence scope must be confirmed in the offer; a pilot offering is not a blanket guarantee of availability for all functions. Source check: 2026-10-15 |
| ZenyaZenya DOC, FLOW, AUDIT, CHECK and RISKHeadquarters: Netherlands [1883]Infoland; Infoland B.V. | Zenya links document control, incident reporting, audits, inspections and risk management with a strong focus on healthcare. Quality and safety teams can work on procedures, actions and risks together. The vendor, formerly known as Infoland, additionally offers functions for information security and collaboration between institutions. | Zenya AI Chat answers questions about the organisation's own policies, procedures, forms and reports with source references. It summarises information from multiple documents and explains it in the context of the query.[1882] [1883] [1884] [1885]Specific AI functions documented Answer questions on internal policies with sources · Summarise procedures and requirements from multiple documents AI evidence: [1885]Paid add-on to an existing Zenya environment; central activation as well as user and document permissions. No product test. Source check: 2026-10-14 |
EHS, quality & ESG governance
26 entries
| Provider / product | Documented focus | AI functions and classification |
|---|---|---|
| AssentSupply Chain Sustainability PlatformAlso known as Assent Compliance. | Bundles supplier and product data for regulatory requirements in manufacturing. Supports evidence for product compliance and sustainability in supply chains. | Assent describes generative AI for extracting, classifying and validating supplier declarations, as well as AI-supported matching of customer enquiries with the product catalogue for product and supply chain compliance.[1886] [1887] [1888] [1889]Specific AI functions documented Extract compliance information from supplier declarations · Classify declaration documents and prepare them for validation · Map compliance enquiries to matching products in the supplier catalogue AI evidence: [1888] [1889]Functions Agentic Network Submissions and Automated Part Matching documented by the vendor; extracted values can be reviewed, corrected or discarded. No product test. Source check: 2026-10-14 |
| Benchmark GensuiteRegulatory Compliance & Auditing | Links site-related compliance programmes, assessments and actions with environmental permits and audits. Supports the assignment and tracking of obligations. | Benchmark Gensuite's Genny AI Permit Agent reads permit documents and structures conditions, compliance obligations and deadlines from them. The vendor describes their transfer into permit and deadline workflows as well as drafts for audit and escalation workflows.[1890] [1891]Specific AI functions documented Extraction of permit obligations · Preparation of compliance deadlines · Drafts of audit and escalation workflows AI evidence: [1891]Agent in the permit and compliance workflows documented by the vendor; check the specific licence scope. No product test. Source check: 2026-10-14 |
| BizzmineBizzmine QHSEHeadquarters: Belgium [1893]Inception; Sercle Software; Incerta; VARIO | Bizzmine links quality management, occupational health and safety and environmental processes in a configurable platform. Audits, incidents, risks, corrective actions, documents and compliance tasks are managed across sites. The subject-matter focus is on operational QHSE processes in regulated industries such as pharmaceuticals, chemicals, logistics and industrial manufacturing. | Bizzmine describes AI support for researching audit documents, root cause analysis of incidents and the prioritisation of risks. According to the product page, the functions are embedded in audit, CAPA and risk workflows.[1892] [1893] [1894] [1895] [1896] [1897]Specific AI functions documented Research audit documents · Support root cause analysis · Prioritise risks and patterns AI evidence: [1896]Documented by the vendor; individual licence and configuration limits are not fully specified on the page checked. No product test. Source check: 2026-10-14 |
| CompgovaCompgova Compliance WorkspaceHeadquarters: Australia [1900]Contractual terms name Omphalos Technology Pty Ltd as the operator and Queensland, Australia, as address and place of jurisdiction.Omphalos Technology Pty Ltd | Compliance workspace for Australian operational, safety, food and environmental obligations with risks, documents, actions, inspections and evidence. | AI analyses uploaded documents, extracts metadata and summaries, suggests relevant regulations and assesses obligations on the basis of existing tasks, evidence and risks. A context-aware assistant answers compliance questions.[1898] [1899] [1900]Specific AI functions documented Classify and summarise compliance documents · Suggest relevant regulations and obligations · Check evidence for gaps against obligations AI evidence: [1898] [1899]Commercial cloud platform with free trial period. AI results must be checked by the user; contractual terms exclude legal advice. Source check: 2026-10-15 |
| CorityOne | CorityOne links environmental, health, safety, quality and sustainability processes. | Cortex AI extracts obligations, limit values and deadlines from permits, analyses audit histories for recurring problems and, after incidents, suggests findings as well as corrective and preventive actions.[238] [239]Specific AI functions documented Extract obligations and deadlines from permits · Detect recurring audit problems and risk hotspots · Prepare findings from incident context · Suggest corrective and preventive actions AI evidence: [239]According to the vendor, available within CorityOne; switched off by default and can only be activated after accepting the AI contractual terms. Individual agents can be switched off administratively; no product test. Source check: 2026-10-14 |
| DigitalisoAMMIRA / NavigatorHeadquarters: Italy [1902]QSA.net Srl, Via C. Pizzi 2, 23900 Lecco; P.IVA 10634300965.QSA.net Srl; Digitaliso; AMMIRA; ISO Navigator; HSE Navigator; NC Navigator | Software for ISO management systems, documentation, legal requirements, deviations and internal audits. | AMMIRA answers questions from internal procedures, checks the consistency of documents and supports documentary evidence. HSE Navigator structures applicable obligations and deadlines; NC Navigator supports root cause analysis.[1901] [1902]Specific AI functions documented Extract audit evidence from documents · Structure HSE obligations · Analyse causes of deviations AI evidence: [1901]The AI tools are described as integrated into Digitaliso. Consultation and product demonstration are available; agree modules and scope. Source check: 2026-10-15 |
| EcoOnlineEHS / Audit ManagementHeadquarters: Norway [1906]The official Brønnøysund entry names EcoOnline AS (982263700) with business address Pilestredet 33, Oslo, Norway and refers to ecoonline.com. This documented provider legal entity is the basis for the country assignment; no conclusion about all group companies. Geography checked on 15.10.2026; no inference about hosting or owners from the headquarters. | Supports audits and inspections in environment, health and safety. Links findings with activities and follow-up across sites. | EcoOnline Assist checks the completeness of information in EHS investigations and risk assessments and gives context-related guidance for better documentation. The vendor describes the assistance as available; decisions remain with the user.[1903] [1904] [1905] [1906]Specific AI functions documented Support EHS incident investigations with guidance · Detect gaps in risk and safety documentation · Summarise EHS records in context AI evidence: [1904] [1905]Assist is described as currently available in EcoOne. Insights/Actions are listed as coming on the AI page checked. No product test. Source check: 2026-10-14 |
| IANClicIANClic QSE & RSEHeadquarters: France [1908]The company profile in the incubator EuraTechnologies' own start-up directory links IANClic and ianclic.com with 7 Rue Augustin Drapiez, Lille. The exact legal entity was not confirmed from an accessible vendor legal notice.IANClic; IANCLIC | IANClic offers software for quality, safety, environmental and sustainability requirements. It links documents and processes with normative requirements, non-conformities, corrective actions and their follow-up. | AI analyses regulatory and internal documents for gaps, classifies non-conformities and suggests corrective actions. Documents can be revised on the basis of the results. A specialised assistant answers questions on QSE and RSE requirements; changes require human confirmation.[1907] [1908] [1909]Specific AI functions documented Analyse normative documents · Classify non-conformities · Suggest corrective actions · Revise compliance documents · Answer normative questions AI evidence: [1907]Offered as operational SaaS with demo. Direct page text was technically restricted; functional description traceable in the vendor's search index and in the incubator profile. No efficiency or conformity guarantees adopted. Source check: 2026-10-15 |
| IntegrityNextIntegrityNext PlatformHeadquarters: Germany [1912]Integrity Next GmbH; Munich, Germany; HRB 228797. US company additionally listed separately. | Links supplier assessments, risk analysis, due diligence obligations and actions. Supports collaboration and evidence management in the supply chain. | IntegrityNext documents AI for reconstructing multi-tier supply chains, risk prioritisation of suppliers, pre-filling and checking supplier responses and classifying regulatory changes.[1910] [1911]Specific AI functions documented Uncover supplier networks and dependencies · Prioritise suppliers on a risk basis · Pre-fill and check supplier responses · Classify regulatory changes AI evidence: [1911]Vendor explicitly describes these functions as currently available; critical decisions remain subject to review. No product test. Source check: 2026-10-14 |
| MetrikflowISO Compliance SoftwareHeadquarters: Germany [1914]MetricFlow UG, Berlin, HRB 246981 according to the legal notice. The spelling of the brand name Metrikflow differs from that of the legal entity.MetricFlow UG; Metrikflow ISO Compliance | Software for ISO management systems, audits, deviations and corrective actions. Bundles documents, risks, evidence, responsibilities and dates for quality, environmental and occupational health and safety standards, among others. | AI analyses uploaded documents and evidence, extracts relevant information and supports drafts of policies and procedures. It helps check the processing status against ISO requirements and points out changes.[1913] [1914]Specific AI functions documented Extract information from evidence · Draft policies and procedures · Check the fulfilment status of ISO requirements AI evidence: [1913]ISO product offered with demo and trial access. Confirm module and AI scope as well as the standards supported in each case in the offer. Source check: 2026-10-15 |
| Neuros Distribution (1-One)1-OneHeadquarters: France [1916]1-One; 1-ONE; Neuros; Neuros SAS | 1-One is specialist software for occupational health and safety and the prevention of occupational risks. It supports the French hazard register DUERP, preventive measures, occupational accidents, occupational diseases and chemical risks. The platform is aimed at companies and public bodies with multiple sites and specialised health and safety processes. | No specific AI function for occupational health and safety and risk management is documented in the source check. The automatic generation of DUERP and prevention reports from entered data is not in itself AI evidence.[1915] [1916] [1917]Not specifically documented in the source check Vendor description, function page and targeted search for artificial intelligence checked. The classification is limited to these sources and is not proof of absent AI. Sources checked: [1915] [1917]No specific AI-in-GRC function documented in the vendor sources checked. Source check: 2026-10-14 |
| NOVASLANNOVYSTA QHSEHeadquarters: France [1920]NOVASLAN SAS, registered office Saint-Jean-du-Falga; RCS Foix / SIREN 939876876.NOVASLAN SAS; NOVYSTA; NOVYSTA QHSE | QHSE SaaS for mobile audits, photo findings, deviations, hazard documentation and action tracking. | According to the vendor, the integrated AI assistant creates audit reports and suggests corrective actions. Audit findings, photos and actions are handled in the same QHSE workflow.[1918] [1919] [1920]Specific AI functions documented Draft audit reports · Suggest corrective actions AI evidence: [1918] [1919]NOVYSTA QHSE is offered as available with trial access and pricing plans. Confirm the exact AI features of the selected plan as well as the model and hosting configuration before concluding a contract. Source check: 2026-10-15 |
| NovistoESG PlatformPart of the Minimum provider group since March 2026. | Supports the capture, approval and publication of ESG data. Audit trails and evidence make it easier to prepare for external audits. | Novisto AI supports the mapping of ESG import data, detects data anomalies and drafts reports with traceable sources. A natural-language search makes existing sustainability data and information accessible.[1921] [1922] [1923] [1924]Specific AI functions documented Field mapping for ESG data imports · Detection of data anomalies · Drafts for sustainability reports · Natural-language research in ESG data AI evidence: [1924]According to the vendor, included for all customers in the platform subscription. Functions and user access configurable; suggestions are reviewed and confirmed before being adopted. No product test. Source check: 2026-10-14 |
| NulogyQuality & Compliance / AuditComplyAuditComply part of Nulogy since 14 October 2025. | Links audits, inspections, non-conformities and corrective actions for manufacturing companies. The offering, supplemented by AuditComply, covers quality, EHS and supplier compliance with mobile evidence and cross-site audit workflows. | The AI Document Scanner in Quality & Compliance analyses uploaded supplier documents and outputs an assessment in order to identify documents requiring manual review. The evidence relates to this document process; the general Nora assistant is not attributed wholesale to the compliance module.[1925] [1926] [1927] [1928] [1929]Specific AI functions documented AI-supported pre-screening of supplier documents AI evidence: [1928] [1929]AI Document Scanner described since release 8.11 of 16 December 2025 and still listed in the current portfolio. Nora is listed separately as available for Smart Factory and Maintenance. No product test. Source check: 2026-10-14 |
| osapiensosapiens HUBHeadquarters: Germany [1932]Operating entity osapiens Services GmbH, Mannheim; HRB 731132 Amtsgericht Mannheim. | Links supplier risks and due diligence obligations with evidence, actions and reports. Also covers risks and obligations at company and site level. | osapiens describes AI-curated news for detecting supplier risks. If a risk score rises significantly, the Risk Response Agent suggests a suitable response such as an evidence request, task or questionnaire; the team confirms the action.[1930] [1931]Specific AI functions documented Curate risk-relevant supplier news · Suggest evidence requests and actions when risks change AI evidence: [1930]Documented by the vendor; not tested in practice. Source check: 2026-10-14 |
| PhronesysPhronesys AIHeadquarters: Belgium [1934]Phronesyss BV, Herentals; company number 0808.410.074, RPR Antwerpen, Turnhout division.Phronesyss BV; Phronesys; Phronesys Nederland BV; Phronesys Polska Sp. z o.o. | QHSE management software with audits, management reviews and tracked corrective and preventive actions. | AI extracts key data, results and findings from external audit reports for tasks and CAPAs. It drafts conclusions for management reviews and structures information from safety data sheets.[1933] [1934]Specific AI functions documented Structure external audit reports · Make audit findings available for CAPA follow-up processes · Prepare management reviews AI evidence: [1933]The functions mentioned are listed on the product page under AI benefits available today. An assistant for conducting internal audits is explicitly still in development. Source check: 2026-10-15 |
| Position GreenSustainability PlatformHeadquarters: Norway [1937]According to the policy dated 01.03.2026, Position Green Group Holding AS is registered in Norway; registered office and principal place of business Wergelandsveien 7, Oslo. The group assignment follows this evidence, not the Swedish origin of individual product companies. Geography checked on 15.10.2026; no inference about hosting or owners from the headquarters. | Links sustainability data with roles, approvals and the four-eyes principle. Supports controls and traceable audit trails for reports. | Position Green documents AutoReporting: AI creates draft answers for qualitative ESRS and VSME data points from uploaded evidence and revises report texts. Users check sources and suggestions before adopting content.[1935] [1936] [1937]Specific AI functions documented Create ESRS/VSME draft answers from evidence · Revise sustainability report texts AI evidence: [1936]According to the support documentation, included in the standard offering for ESRS/VSME customers; note the AI terms of use and activation. No product test. Source check: 2026-10-14 |
| ProdityProdity EHSQ / ESGHeadquarters: Spain [1940]Prosafety Software S.L.U., Estadio de El Molinón 100, 33203 Gijón, Asturias.Prosafety Software S.L.U.; Prodity; Grupo Espiral MS; Espiral Microsistemas | Platform for occupational health and safety, environmental and quality management with safety observations, events, evaluations and actions. | An AI system developed with Tubacex checks the quality of preventive safety observations. Further vendor documents describe the evaluation of events and trends as well as reports retrievable in natural language.[1938] [1939] [1940] [1941] [1942]Specific AI functions documented Check the quality of safety observations · Evaluate EHS events and trends · Prepare prevention reports AI evidence: [1938] [1939]Specific AI use case with Tubacex documented; AI product page and demo available. Customer-specific implementation not presented as a blanket standard scope. Source check: 2026-10-15 |
| QMS NordicQMS Nordic AIHeadquarters: Denmark [1944]Aitech International ApS, Nydamsvej 43, 8362 Hørning; CVR 46545354.Aitech International ApS; QMS Nordic; QMS Nordic AI | eQMS for medical devices with controlled documents, CAPA, audits, risk evidence and regulatory documentation. | AI suggests causes for CAPAs and supports drafts of regulated quality content. The AI Inbox routes drafts into a review and approval process; history and audit trail remain linked to the controlled records.[1943] [1944]Specific AI functions documented Suggest CAPA causes · Draft quality documents · Review and approve AI drafts in a controlled manner AI evidence: [1943]Commercial subscription and demonstration of the actual platform described. The public subcontractor documents still carry draft status; check contractual and validation maturity specifically. Source check: 2026-10-15 |
| QuenticQuentic EHS & Sustainability PlatformHeadquarters: Germany [1948]Quentic GmbH; Gürtelstraße 30, Berlin; HRB 109492, Amtsgericht Berlin-Charlottenburg. The announcement of 17.09.2026 confirms the completed exit from the AMCS Group and the independent provider with headquarters in Berlin. Geography checked on 15.10.2026; no inference about hosting or owners from the headquarters.Quentic; formerly AMCS EHS Management; independent provider since 17.09.2026 | Links legal regulations, facilities and obligations for environmental protection and occupational health and safety. Supports central legal registers and tasks arising from regulatory changes. | Quentic documents AI for creating EHS reports from image, video and voice material, evaluating incident patterns, reading safety data sheets and summarising audit or compliance records.[1945] [1946] [1947] [1948] [1949]Specific AI functions documented Draft EHS reports from image, video and voice material · Detect patterns in incident reports · Read safety data sheets · Summarise audit and compliance records AI evidence: [1947]Documented by the vendor as modular Quentic functions; scope depends on the modules deployed. No product test. Source check: 2026-10-14 |
| SedexSedex PlatformSMETA is an audit methodology and not an additional provider. | Links supplier self-assessments, site assessments and audits with corrective actions. Focus areas are social, environmental and ethical supply chain risks. | No specific AI work step in the Sedex product documented in the source check. The pages checked describe supplier data, risk assessments and SMETA audits; general statements about the potential of AI do not replace product evidence.[1950] [1951] [1952]Not specifically documented in the source check Data-based risk scores and automated evaluations are not counted as AI without explicit technical evidence. The result does not prove the absence of AI. Sources checked: [1950] [1951] [1952]No specific AI availability can be derived from the sources checked. Source check: 2026-10-14 |
| SinergestSinergest SuiteHeadquarters: Italy [1954]Sinergest S.r.l., Capannori (Lucca), P.IVA 01828190460, REA LU 222938.Sinergest S.r.l.; Sinergest Suite | Modular software for management systems, audit programmes, controls and actions. Audit findings can be linked to deviation and corrective processes. | The Major Release 2026 describes an AI pre-check of documents against criteria formulated by the user. Results include a confidence indication; versions and checks performed remain traceable.[1953] [1954] [1955]Specific AI functions documented Pre-validate documents against audit criteria · Assess check results with confidence · Record document checks traceably AI evidence: [1953]Described as a new feature of the Major Release published on 22 June 2026. Confirm use in the required modules and customer-specific deployment before procurement. Source check: 2026-10-15 |
| SpeekiSpeeki Engage | Supports the planning, execution and documentation of compliance and assurance tasks. Links evidence and audits of management systems. | Speeki describes Nicole AI in Speeki Engage for analysing audit evidence, identifying gaps and drafting findings and reports in the ESG, sustainability and compliance context.[1956] [1957] [1958]Specific AI functions documented Check audit evidence · Identify evidence gaps · Draft audit findings · Prepare reports for subject-matter approval AI evidence: [1958] [1956]Documented by the vendor in Speeki Engage; according to the vendor, the platform is also offered independently of Speeki as an audit service provider. No product test. Source check: 2026-10-14 |
| SpheraCloud | SpheraCloud links specialist applications for safety, sustainability and operational risks. | Sphera Supplier 360 Intelligence creates generative AI summaries of supplier risks and recommendations for action. Risk Radar uses AI for the ongoing detection of supply chain risks and provides alerts reviewed by experts.[242] [1959] [1960]Specific AI functions documented AI summaries of supplier risks · Risk-related recommendations for action · Continuous detection of supply chain risks AI evidence: [1959] [1960]Supplier 360 Intelligence introduced according to a vendor announcement of 09.10.2025; scope depends on the SCRM modules deployed. No product test. Source check: 2026-10-14 |
| StarTex SoftwareEHS InsightProduct brand: EHS Insight | Bundles incidents, risks, audits, inspections and compliance tasks. Supports mobile processing and the tracking of corrective actions. | EHS Insight checks incident descriptions for gaps, suggests corrective actions from photos and breaks permits down into obligations and compliance tasks. Analytical AI supports queries and reports; a separate MCP access connects existing AI assistants to authorised EHS data.[1961] [1962] [1963]Specific AI functions documented Check incident reports for gaps · Suggest corrective actions from photos · Break permits down into compliance tasks AI evidence: [1963]Integrated AI within the platform scope according to the vendor; MCP pricing still being determined and an existing AI subscription required. Existing role permissions apply; no product test. Source check: 2026-10-14 |
| SymaleanDyo / SymAiHeadquarters: France [1965]SYMALEAN SAS, Les Achards; RCS La Roche-sur-Yon 791172034.SYMALEAN SAS; Dyo; SymAi; SymAI; Regensy | QHSE software with safety events, deviations, risks and tracked corrective actions. | SymAi classifies events, investigates possible causes on the basis of existing QHSE data and risks, finds comparable cases and suggests action plans. Actions are assigned and tracked through to completion.[1964] [1965]Specific AI functions documented Qualify safety events · Analyse causes and similar cases · Prepare corrective actions AI evidence: [1964]SymAi is explicitly described as a module that is now available and can be activated. Responsible persons review and confirm the suggestions; a demo is available. Source check: 2026-10-15 |
Qualitative comparison
Detailed provider profiles: focus areas and questions for the demonstration.
The following profiles examine 31 further offerings in more depth, with different approaches to risk, controls, regulatory change and management. The selection complements the T-NEX Banking Platform explained above with various platform and specialist approaches. It does not represent a ranking; the comparison profiles are sorted alphabetically.
Three questions are at the forefront: What work does the solution connect? What specifically does AI help with? Which transition should become visible in the demonstration? The answers are based on the vendor sources linked in each case. Licence, version, region and configuration determine the actual scope of delivery.
Cross-functional GRC platforms and suites
360factors Predict360
Predict360 links risk assessment, control work, key figures and actions with compliance testing, regulatory change and audit findings. The specialist modules and optional Ask Kaia agents use a shared data basis.
AI in the workflow. Ask Kaia supports evidenced answers, policy drafts and specialised reviews. Users check the results and retain approvals. Lending Intelligence and Third-Party Intelligence are still announced for Q4 2026 on the page checked. The regulatory content is geared towards the USA.
Subject-matter relevance. An offering close to banking, whose regulatory reach must be assessed separately for German institutions.
Clarify in the demonstration: Which German and European sources and audit requirements are contractually included, and which agents are already available in production?
Risk analysis & internal controls
antares RiMIS
antares RiMIS links qualitative and quantitative risk assessment with simulation, actions and approval status. ICS, ISMS and compliance can be connected modularly. Reporting periods, responsible persons and scenarios remain traceable within the shared risk process.
AI in the workflow. Documented are a help chatbot, context-related suggestions for risk identification, and wording and translation aids.
Subject-matter relevance. Suitable for companies that anchor risk-bearing capacity and periodic reporting methodically. Models, modules and input data must suit the organisation.
Clarify in the demonstration: How is an AI risk alert, after review, carried over into the approved assessment and the overall risk simulation?
Third-party risk
Aravo Intelligence First Platform
Aravo takes third parties from the request through onboarding and due diligence to monitoring, actions and offboarding. Configurable risk domains and workflows draw on shared supplier information. Interfaces add external risk data and enterprise systems.
AI in the workflow. Aravo AI supports queries on programme data, pre-filled assessments and suggested actions. Workflow agents and configurable models are described within the platform.
Subject-matter relevance. Relevant for extensive third-party programmes with multiple risk types. The domains and data sources required by the institution determine the scope.
Clarify in the demonstration: How does a new supplier signal trigger a reassessment and a traceably approved action?
Cross-functional GRC platforms and suites
Archer
Archer links risk registers, controls, compliance and audit trails with configurable workflows. Evolv builds on the existing Archer environment and uses its permissions and data relationships.
AI in the workflow. The Evolv Risk FAQ names Regulatory Intelligence, regulatory change management, AI risks and decision support as in production. Further AI domains are described there as expansion. Source references and handovers to reviewers are part of the approach.
Subject-matter relevance. A profile for organisations with extensive GRC structures or an existing Archer installation that want to process regulatory changes in a more targeted way.
Clarify in the demonstration: Which Evolv functions are available today within the scope offered, and how does the transition from regulatory finding to approved risk assessment remain traceable?
Cross-functional GRC platforms and suites
Bizzdesign Hopex
Hopex links a shared risk register, compliance requirements, gap remediation and cyber resilience with enterprise architecture and portfolio data. Critical functions and dependencies support the assessment of business impacts.
AI in the workflow. Documented are AI-supported application mapping and generative AI/ML in building the repository. The GRC page mentions AI-prepared key figures, but no specific generative control check. The benefit therefore lies initially in linked enterprise and IT data.
Subject-matter relevance. To be considered when GRC is to be linked with architecture, applications, processes and change planning.
Clarify in the demonstration: Which functions are in Hopex itself, which in other Bizzdesign products, and how do risks, controls and dependencies remain consistent?
Regulatory Intelligence
Bloomberg Regology
Bloomberg Regology starts from regulatory sources and their changes. The Smart Law Library and the Regulatory Change Agent support monitoring, subject-matter classification and mapping to risks and controls. The platform addresses multiple industries and jurisdictions.
AI in the workflow. Reggi allows questions in natural language and, according to the vendor, delivers answers with citable references. Research and change agents support the preparation of regulatory information. Source coverage and interpretation still need to be checked in the specific use case.
Subject-matter relevance. For German institutions, this approach is particularly worth considering for cross-border regulatory monitoring. The demonstration must show whether German supervisory publications, circulars and institution-specific obligations are covered to the required depth.
Clarify in the demonstration: How does a specific change to a German supervisory source lead to a traceable impact assessment and to an assigned implementation task?
Data protection & AI governance
caralegal Data Responsibility Platform
caralegal links data protection documentation with risk, audit and service provider processes as well as AI governance. Processing activities and associated risks are recorded in a structured way. The functional overview separates these specialist tasks from the shared platform functions.
AI in the workflow. The assistant converts process descriptions into suggestions for the record of processing activities and supports risks, measures and wording. The documentation names human review and approval. The assistant does not independently detect existing processing operations through a system scan.
Subject-matter relevance. The entry point lies with data protection officers and the specialist departments that supply information. For institutions, the connection to the information network, outsourcing and central risk processing is an important checkpoint.
Clarify in the demonstration: How does a specialist department's description become reviewed RoPA entries, associated risks and approved measures, including a correction of the AI suggestion?
Cross-functional GRC platforms and suites
Corporater
Corporater links governance, performance, risk and compliance in a configurable organisational model. Strategy, key figures, processes, risks and controls are managed as interrelated objects. Individual specialist solutions can be expanded into a more comprehensive GPRC system.
AI in the workflow. The assistant TIVA supports queries, risk capture and workflow actions in natural language. AI works in the organisational context; selected functions require Corporater UnifAI.
Subject-matter relevance. Characteristic is the linking of GRC with strategic objectives and performance management via the same subject-matter structure.
Clarify in the demonstration: How are a strategic objective, the associated risk and a specific action linked to one another, and which configuration and AI licences are required?
Cross-functional GRC platforms and suites
CRISAM GRC
CRISAM links methodical risk management with compliance, information security, ICS, BCM and audit. Multi-compliance mapping links requirements of different regulatory frameworks, while updated Knowledge Packs supply the subject-matter content. Risks, actions and controls feed into shared evaluations.
AI in the workflow. AI Risk Assistance adds suggestions for risks, actions and controls as well as regulatory notes and supplier analyses.
Subject-matter relevance. Of interest to organisations building reusable assessments across multiple standards and GRC disciplines. The Knowledge Packs, assessment methods and AI models used must fit the organisation's own regulatory framework.
Clarify in the demonstration: How is an existing control mapped to multiple requirements, and how is an AI recommendation reviewed by subject-matter experts before being adopted?
Regulatory Intelligence
CUBE RegPlatform
CUBE RegPlatform links regulatory monitoring, applicability assessment, obligations, controls and implementation evidence. RegConnect delivers structured regulatory information into existing systems via a versioned API. Tasks, responsible persons and approvals accompany the change process.
AI in the workflow. Agentic Coworkers highlight relevant developments and draft next work steps with traceable evidence.
Subject-matter relevance. Relevant for institutions with many jurisdictions and ongoing regulatory changes. The specific source coverage and the handovers to existing GRC processes belong in the selection review.
Clarify in the demonstration: How can an amended regulation be traced through to the affected control and the approved implementation evidence?
Vendor sources: [135]
Information security & cyber compliance
Cypago
Cypago starts from the controls in the existing IT landscape. The platform links continuous control monitoring, evidence collection, risk processing and the review of user access. Connected systems supply the data for recurring tests and for preparing audits. Consolidating multiple frameworks and business units is intended to reduce the effort for repeated evidence. The subject-matter starting point remains cyber GRC; banking-specific controlling or project portfolio management are not automatically covered by it.
AI in the workflow. ChatGRC answers questions about policies, controls, risks, findings and evidence with references to underlying documents. The product description also names agentic workflows for evidence collection, control tests and control and risk mapping. What counts for the assessment is which tests and actions work with the systems actually connected and how results are reviewed by subject-matter experts.
Subject-matter relevance. The focus is on ongoing cyber controls and technical evidence in connected IT environments.
Clarify in the demonstration: Which controls are actually checked from connected systems, and which evidence still has to be provided manually?
Cross-functional GRC platforms and suites
Diligent One
Diligent One links GRC applications with the work of the management board, supervisory board and committees. Risk, audit and compliance information can be brought together and prepared as reports or dashboards for management. Data connections supplement this view with existing company information.
AI in the workflow. Diligent AI supports, among other things, the preparation of meeting documents, summaries and follow-up. Further functions address risk management and GRC workflows within the respective applications.
Subject-matter relevance. The profile links operational GRC work with governance and the targeted provision of information to management and supervisory bodies.
Clarify in the demonstration: How does a reviewed risk matter get from the specialist application into the committee documents with appropriate level of detail and with permissions preserved?
Cross-functional GRC platforms and suites
F24 TopEase
TopEase from F24 links GRC with an object-oriented model of processes, assets, risks and controls. The specialist areas offered modularly include ICS, ISMS, BCM, third parties and contract management, among others. The product description names shared data storage as well as REST API and XPDL interfaces.
AI in the workflow. The TopEase pages checked document rule-based workflows and automation. A specific generative AI function is not sufficiently described there. AI information on other F24 products therefore does not automatically apply to TopEase.
Subject-matter relevance. The linking with processes and IT architecture is relevant for institutions with extensive dependency models. F24 names on-premises, cloud and own hosting, among others, as operating variants.
Clarify in the demonstration: How are changes to a critical IT service carried forward to risk, control, contingency plan and the responsible third party?
Compliance programmes & policies
GAN Integrity
GAN Integrity links the day-to-day work of ethics and compliance teams with third-party due diligence and reporting. Disclosures of conflicts of interest and gifts, incidents, policies and training are handled via specialised applications.
AI in the workflow. AI Analytics answers questions on compliance and third-party data in natural language and creates charts and summaries. Dashboards and role-based views are documented.
Subject-matter relevance. The subject-matter starting point is the integrity and compliance programmes of international companies. This is also relevant for institutions, but is not evidence of complete German banking-supervisory GRC coverage.
Clarify in the demonstration: Which data from the compliance programme is available for AI evaluations, and how do permissions and evidence remain traceable in the generated report?
Risk analysis & internal controls
GOAT Risk
GOAT Risk concentrates on collaboration on risks and controls. Responsible persons, actions and deadlines are linked with risk profiles and key figures. A control library and additional control reviews depend on the package booked.
AI in the workflow. No specific generative AI function is documented on the product pages checked. Automatic reminders and reports are classified as workflow automation.
Subject-matter relevance. A focused approach for organisations that want to systematise their risk registers and control work. Banking-supervisory content, permissions and the required reporting depth must be checked on the basis of the specific use case.
Clarify in the demonstration: Which control reviews, reports, roles and profile limits are included in the package offered?
Information security & cyber compliance
HiScout GRC Suite
HiScout brings IT-Grundschutz, information security, data protection and BCM together on a shared data basis. Assets, processes, protection requirements and measures are used across topics. Configurable workflows, client rights and the XML interface DataExchange support decentralised organisations.
AI in the workflow. The product sources checked do not document any specific AI assistance; the automation described is based on configurable workflows.
Subject-matter relevance. Of interest to public authorities, KRITIS operators and complex organisations with their own security methods. Required extension licences and configuration must be determined separately.
Clarify in the demonstration: How does a change to an asset update protection requirements, data protection relevance and contingency planning across multiple clients?
Cross-functional GRC platforms and suites
IBM OpenPages
IBM OpenPages bundles risk, compliance and internal audit in a modular environment. The spectrum includes model risk, third parties, data protection and business continuity. Configurable workflows and open interfaces link GRC work with existing data platforms.
AI in the workflow. Embedded AI supports classification and case creation. watsonx.ai and other models can be connected via APIs; an MCP server supports AI agents' access to GRC objects.
Subject-matter relevance. The profile combines broad GRC coverage with model risk management and the choice between cloud and on-premises operation.
Clarify in the demonstration: Which modules and AI functions are available in your operating variant, and how are model access, permissions and logging set up?
Information security & cyber compliance
Intuitem CISO Assistant
CISO Assistant from Intuitem organises cyber risks, controls and evidence across multiple frameworks. Documented features include risk analyses, treatment steps, audit campaigns and third-party assessments, among others. A community edition and commercial variants offer different operating options.
AI in the workflow. The vendor describes an integrated chat and MCP connection with own models. Tasks named are suggestions for risk assessment, control mapping and gap analysis. For actual operation, model connection, permissions and activated edition must be specified.
Subject-matter relevance. The open product core and the public repository are relevant for security teams with their own integration or operating requirements. Open code, however, replaces neither the subject-matter set-up nor the ongoing maintenance of evidence.
Clarify in the demonstration: Which functions are included in the selected edition, and how does an AI-supported control mapping remain traceable from evidence to human decision?
Information security & cyber compliance
Kertos
Kertos links information security, data protection and AI governance with expert support. The platform offers ISMS, risk and asset management, policy work, supplier management and data protection processes, among other things. The provider aligns its offering with European requirements and the ongoing preparation for audits. For organisations with limited internal compliance resources, the combination of software and expert services is a selection aspect in its own right; the scope and responsibility of both components must be clear in the offer.
AI in the workflow. The AI functions support the completion of compliance documents, suggest policies and work steps and provide context-related recommendations. The AI Management System for governing the organisation's own AI applications must be distinguished from this. It extends the subject-matter scope, but documents neither autonomous subject-matter approvals nor the automatic fulfilment of all regulatory requirements.
Subject-matter relevance. European-oriented organisations building information security and data protection together with external expert support.
Clarify in the demonstration: Which specialist processes are automated, which require expert work, and which modules are included in the offer?
Cross-functional GRC platforms and suites
LogicGate Risk Cloud
Risk Cloud links GRC applications via a configurable graph database and workflows without custom programming. Risks, controls and evidence can be linked; integrations incorporate existing tools and their data.
AI in the workflow. According to the documentation, basic AI functions are included in the subscription. Paid GRC Agents currently support third-party risk, AI governance, enterprise risk and business continuity. Agent results go through a review step.
Subject-matter relevance. The focus is on customisable GRC processes and connected data for teams that want to develop their workflows further themselves.
Clarify in the demonstration: Which steps does an agent take over in the selected module, which does your team review, and what data does the model provider process?
Cross-functional GRC platforms and suites
MetricStream
MetricStream links risk, compliance, internal audit, cyber and third-party risks via a shared data model. Relationships between organisation, processes, rules and controls are mapped centrally. AppStudio and APIs enable customisations and integrations.
AI in the workflow. Domain-specific assistants and agents support document evaluation, evidence capture and risk processing. The provider describes source references, audit trails and human control as well as the option of integrating own models.
Subject-matter relevance. The profile suits broad GRC programmes that link multiple disciplines and organisational areas with shared data and workflows.
Clarify in the demonstration: Which assistants are enabled for your modules, and how do data permissions, corrections and approvals work across the specialist departments?
Data protection & AI governance
OneTrust
OneTrust links data protection, data use, AI governance, technology risks and third parties on a shared data model. The focus is on relationships between data, models, suppliers and systems as well as shared access rules.
AI in the workflow. Documented are AI-supported data discovery and classification as well as assisted assessments and workflow automation. These AI functions must be distinguished from the governance of the AI systems used in the company.
Subject-matter relevance. Relevant for organisations that want to bring together data protection, AI and technology risks. For a selection, the required solutions and integrations need to be delimited more precisely.
Clarify in the demonstration: How does a change in data use flow into risk analysis, approval, technical control and ongoing monitoring?
Vendor sources: [208]
Cross-functional GRC platforms and suites
Optro (formerly AuditBoard)
Optro connects internal audit, controls, enterprise risk, information security and compliance. Shared reports, APIs and analyses support collaboration between audit and risk teams. Its scope therefore extends well beyond the collection of security evidence.
AI in the workflow. Optro AI supports control mappings, the assessment of regulatory changes, supplier questionnaires and risk-based audit planning. Configurable oversight and logged actions are part of the platform as described.
Subject-matter relevance. One focus is on audit and control organisations that handle risks across several functions. The connection to operational bank management needs to be checked for the specific scope.
Clarify in the demonstration: How is an audit finding tracked through to the action, control adjustment and re-audit?
Resilience & BCM
Premier Continuum ParaSolution
ParaSolution connects BIA, risk assessment, plan creation, activation and exercises. Supplementary modules support crisis communication, IT recovery and supplier risks. System dependencies, tests and recovery status can be considered together.
AI in the workflow. Automated threat monitoring evaluates external cyber, climate and geopolitical risk signals and prioritises their relevance for operations.
Subject-matter relevance. Suitable for BCM and resilience programmes involving several teams. During implementation, the module scope, communication integrations and your own escalation thresholds need to be specifically defined.
Clarify in the demonstration: How is an external threat notification assigned to a critical process and transferred into an approved response procedure?
Vendor sources: [237]
Cross-functional GRC platforms and suites
Protecht ERM
Protecht connects risk registers, controls and compliance with incidents, resilience and reports. Forms, assessment scales and notifications can be configured. Prepared registers and dashboards support getting started; the data relationships serve the overarching risk view.
AI in the workflow. Cognita guides users through forms, supports the handling of incidents and summarises reports. Results remain reviewable and editable. Agentic workflows for supplier risk and BCM as well as further regulatory tasks are on the published roadmap and are not counted here as an already available standard function.
Subject-matter relevance. The starting point is enterprise-wide risk management. For institutions, the connection between decentralised recording, control work and communication with management is particularly relevant.
Clarify in the demonstration: Which Cognita functions are enabled in the version offered, and how does an incident become reviewed actions and traceable reports?
Cross-functional GRC platforms and suites
Riskonnect
Riskonnect connects GRC with insurable risks, claims management and resilience. The GRC offering includes, among other things, enterprise risks, controls, compliance, internal audit and project risks. Shared data make relationships between risks, owners and evidence visible.
AI in the workflow. Intelligent Risk describes risk suggestions, control recommendations and agents for regulatory mapping and audit coordination. The AI works in the context of the platform data; functions are deployed per area of application.
Subject-matter relevance. The profile is particularly broad if a company wants to bring together both GRC and claims and insurance risks.
Clarify in the demonstration: Which data and workflows do the selected products share, and how does your team take AI-generated mappings into binding processing?
Cross-functional GRC platforms and suites
SAP GRC
SAP GRC comprises several interconnected solutions for risks, controls, authorisations, screening and security. The link to SAP business processes and S/4HANA shapes the offering. Which applications are used depends on the desired control and operating model.
AI in the workflow. The Governance Assistant describes support for control monitoring, evidence analysis and risk handling with human review. Specialised agents address individual tasks; their specific availability needs to be checked in the product offering.
Subject-matter relevance. The focus is on embedding GRC in operational applications, access rules and transaction-level controls.
Clarify in the demonstration: Which SAP GRC products and additional licences do your processes require, and which agents are available in the intended operating variant?
Cross-functional GRC platforms and suites
ServiceNow Integrated Risk Management
ServiceNow IRM links risk and compliance with IT, cybersecurity and operational processes. Controls, evidence and actions are integrated into shared workflows; existing ServiceNow processes provide an obvious point of connection.
AI in the workflow. ServiceNow Otto for IRM supports case summaries, risk alerts and control reviews. Agents can perform further tasks. The documentation restricts availability by licence, region and operating environment.
Subject-matter relevance. The connection with a ServiceNow platform already in use shapes this profile, particularly for cross-departmental case handling and technology risk management.
Clarify in the demonstration: Which IRM and AI functions can be used in your offering and your operating environment, and which adjacent products need to be added?
Third-party risk
UpGuard Vendor Risk
UpGuard Vendor Risk combines external security information with documents, questionnaires and the handling of supplier risks. Missing evidence can be specifically requested. Ongoing monitoring complements the point-in-time assessment of a third party.
AI in the workflow. The AI maps uploaded evidence to control questions and, building on this, creates questionnaires for remaining gaps as well as assessment reports. Analysts can comment on or correct results; references to evidence and the review history support traceability.
Subject-matter relevance. The focus is the cyber risk view of suppliers. Institutions need to clarify how these results are brought together with outsourcing management, contract data and their own GRC system.
Clarify in the demonstration: How is contradictory security evidence identified, corrected on a subject-matter basis and documented through to the renewed supplier assessment?
Cross-functional GRC platforms and suites
Workiva
Workiva combines financial reporting, sustainability and GRC on a shared platform. Data points and texts remain linked to their sources; changes can be carried through to connected documents. Risk, audit and control information complements the reporting work.
AI in the workflow. The platform describes agents for data preparation and report drafts as well as support for GRC tasks. AI access inherits existing permissions; human review and traceable data provenance accompany the work.
Subject-matter relevance. A defining feature is the connection between controlled data collection, collaboration and the consistent publication of financial and non-financial information.
Clarify in the demonstration: How is a changed key figure traced through its source, control review and approval into all affected reports?
Shared data and human approvals are also documented for other providers. For an institution, the relevant difference lies in the subject-matter context: is it primarily about IT workflows, risk and internal audit, financial reports, or about connecting GRC with controlling, projects and bank management?
To the table of contentsFrequently asked questions
GRC software, Europe and AI: the short answers.
What distinguishes the T-NEX Banking Platform from a specialised GRC solution?
The T-NEX Banking Platform considers GRC in the context of an institution’s projects, costs and reports. A specialised solution can cover a single specialist task in great depth. The platform approach is particularly relevant if several departments are to work on the same case. What should be compared is the complete workflow, the subject-matter depth and the agreed scope of delivery. The Banking Platform is a product in its own right and not an umbrella term for all T-NEX offerings.
Which GRC software with AI is available for Germany and Europe?
The register comprises 647 providers and provider groups worldwide. For 569 entries, specific AI functions in GRC work are separately documented and can be filtered. These include, for example, control mapping, evidence evaluation, risk suggestions and regulatory analyses. This figure is based on the sources checked and is not a complete measure of the AI GRC market. Functions that are only announced and functions not specifically documented in the source check can be selected separately. Suitability, licence scope and availability need to be checked for the respective offering.
What role does the T-NEX Banking Platform play in the GRC market?
The T-NEX Banking Platform connects GRC with the ongoing management of an institution. Selectable modules for controlling, reporting, compliance, risk management, project portfolio and fraud detection use a shared data model and central AI functions. This allows regulatory work, actions, projects and costs to be considered in the same subject-matter context.
How do the Banking Platform and T-NEX Compliance differ?
The Banking Platform is the integrated product for the collaboration of the selected specialist modules. T-NEX Compliance goes deeper into working with regulations, requirements, assessments, actions and audit reports. The detailed compliance evidence documents this workflow, not automatically every integration of the entire platform.
Are all 647 providers complete GRC solutions?
No. The register contains cross-functional platforms and specialised tools. The category describes the documented focus and does not limit the overall range of functions. A provider appears only once; additional products or former brands do not increase the count.
What does it mean if no specific AI function is documented?
In that case, the product source checked does not describe a sufficiently specific AI application. This is not evidence that the provider does not develop or offer AI. Ask to be shown the function, its maturity and the scope of delivery. Automated workflows, dashboards or Monte Carlo simulations are not, on their own, evidence of generative AI.
How can the integration of a GRC platform be checked?
Follow an agreed case through the required modules. Check data reference, assessment, handover, planning and costs, roles and reporting. For each step, record the origin, responsibility, information transferred and remaining work. Our six review steps are a selection guide, not product results that have already been measured.
Does a GRC platform automatically fulfil DORA or BCBS 239?
No. Software supports processes and evidence. What remains decisive is the respective scope of application, the configuration and the actual implementation in the institution. DORA, BCBS 239 and the ECB guide provide the basis for selection criteria here; they confirm neither product characteristics nor a certification of T-NEX.
Do all six T-NEX modules have to be implemented at the same time?
No. The platform description provides for getting started with selected modules and expanding later. The functions offered and their maturity, the data flows, roles and handovers are agreed for each implementation. Costs, model access and place of operation also belong in the specific offer.
What does GRC Germany mean: provider location or data storage?
The article classifies software from the perspective of German institutions and also includes international providers. A registered office in Germany does not automatically determine the place of processing. Hosting, subcontractors, AI model access, roles, export and deletion must be checked and agreed for the specific operating variant.
Does documented AI evidence automatically mean productive availability?
No. The evidence names specific AI functions described by the vendor. Beta or pilot status, additional licences and technical prerequisites may apply and are explained in the entry. Your own test with approved sample data must check whether sources, corrections and approvals remain traceable.
What does “not specifically documented in the source check” mean?
The provider sources checked do not allow a sufficiently specific assignment of an AI function to a GRC work step. This may be due to general statements, a lack of public documentation or a demarcation from other products. It does not mean that the provider has no AI. Sources and limits are given in the respective entry.
What counts as a European GRC provider in the register?
An entry belongs to the Europe selection if the registered office of the designated provider entity is documented in a European country by a vendor, contact or legal source. This currently applies to 347 entries. EU states and European non-EU states are marked separately. This does not automatically make the ownership structure European.
Does a European provider automatically mean EU hosting?
No. Registered office, ownership structure, hosting, support access and AI services are separate characteristics. For a procurement, the places of processing and access of the specific operating variant offered must be defined in a traceable manner.
Why does a selection guide for Germany include international providers?
A vendor’s origin and the subject-matter suitability of its product answer different questions. International and European providers may both be candidates for the same task. The worldwide register enables comparison; the Europe selection and the specialist categories narrow the search by documented characteristics.
Origin and responsibility
How this comparison was produced.
The article classifies 647 providers and provider groups worldwide from the perspective of companies and regulated organisations in Germany and Europe. It contains 192 cross-functional platforms and 455 offerings with a specialist entry point. The eleven categories form an editorial order, not a complete function matrix. The 32 existing in-depth profiles, including T-NEX, were chosen according to subject-matter relevance and available product documentation. As publisher, T-NEX opens the register, market map and dataset; further providers follow alphabetically within each category. The order is not a performance rating. No claim is made to completeness or to the world’s largest register.
Inclusion threshold: Included are proprietary software offerings with documented tasks for governance, risks, controls, compliance, audits or the marked specialist disciplines. A general reference to AI, security or quality is not sufficient. Pure consulting services and pure resellers are not counted as additional software providers. Products and acquired brands remain assigned to their provider group. Acquisitions that have only been announced are not treated as a completed merger until completion is documented.
AI evidence: 569 entries with specific AI functions, 6 with functions that are exclusively announced or in development, and 71 without specific evidence in the sources checked. For one entry, the source check remains open. Missing evidence does not mean that the provider has no AI functions. Vendor documentation does not replace a product test. The filter describes the editorial status of the review. A mere AI marketing claim or an AI governance module is not sufficient for the positive AI filter. Functions that are exclusively announced are listed separately; usable pilot and beta functions carry visible limits. Licence and configuration requirements are explained in the respective entry.
Europe is defined on the basis of sources. 347 records have a separately documented European company location. What is recorded is the provider entity named in the source. EU and European non-EU states are shown separately. Ownership structure and hosting are not derived from this. The review of location information has not yet been completed for the entire worldwide dataset; open information remains visibly open.
Providers are counted, not product names. Alias names, acquisitions and affiliations were checked separately. AuditBoard and Optro, BIC GRC and GBTEC, and CONTECHNET and i-doit each appear once. Camms is not listed as an additional provider alongside Riskonnect, nor Alyne or Prevalent alongside Mitratech. Venminder and Quantivate are likewise listed under Ncontracts, VISO TRUST under Protecht, and Infinite Blue or BC in the Cloud under Everbridge. Regology appears as Bloomberg Regology; Compliance & Risks as Adherent. RiskOptics and Reciprocity are listed under ZenGRC; MEGA HOPEX under Bizzdesign, Laika under Thoropass and People Intouch under SpeakUp. Acin, as part of CUBE, is not counted separately. [117] [46] [192] [149] [23] Shared financial investors alone are no reason to count independent software providers together. [70] [82] [234] [28] [69]
The types of evidence serve different purposes: Vendor sources describe product characteristics. The platform description and the in-depth module evidence are classified separately. DORA, BCBS 239, ECB and IIA provide the basis for subject-matter criteria and do not replace a product review. Podcast voices add practical experience. The six review steps are the authors’ own editorial derivation.
There are no measured values from a joint product test. The statements on suitability are editorial classifications by the authors. Missing public information was not counted as missing functions. Specific AI functions are kept separate from general AI announcements, analytics and simulation. Availability limits from the vendor sources are stated; the agreed scope of the offer is binding. Brands and logos stand for the respective providers and do not imply any cooperation with T-NEX.
The five verbatim podcast excerpts come from five episodes. In addition, there is an explicitly paraphrased summary on the implementation of GRC software. The wording was compared with the automatic raw transcripts or the automatic subtitles of the publisher’s channel. The time stamps indicate the start of segments; no additional audio listening test is claimed. Omissions at the beginning or end of an excerpt are marked with ellipses. Context and selection questions are outside the quotation marks and are editorial explanations. None of the people quoted makes a recommendation for T-NEX. The two English document quotations were checked against the linked original documents; for the ECB quotation, the first two points of the list of requirements are reproduced.
Product and source status: . Changes to the product offering may require a new classification.
Citation note: T-NEX: GRC software compared: 647 providers worldwide. Selection guide for Germany and Europe. As of 15 October 2026. Market map · T-NEX integration review · Europe selection.
The authors
Andreas Unruh
Managing Director · T-NEX GmbH
Focus on the architecture and development of GRC software. Brings many years of experience with GRC systems and their specialist modules to the product work.
View author profile
Christoph Gembruch
Managing Director · T-NEX GmbH
Focus on IT governance, information security and the implementation of GRC software. Combines experience from the financial sector with subject-matter process consulting.
View author profileSources and further evidence
- T-NEX Compliance: working with regulations and requirementsT-NEX · product description · retrieved/checked 13.10.2026
- Technical evidence and compliance manualT-NEX · manual as of 30.08.2026, version 15.23.0 · retrieved/checked 13.10.2026
- IT, AI and GRC consultingT-NEX · service description · retrieved/checked 13.10.2026
- Author profile Andreas UnruhT-NEX · architecture and development · retrieved/checked 13.10.2026
- Author profile Christoph GembruchT-NEX · GRC consulting and implementation · retrieved/checked 13.10.2026
- AI functions for ServiceNow Integrated Risk ManagementServiceNow · vendor documentation · retrieved/checked 13.10.2026
- Corporater AICorporater · vendor description · retrieved/checked 13.10.2026
- MetricStream AI for GRCMetricStream · vendor description · retrieved/checked 13.10.2026
- IBM OpenPagesIBM · vendor description · retrieved/checked 13.10.2026
- Digital Operational Resilience Act (DORA)EIOPA · European supervisory source · retrieved/checked 13.10.2026
- Revolution oder Overkill? Die Wahrheit über GRC-ToolsCybersecurity ist Chefsache · Nadezhda Zhekova · 27.01.2025 · retrieved/checked 13.10.2026
- Alles Legal #125: KI im FinanzsektorPayment & Banking / Annerton · Josefine Spengler · 11.02.2026 · retrieved/checked 13.10.2026
- Alles Legal #102: Digitale Resilienz ist ChefsachePayment & Banking / Annerton · Josefine Spengler · 25.06.2025 · retrieved/checked 13.10.2026
- Alles Legal #104: Diese Änderung betrifft alle IT-Abteilungen in Banken und FintechsPayment & Banking / Annerton · Josefine Spengler · 09.07.2025 · retrieved/checked 13.10.2026
- AI-Driven Governance: 2026 InsightsGRC & Me · corporate podcast by LogicGate · Diego Panama · 18.02.2026 · retrieved/checked 13.10.2026
- T-NEX Banking Platform: integrated product with six specialist modulesT-NEX · current platform description, as of 16.09.2026 · retrieved/checked 13.10.2026
- DORA: Regulation (EU) 2022/2554, in particular Articles 5, 6, 8, 11 and 16European Union · official legal act · retrieved/checked 13.10.2026
- BCBS 239: Principles for effective risk data aggregation and risk reportingBasel Committee on Banking Supervision · January 2013, in particular Principle 9 · retrieved/checked 13.10.2026
- Guide on effective risk data aggregation and risk reportingECB Banking Supervision · May 2024, in particular Section 3.4 · retrieved/checked 13.10.2026
- Three Lines Model: Assurance and Advice in Support of Effective GovernanceThe Institute of Internal Auditors · version of 08.07.2026 · retrieved/checked 13.10.2026
- T-NEX Risk Management: documented demonstratorT-NEX · product description and status of the demo · retrieved/checked 13.10.2026
- Digital operational resilience for the financial sector: official summaryPublications Office of the European Union · overview of DORA · retrieved/checked 13.10.2026
- CUBE acquires AcinAcin / CUBE · acquisition confirmation, checked 14.10.2026
- Corporater: GPRC platform and company modelCorporater · vendor source, checked 14.10.2026
- ServiceNow Integrated Risk ManagementServiceNow · vendor source, checked 14.10.2026
- Workiva: audit, risk and controls with reportingWorkiva · product announcement 09.03.2026, checked 14.10.2026
- MetricStream: platform and shared data modelMetricStream · vendor source, checked 14.10.2026
- Riskonnect: acquisition of CammsRiskonnect · acquisition confirmation, checked 14.10.2026
- 360factors: Predict360 platform360factors · vendor source, checked 14.10.2026
- 360factors: Ask Kaia, available scope and roadmap360factors · vendor source, checked 14.10.2026
- AdaptiveGRC: platform and modulesAdaptiveGRC · vendor source, checked 14.10.2026
- AdaptiveGRC: AI AssistantAdaptiveGRC · vendor source, checked 14.10.2026
- BOC Group: ADOGRC GRC platformBOC Group · vendor source, checked 14.10.2026
- ADOGRC 14: documented new featuresBOC Group · vendor source, checked 14.10.2026
- Allgress: GRC platform and evidence repositoryAllgress · vendor source, checked 14.10.2026
- Allgress Rixena: regulatory changes and gap analysisAllgress · vendor source, checked 14.10.2026
- Anecdotes: shared GRC applicationsAnecdotes · vendor source, checked 14.10.2026
- Anecdotes: Agent Library and deployment optionsAnecdotes · vendor source, checked 14.10.2026
- Archer: platform and EvolvArcher · vendor source, checked 14.10.2026
- Archer Evolv Risk: scope and availabilityArcher · vendor source, checked 14.10.2026
- AuditCue: GRC with risks, audits and controlsAuditCue · vendor source, checked 14.10.2026
- AuditCue: audit managementAuditCue · vendor source, checked 14.10.2026
- AuditCue: auditor workspace and report preparationAuditCue · vendor source, checked 14.10.2026
- Bizzdesign: GRC functionsBizzdesign Hopex · vendor source, checked 14.10.2026
- Bizzdesign Hopex: platform and AIBizzdesign Hopex · vendor source, checked 14.10.2026
- Bizzdesign: MEGA and Alfabet acquisitionsBizzdesign Hopex · vendor source, checked 14.10.2026
- Corporater: Business Management PlatformCorporater · vendor source, checked 14.10.2026
- CRISAM: risk management and integrated GRC platformCRISAM · vendor source, checked 14.10.2026
- CRISAM AI Risk AssistanceCRISAM · vendor source, checked 14.10.2026
- CURA: GRC platform and solutionsCURA · vendor source, checked 14.10.2026
- CURA: Predictive AnalyticsCURA · vendor source, checked 14.10.2026
- Diligent One PlatformDiligent · vendor source, checked 14.10.2026
- Diligent AIDiligent · vendor source, checked 14.10.2026
- eramba: Open and Enterprise GRCeramba · vendor source, checked 14.10.2026
- eramba: module and LLM documentationeramba · vendor source, checked 14.10.2026
- F24 TopEase: GRC platform and operating modelsF24 TopEase · vendor source, checked 14.10.2026
- TopEase: modules, shared database and interfacesF24 TopEase · vendor source, checked 14.10.2026
- focus: focus-GRC product suitefocus-GRC · vendor source, checked 14.10.2026
- focus: companyfocus-GRC · vendor source, checked 14.10.2026
- GBTEC GRC Management: modules and integrated platformGBTEC · vendor source, checked 14.10.2026
- GBTEC: official company facts and name historyGBTEC · vendor source, checked 14.10.2026
- ibi systems iris: integrated ISMS and GRC solutionibi systems · vendor source, checked 14.10.2026
- ibi systems GmbH: companyibi systems · vendor source, checked 14.10.2026
- IBM OpenPages: Model Risk GovernanceIBM · vendor source, checked 14.10.2026
- LogicGate: Risk Cloud PlatformLogicGate · vendor source, checked 14.10.2026
- LogicGate: GRC Agents FAQ, updated 1 September 2026LogicGate · vendor source, checked 14.10.2026
- LogicManager: Enterprise Risk ManagementLogicManager · vendor source, checked 14.10.2026
- LogicManager: current AI functions and human reviewLogicManager · vendor source, checked 14.10.2026
- The Mitratech Global GRC PlatformMitratech · vendor source, checked 14.10.2026
- Ncontracts: products, AI and acquired brandsNcontracts · vendor source, checked 14.10.2026
- Ncontracts: acquisition of VenminderNcontracts · vendor source, checked 14.10.2026
- Optial: GRC SmartStartOptial · vendor source, checked 14.10.2026
- Optial: GRC planningOptial · vendor source, checked 14.10.2026
- Optro: Modern GRC Intelligence PlatformOptro · vendor source, checked 14.10.2026
- Optro AI: AI for GRCOptro · vendor source, checked 14.10.2026
- Origami Risk: Governance, Risk and ComplianceOrigami Risk · vendor source, checked 14.10.2026
- Origami Risk: AI Concierge and Q3 2026 releaseOrigami Risk · vendor source, checked 14.10.2026
- Oxial: GRC applicationOxial · vendor source, checked 14.10.2026
- Oxial: company and product approachOxial · vendor source, checked 14.10.2026
- Protecht: GRC platformProtecht · vendor source, checked 14.10.2026
- Protecht Cognita: available functions and roadmapProtecht · vendor source, checked 14.10.2026
- Protecht: acquisition of VISO TRUSTProtecht · vendor source, checked 14.10.2026
- ReadiNow: platform, GRC and ReadiAgentsReadiNow · vendor source, checked 14.10.2026
- ReadiNow: LegalReadiNow · vendor source, checked 14.10.2026
- Resolver: Risk Intelligence PlatformResolver · vendor source, checked 14.10.2026
- Resolver: Investigations and Case ManagementResolver · vendor source, checked 14.10.2026
- Riskonnect: GRC SoftwareRiskonnect · vendor source, checked 14.10.2026
- Riskonnect: Intelligent RiskRiskonnect · vendor source, checked 14.10.2026
- RiskRhino: risk and control managementRiskRhino · vendor source, checked 14.10.2026
- RiskRhino: Agentic AIRiskRhino · vendor source, checked 14.10.2026
- RiskRhino: platformRiskRhino · vendor source, checked 14.10.2026
- RiskWatch: GRC and shared control libraryRiskWatch · vendor source, checked 14.10.2026
- RiskWatch: scope and limits of AI governanceRiskWatch · vendor source, checked 14.10.2026
- SAI360: integrated platform for GRCSAI360 · vendor source, checked 14.10.2026
- SAI360: Artificial IntelligenceSAI360 · vendor source, checked 14.10.2026
- SAP: GRC and CybersecuritySAP · vendor source, checked 14.10.2026
- SAP: Governance AssistantSAP · vendor source, checked 14.10.2026
- Schleupen: GRC platform and R2C product familySchleupen · vendor source, checked 14.10.2026
- Schleupen GRC-Cloud: operating variantsSchleupen · vendor source, checked 14.10.2026
- ServiceNow: Integrated Risk ManagementServiceNow · vendor source, checked 14.10.2026
- SoftExpert: Governance, Risk and ComplianceSoftExpert · vendor source, checked 14.10.2026
- SoftExpert Suite: AI release of 16 June 2026SoftExpert · vendor source, checked 14.10.2026
- Swiss GRC: platform, GRC Toolbox and Grace AISwiss GRC · vendor source, checked 14.10.2026
- Symbiant: GRC and auditSymbiant · vendor source, checked 14.10.2026
- Symbiant: optional AI assistantSymbiant · vendor source, checked 14.10.2026
- VComply: connected compliance, policy and risk processesVComply · vendor source, checked 14.10.2026
- VComply PolicyOps: policies and controlled AI assistanceVComply · vendor source, checked 14.10.2026
- VComply RiskOps: risk managementVComply · vendor source, checked 14.10.2026
- ViClarity: GRC solution overviewViClarity · vendor source, checked 14.10.2026
- ViClarity: Risk ManagementViClarity · vendor source, checked 14.10.2026
- ViClarity: Reg MonitorViClarity · vendor source, checked 14.10.2026
- ViClarity: merger with PolicyWorksViClarity · vendor source, checked 14.10.2026
- Workiva Platform: data, reporting, GRC and AIWorkiva · vendor source, checked 14.10.2026
- Workiva: Audit, Risk and Compliance TeamsWorkiva · vendor source, checked 14.10.2026
- ZenGRC: product functionsZenGRC · vendor source, checked 14.10.2026
- ZenGRC: AI control assessmentsZenGRC · vendor source, checked 14.10.2026
- ZenGRC: renaming of RiskOpticsZenGRC · vendor source, checked 14.10.2026
- antares RiMIS: risk management software and AI functionsantares · vendor source, checked 14.10.2026
- antares Informations-Systeme: companyantares · vendor source, checked 14.10.2026
- GOAT Risk: functions and packagesGOAT Risk · vendor source, checked 14.10.2026
- GOAT Risk: FAQGOAT Risk · vendor source, checked 14.10.2026
- Ideagen Risk ManagementIdeagen · vendor source, checked 14.10.2026
- Ideagen Mazlan AIIdeagen · vendor source, checked 14.10.2026
- Funk: risk management software RIMIKS XFunk · vendor source, checked 14.10.2026
- Adherent: new name of Compliance & RisksAdherent · vendor source, checked 14.10.2026
- Adherent: Product Compliance PlatformAdherent · vendor source, checked 14.10.2026
- AscentAI: AscentHorizonAscentAI · vendor source, checked 14.10.2026
- AscentAI: AscentFocusAscentAI · vendor source, checked 14.10.2026
- AscentAI: regulatory coverageAscentAI · vendor source, checked 14.10.2026
- AscentAI: acquisition of WaymarkAscentAI · vendor source, checked 14.10.2026
- Bloomberg Regology: platform and corporate affiliationBloomberg Regology · vendor source, checked 14.10.2026
- Bloomberg Regology: Regulatory Change AgentBloomberg Regology · vendor source, checked 14.10.2026
- Corlytics Regulatory Obligations ManagementCorlytics · vendor source, checked 14.10.2026
- Corlytics Regulatory Change ManagementCorlytics · vendor source, checked 14.10.2026
- CUBE RegPlatformCUBE · vendor source, checked 14.10.2026
- RegEd: Regulatory Change ManagementRegEd · vendor source, checked 14.10.2026
- RegEd: intelligence and insights with EddieRegEd · vendor source, checked 14.10.2026
- EQS Compliance Cockpit: compliance management softwareEQS · vendor source, checked 14.10.2026
- Q by EQS: AI for compliance workflowsEQS · vendor source, checked 14.10.2026
- GAN Integrity: product overviewGAN Integrity · vendor source, checked 14.10.2026
- GAN Integrity: AI Analytics and DashboardsGAN Integrity · vendor source, checked 14.10.2026
- otris compliance SUITE: specialist solutions, platform and interfacesotris · vendor source, checked 14.10.2026
- otris copilot: AI in specialist solutionsotris · vendor source, checked 14.10.2026
- SpeakUp: platform and applicationsSpeakUp · vendor source, checked 14.10.2026
- SpeakUp: Sienna AISpeakUp · vendor source, checked 14.10.2026
- SpeakUp: Sienna InsightsSpeakUp · vendor source, checked 14.10.2026
- SpeakUp: company and former nameSpeakUp · vendor source, checked 14.10.2026
- 6clicks: Platform Overview6clicks · vendor source, checked 14.10.2026
- 6clicks: Hailey AI6clicks · vendor source, checked 14.10.2026
- Acuity: STREAM editionsAcuity STREAM · vendor source, checked 14.10.2026
- Acuity: STREAM CloudAcuity STREAM · vendor source, checked 14.10.2026
- Acuity: RiskOS roadmapAcuity STREAM · vendor source, checked 14.10.2026
- Apptega: security and compliance platformApptega · vendor source, checked 14.10.2026
- CyberSaint: How CyberStrong WorksCyberSaint · vendor source, checked 14.10.2026
- CyberSaint AI OverviewCyberSaint · vendor source, checked 14.10.2026
- Cypago: cyber GRC and control monitoringCypago · vendor source, checked 14.10.2026
- Cypago ChatGRC: queries with document referencesCypago · vendor source, checked 14.10.2026
- Drata AI: Agentic Trust Management for GRCDrata · vendor source, checked 14.10.2026
- Drata: Security Questionnaire AutomationDrata · vendor source, checked 14.10.2026
- Egerie: cyber GRC platformEgerie · vendor source, checked 14.10.2026
- Egerie: compliance module and AI-supported contentEgerie · vendor source, checked 14.10.2026
- HiScout: platform technology and shared databaseHiScout · vendor source, checked 14.10.2026
- About HiScout: company and target groupsHiScout · vendor source, checked 14.10.2026
- Hyperproof: AI-Powered GRC PlatformHyperproof · vendor source, checked 14.10.2026
- Hyperproof: AI Guided Experiences, 9 April 2026Hyperproof · vendor source, checked 14.10.2026
- i-doit GRC Suite+: modules and shared databasei-doit · vendor source, checked 14.10.2026
- i-doit up: AI in IT asset managementi-doit · vendor source, checked 14.10.2026
- i-doit: acquisition of CONTECHNET, 3 June 2025i-doit · vendor source, checked 14.10.2026
- Intuitem: CISO Assistant and AI functionsIntuitem · vendor source, checked 14.10.2026
- CISO Assistant: official community repositoryIntuitem · vendor source, checked 14.10.2026
- ISMS.online: Platform OverviewISMS.online · vendor source, checked 14.10.2026
- Kertos: platform for continuous complianceKertos · vendor source, checked 14.10.2026
- Kertos: AI functions within the platformKertos · vendor source, checked 14.10.2026
- Kertos: AI Management SystemKertos · vendor source, checked 14.10.2026
- RegScale: compliance automationRegScale · vendor source, checked 14.10.2026
- RegScale documentation: RegML and explicit activationRegScale · vendor source, checked 14.10.2026
- Scrut: compliance automationScrut Automation · vendor source, checked 14.10.2026
- Scrut Teammates: documented AI workflowsScrut Automation · vendor source, checked 14.10.2026
- Scrut MCP: connection to AI toolsScrut Automation · vendor source, checked 14.10.2026
- Scytale: compliance platform and expert supportScytale · vendor source, checked 14.10.2026
- Scytale: agentic compliance and human oversightScytale · vendor source, checked 14.10.2026
- Scytale: acquisition of AudITechScytale · vendor source, checked 14.10.2026
- Secureframe: Security, Risk and Compliance PlatformSecureframe · vendor source, checked 14.10.2026
- Secureframe Help: Overview of AI Capabilities, 16 July 2026Secureframe · vendor source, checked 14.10.2026
- Sprinto: Autonomous Trust PlatformSprinto · vendor source, checked 14.10.2026
- Sprinto Docs: Sprinto AI OverviewSprinto · vendor source, checked 14.10.2026
- Thoropass: audit lifecycle platform and audit servicesThoropass · vendor source, checked 14.10.2026
- Thoropass: introduction of First Pass AIThoropass · vendor source, checked 14.10.2026
- Thoropass: Smart Sort AI for GRC exportsThoropass · vendor source, checked 14.10.2026
- Thoropass: renaming of LaikaThoropass · vendor source, checked 14.10.2026
- Vanta: Automated ComplianceVanta · vendor source, checked 14.10.2026
- Vanta AIVanta · vendor source, checked 14.10.2026
- SerNet: the new verinice generationverinice · vendor source, checked 14.10.2026
- verinice: BCM domains available, 13 August 2026verinice · vendor source, checked 14.10.2026
- verinice: public interfaces and APIsverinice · vendor source, checked 14.10.2026
- BigID: Data GovernanceBigID · vendor source, checked 14.10.2026
- BigID: AI GovernanceBigID · vendor source, checked 14.10.2026
- caralegal: overview of functionscaralegal · vendor source, checked 14.10.2026
- caralegal: AI assistant for data protection documentationcaralegal · vendor source, checked 14.10.2026
- Dastra: Privacy and AI GovernanceDastra · vendor source, checked 14.10.2026
- Dastra documentation: AI functions, approval and beta limitsDastra · vendor source, checked 14.10.2026
- DataGuard: Security and Compliance PlatformDataGuard · vendor source, checked 14.10.2026
- DataGuard: AI AutomationDataGuard · vendor source, checked 14.10.2026
- heyData: compliance platformheyData · vendor source, checked 14.10.2026
- heyData: product and service questionsheyData · vendor source, checked 14.10.2026
- OneTrust: AI-Ready Governance PlatformOneTrust · vendor source, checked 14.10.2026
- Osano: data protection platformOsano · vendor source, checked 14.10.2026
- Osano: AI functions and handover to expertsOsano · vendor source, checked 14.10.2026
- Securiti: DataAI Command PlatformSecuriti AI · vendor source, checked 14.10.2026
- Securiti: company and Veeam affiliationSecuriti AI · vendor source, checked 14.10.2026
- TrustArc: Governance SuiteTrustArc · vendor source, checked 14.10.2026
- TrustArc: Arc IntelligenceTrustArc · vendor source, checked 14.10.2026
- Aravo: Intelligence First PlatformAravo · vendor source, checked 14.10.2026
- Aravo: Artificial Intelligence for TPRMAravo · vendor source, checked 14.10.2026
- Bitsight: Vendor Risk ManagementBitsight · vendor source, checked 14.10.2026
- Bitsight: Framework IntelligenceBitsight · vendor source, checked 14.10.2026
- ProcessUnity: AI-Powered Third-Party Risk Management PlatformProcessUnity · vendor source, checked 14.10.2026
- Risk Ledger: how it worksRisk Ledger · vendor source, checked 14.10.2026
- Risk Ledger: product changes 2026Risk Ledger · vendor source, checked 14.10.2026
- SecurityScorecard: TITAN AI PlatformSecurityScorecard · vendor source, checked 14.10.2026
- SecurityScorecard: Third-Party Risk PlatformSecurityScorecard · vendor source, checked 14.10.2026
- UpGuard: Vendor RiskUpGuard · vendor source, checked 14.10.2026
- UpGuard: AI in third-party risk managementUpGuard · vendor source, checked 14.10.2026
- Whistic: platform and product limitsWhistic · vendor source, checked 14.10.2026
- Whistic: Automation OrchestratorWhistic · vendor source, checked 14.10.2026
- 4C Strategies: Continuity Manager and product variants4C Strategies · vendor source, checked 14.10.2026
- CLDigital 360: Business ContinuityCLDigital · vendor source, checked 14.10.2026
- CLDigital AI: functions and administrative controlCLDigital · vendor source, checked 14.10.2026
- Continuity2 Meridian: business continuity and operational resilienceContinuity2 · vendor source, checked 14.10.2026
- Everbridge Prepare: BCM, formerly BC in the CloudEverbridge · vendor source, checked 14.10.2026
- Everbridge Bridge: connecting planning and responseEverbridge · vendor source, checked 14.10.2026
- Everbridge: acquisition of Infinite BlueEverbridge · vendor source, checked 14.10.2026
- The Fusion Platform: Enterprise Resilience SoftwareFusion Risk Management · vendor source, checked 14.10.2026
- Fusion IntelligenceFusion Risk Management · vendor source, checked 14.10.2026
- ParaSolution Business Continuity Management SoftwarePremier Continuum · vendor source, checked 14.10.2026
- CorityOne EHS PlatformCority · vendor source, checked 14.10.2026
- Cority Cortex AICority · vendor source, checked 14.10.2026
- Enablon Vision PlatformEnablon · vendor source, checked 14.10.2026
- Enablon: Environmental, Health & Safety SoftwareEnablon · vendor source, checked 14.10.2026
- SpheraCloud Operational Intelligence PlatformSphera · vendor source, checked 14.10.2026
- T-NEX Banking Platform: company location / legal entityVendor/provider source · check date see provider entry
- Acuna: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Acuna: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Acuna: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Acuna: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AdaptiveGRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AdaptiveGRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AdmiralOne: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AdmiralOne: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AdmiralOne: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ADOGRC: company location / legal entityVendor/provider source · check date see provider entry
- AiBizzApps: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AiBizzApps: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AiBizzApps: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AKARION: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AKARION: company location / legal entityVendor/provider source · check date see provider entry
- Aluura: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Aluura: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Arengi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Arengi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Arengi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Arengi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Arengi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ART25: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ART25: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ART25: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Aryza: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Aryza: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Aryza: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ascent Business Technology: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ascent Business Technology: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ascent Business Technology: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AssurePlus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AssurePlus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AssurePlus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AssurePlus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AssurePlus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Athereon: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Athereon: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Atlant Security: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Atlant Security: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Atlant Security: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Auditrunner: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Auditrunner: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Auditrunner: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AugIx System: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AugIx System: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AugIx System: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Avalon Technology Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Avalon Technology Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Avalon Technology Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Axcelasia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Axcelasia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Axiom GRC (CoreStream GRC): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Axiom GRC (CoreStream GRC): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Axiom GRC (CoreStream GRC): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Axiom GRC (CoreStream GRC): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Axiom GRC (CoreStream GRC): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Axovern: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Axovern: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Axovern: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- BarnOwl: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- BarnOwl: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- BarnOwl: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Basenorm: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Basenorm: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Basenorm: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Basenorm: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Basenorm: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- BCMLogic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- BCMLogic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- BCMLogic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- BCMLogic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- BCMLogic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- BCMLogic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- BCT Digital / Bahwan CyberTek: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- BCT Digital / Bahwan CyberTek: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- BCT Digital / Bahwan CyberTek: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Bizzdesign: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Bizzdesign: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Bizzdesign: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Bridge GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Bridge GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Bridge GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Brillnet: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Brillnet: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Brillnet: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- C1Risk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- C1Risk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- calQrisk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- calQrisk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cerivo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cerivo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cerivo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cerivo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cerivo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cerivo: company location / legal entityVendor/provider source · check date see provider entry
- Cerpent: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cerpent: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cerpent: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cerpent: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CERRIX: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CERRIX: company location / legal entityVendor/provider source · check date see provider entry
- Checka: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Checka: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CoAudit Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CoAudit Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compilo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compilo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complyance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complyance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complyance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complyance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complyance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compyl: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compyl: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Confidata: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Confidata: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Confidata: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Confidata: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Continuum GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Continuum GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Copla: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Copla: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Copla: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Copla: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Corporater: company location / legal entityVendor/provider source · check date see provider entry
- CRISAM GRC: company location / legal entityVendor/provider source · check date see provider entry
- CShift: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CShift: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CShift: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- cSquare GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- cSquare GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- cSquare GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberArrow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberArrow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberArrow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberArrow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberArrow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberArrow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cybervize: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cybervize: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CypherOn: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CypherOn: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CypherOn: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CypherOn: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Decision Focus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Decision Focus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Decision Focus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Decision Focus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DELTA RM: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DELTA RM: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DELTA RM: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DELTA RM: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- deveca: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- deveca: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DigitalXForce: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DigitalXForce: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DigitalXForce: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DigitalXForce: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Diligent One: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Diligent One: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dimeri: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dimeri: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dimeri: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DISS-CO: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DISS-CO: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dmaze: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dmaze: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dmaze: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dmaze: company location / legal entityVendor/provider source · check date see provider entry
- DotCoAi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DotCoAi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DotCoAi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Durava: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Durava: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EasyAudit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EasyAudit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EasyAudit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EasyAudit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Empliance Technologies: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Empliance Technologies: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Empliance Technologies: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Empowered Systems: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Empowered Systems: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Empowered Systems: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- eramba: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- eramba: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- eramba: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- eramba: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ESG Innova Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ESG Innova Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ESG Innova Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ESG Innova Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ESG Innova Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ESG Innova Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ESG Innova Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Euraika: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Euraika: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Euraika: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- F24 TopEase: company location / legal entityVendor/provider source · check date see provider entry
- Flow GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Flow GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- focus-GRC: company location / legal entityVendor/provider source · check date see provider entry
- Formalize: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Formalize: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Formalize: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Formalize: company location / legal entityVendor/provider source · check date see provider entry
- FullyInControl: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- FullyInControl: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- G.R.A.I.S.: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- G.R.A.I.S.: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- G.R.A.I.S.: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GBTEC GRC Management: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GBTEC GRC Management: company location / legal entityVendor/provider source · check date see provider entry
- GIEOM: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GIEOM: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GlobalSuite Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GlobalSuite Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GlobalSuite Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Grace Connect: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Grace Connect: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Grace Connect: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GRCompli: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GRCompli: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GRCPerfect / PrivacyPerfect: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GRCPerfect / PrivacyPerfect: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GRCPerfect / PrivacyPerfect: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GRCPerfect / PrivacyPerfect: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GRCPerfect / PrivacyPerfect: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Guardial: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Guardial: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HelmGuard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HelmGuard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HelmGuard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HelmGuard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HiQ Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HiQ Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ibi systems iris: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ibi systems iris: company location / legal entityVendor/provider source · check date see provider entry
- iComply.pt: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- iComply.pt: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ignimission: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ignimission: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ignimission: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ignimission: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Impero: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Impero: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Impero: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Impero: company location / legal entityVendor/provider source · check date see provider entry
- Interact Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Interact Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Iskera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Iskera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Iskera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Iskera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Iskera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Iskera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- JCAD: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- JCAD: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- K10 Vision: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- K10 Vision: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- K10 Vision: company location / legal entityVendor/provider source · check date see provider entry
- Keel GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Keel GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Key2Control: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Key2Control: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Key2Control: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Key2Control: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Kopexa: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Kopexa: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- KRAL: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- KRAL: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- KRAL: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Kyūdō: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Kyūdō: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lahebo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lahebo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Maps Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Maps Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Maps Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Modus Consulting: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Modus Consulting: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Modus Consulting: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Modus Consulting: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Mynder: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Mynder: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Mynder: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Mynder: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Naris: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Naris: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Naris: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Naris: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Naris: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Naris: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Naris: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Navigate / Altara: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Navigate / Altara: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Navigate / Altara: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- NEXIS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- NEXIS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- NEXIS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Njordium Cyber Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Njordium Cyber Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Njordium Cyber Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Normio: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Normio: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Normio: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- NorthGRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- NorthGRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- NorthGRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- NorthGRC: company location / legal entityVendor/provider source · check date see provider entry
- Novasecur: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Novasecur: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OLING Management et Technologie: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OLING Management et Technologie: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OLING Management et Technologie: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OLING Management et Technologie: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OMNINET: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OMNINET: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OMNINET: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OneAdvanced: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OneAdvanced: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OneAdvanced: company location / legal entityVendor/provider source · check date see provider entry
- Onspring: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Opal GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Opal GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Opal GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Operlity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Operlity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Operlity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Operlity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Operlity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Optial GRC SmartStart: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Optro (vormals AuditBoard): company location / legal entityVendor/provider source · check date see provider entry
- Oracle: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ORCA Opti: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ORCA Opti: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ORCA Opti: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PAN Software: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PAN Software: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PAN Software: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PAN Software: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Pirani: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Pirani: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ProcessGene: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Regulativ.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Regulativ.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Regulativ.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Regulativ.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Reguroo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Reguroo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Reguroo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Remedy / RiskCognition: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Remedy / RiskCognition: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Remedy / RiskCognition: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Risk Cognizance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Risk Cognizance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Risk Cognizance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Risk Wizard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Risk Wizard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Risk Wizard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- riskHive: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- riskHive: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- riskHive: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RISKID: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RISKID: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskMate: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskMate: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskMate: company location / legal entityVendor/provider source · check date see provider entry
- RiskNow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskNow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Riskonnect: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Riskonnect: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Riskonnect: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskSmart: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskSmart: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskSmart: company location / legal entityVendor/provider source · check date see provider entry
- RiskTech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Riskuity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Riskuity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Riskuity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RUBIQ: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ruleguard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ruleguard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ruleguard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ruleguard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SafePaaS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SafePaaS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SafePaaS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sahl: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sahl: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sahl: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sahl: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sahl: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SAI360: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SAP GRC: company location / legal entityVendor/provider source · check date see provider entry
- SAS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SAS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SAVISCON: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SAVISCON: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Schleupen R2C: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Schleupen R2C: company location / legal entityVendor/provider source · check date see provider entry
- Sentrient: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SimpleRisk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SimpleRisk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SimpleRisk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SimpleRisk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SimpleRisk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Skylen: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Skylen: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Skylen: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Smart Global Governance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Smart Global Governance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Smart Global Governance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Smart Global Governance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Snap Compliance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Snap Compliance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Snap Compliance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sorena AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sorena AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Strategix: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Strategix: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Strategix: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Stratsys: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Stratsys: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Stratsys: company location / legal entityVendor/provider source · check date see provider entry
- SureCloud: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SureCloud: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SwissGRC Platform / GRC Toolbox: company location / legal entityVendor/provider source · check date see provider entry
- Symbiant GRC & Audit: company location / legal entityVendor/provider source · check date see provider entry
- TeamGRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TeamGRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TESISQUARE / Compet-e: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TESISQUARE / Compet-e: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TESISQUARE / Compet-e: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TESISQUARE / Compet-e: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TESISQUARE / Compet-e: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- The Access Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- The Access Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- The Access Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- The Access Group: company location / legal entityVendor/provider source · check date see provider entry
- Tickit Systems: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TogetherSecure: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TogetherSecure: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TogetherSecure: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TransVare: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TransVare: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Uno AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Uno AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Uno AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Values Associates: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Values Associates: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Values Associates: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VamiSec (Vami Group): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VamiSec (Vami Group): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VamiSec (Vami Group): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vantage Technologies: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vantage Technologies: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VigiTrust: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VigiTrust: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VigiTrust: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VigiTrust: company location / legal entityVendor/provider source · check date see provider entry
- Volaris (intellior / IMS PREMIUM): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Volaris (intellior / IMS PREMIUM): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Volaris (intellior / IMS PREMIUM): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Volaris (intellior / IMS PREMIUM): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Volaris (intellior / IMS PREMIUM): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Volaris (intellior / IMS PREMIUM): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Volaris (intellior / IMS PREMIUM): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wathiq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wathiq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wathiq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wathiq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- WeKomply – Granite: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- WeKomply – Granite: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- WeKomply – Granite: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wizpresso: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wizpresso: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wizpresso: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wizpresso: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wolters Kluwer: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wolters Kluwer: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wolters Kluwer: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wolters Kluwer: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wolters Kluwer: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wolters Kluwer: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Workiva: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- YICE / Kouters Van der Meer: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- YICE / Kouters Van der Meer: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- YICE / Kouters Van der Meer: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- YICE / Kouters Van der Meer: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- YICE / Kouters Van der Meer: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zavior: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zavior: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zavior: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ZenGRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Abel Systems: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Abel Systems: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Abel Systems: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Abel Systems: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- antares RiMIS: company location / legal entityVendor/provider source · check date see provider entry
- Auxilius.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Auxilius.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Auxilius.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Avertro: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Avertro: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CAQ AG: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CAQ AG: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CAQ AG: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ciqualia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ciqualia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ciqualia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ciqualia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ciqualia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ConSense: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ConSense: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ConSense: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ConSense: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ConSense: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DextraData: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DextraData: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DextraData: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DextraData: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DextraData: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dylogy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dylogy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dylogy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fecton: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fecton: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fecton: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fecton: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fecton: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GOAT Risk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GRC Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GRC Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Inclus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Inclus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Inclus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Inspirient: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Inspirient: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Nooga: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Nooga: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Nooga: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OPTURE: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OPTURE: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OPTURE: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OPTURE: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Oversight: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Oversight: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Oversight: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Oversight: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Pathlock: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Pathlock: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Pathlock: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Pathlock: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Pathlock: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Pathlock: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RIMIKS X: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- risk on mind: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- risk on mind: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- risk on mind: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Soterion: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Soterion: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Soterion: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Staple AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Staple AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Xiting: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Xiting: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Xiting: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- 221b: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- 221b: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- 221b: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ACA Group: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ACTICO: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ACTICO: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ACTICO: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ACTICO: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Adherent, vormals Compliance & Risks: company location / legal entityVendor/provider source · check date see provider entry
- AdvanThink: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AdvanThink: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AdvanThink: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AdvanThink: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AegisX: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AegisX: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AfterData: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AfterData: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Aivodot: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Aivodot: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Aivodot: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AMLYZE: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AMLYZE: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Aptus.AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Aptus.AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ASC Technologies: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ASC Technologies: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Aunetic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Aunetic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Aunetic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Aunetic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- B4Finance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- B4Finance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- B4Finance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Certivity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Certivity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Certivity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- cmpliance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- cmpliance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- complead: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- complead: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- complead: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complear: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complear: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complear: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complear: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complear: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- COMPLY: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- COMPLY: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- COMPLY: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ComplyAdvantage: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ComplyAdvantage: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ComplyAdvantage: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complyfirst: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complyfirst: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Conformis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Conformis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Conformis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Corlytics: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Corlytics: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CUBE RegPlatform: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dakota Software: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dakota Software: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dakota Software: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dataleon: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dataleon: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ECIX Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ECIX Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ECIX Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Enhesa: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Enhesa: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Enhesa: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Enhesa: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ERM: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ERM: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fenergo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fenergo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fenergo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fenergo: company location / legal entityVendor/provider source · check date see provider entry
- FinregE: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- FinregE: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- FinregE: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Flagright: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Flagright: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Flagright: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Freyr: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Freyr: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Freyr: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Harmoney: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Harmoney: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Harpocrates Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Harpocrates Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hawk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hawk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hawk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- IMTF: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- IMTF: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- IMTF: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- IMTF: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Klavius: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Klavius: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Klavius: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Kreios: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Kreios: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- LandingRed: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Leegle: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Leegle: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Leegle: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Leegle: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- LegalTegrity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- LegalTegrity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Legartis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Legartis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Licentium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Licentium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Licentium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lucinity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lucinity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- LYODS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- LYODS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- LYODS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Majors: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Majors: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Marble: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Marble: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Metis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- MyComplianceOffice: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- MyComplianceOffice: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Napier AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Napier AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Napier AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Neterium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Neterium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Neurasix: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Neurasix: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Nimonik: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Nimonik: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Nimonik: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Nimonik: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Obsidian Regulatory Intelligence: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Obsidian Regulatory Intelligence: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Obsidian Regulatory Intelligence: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Okai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Okai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Okai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Polixis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Polixis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Polzia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Polzia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Polzia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PROXORA: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PROXORA: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PROXORA: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Quantexa: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Quantexa: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Quantexa: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Red-on-line: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Red-on-line: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Redica Systems: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Redica Systems: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RegASK: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RegASK: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RegASK: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RegEd Regulatory Change Management: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RegGenome: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RegGenome: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RegGenome: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Reggy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Reggy: company location / legal entityVendor/provider source · check date see provider entry
- Regnology: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Regnology: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Regnology: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Regnology: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Regnology: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- regSpace: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ripjar: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ripjar: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ripjar: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ripjar: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskSafe AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskSafe AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskSafe AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskSafe AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskSafe AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sherlocq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sherlocq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sherlocq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Shift Technology: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Shift Technology: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Simmons & Simmons: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Simmons & Simmons: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sinpex: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sinpex: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sireto: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sireto: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- smartKYC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- StarCompliance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- StarCompliance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- StarCompliance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SteelEye: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SteelEye: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SteelEye: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sygno: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sygno: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sygno: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sygno: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TAINA Technology: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TAINA Technology: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TAINA Technology: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Tieto: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Tieto: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Tookitaki: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Tookitaki: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Tookitaki: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Tookitaki: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TrimAlert: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vyntra: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vyntra: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vyntra: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- WIDTH: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- WIDTH: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- WIDTH: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zango: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zango: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zyphe: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zyphe: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Apiax (Behavox): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Apiax (Behavox): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Apiax (Behavox): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Case IQ: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Case IQ: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CO.DE: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CO.DE: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compliance Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compliance Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compliance Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compliance Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complyport: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complyport: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complyport: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complyport: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Confidly: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Confidly: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DHC Business Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DHC Business Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DHC Business Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DHC Business Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DHC Business Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EQS Compliance Cockpit: company location / legal entityVendor/provider source · check date see provider entry
- Ethicontrol: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ethicontrol: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ethicontrol: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Euronext Corporate Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Euronext Corporate Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- FaceUp: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- FaceUp: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- FaceUp: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fano Labs: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fano Labs: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fano Labs: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- fobi solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hadrius: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hadrius: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hadrius: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hadrius: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hadrius: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Intexly: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Intexly: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Intexly: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- JurisTech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- lawcode: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- lawcode: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- lawcode: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- NamiTech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- NamiTech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- otris compliance SUITE: company location / legal entityVendor/provider source · check date see provider entry
- SpeakUp Platform: company location / legal entityVendor/provider source · check date see provider entry
- Talon Global: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Talon Global: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wecan (SEALSQ): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wecan (SEALSQ): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wecan (SEALSQ): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Wecan (SEALSQ): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Whispero: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Whispero: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Whispli: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Whispli: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Whispli: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Whistlelink / Trustlinks: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Whistlelink / Trustlinks: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Whistlelink / Trustlinks: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Whistlelink / Trustlinks: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Whistlelink / Trustlinks: company location / legal entityVendor/provider source · check date see provider entry
- Acuity STREAM: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Acuity STREAM: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Akitra: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Akitra: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Akitra: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Apptega: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Arduredu: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Arduredu: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Avson: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Avson: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Avson: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Avson: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Babel: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Babel: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Babel: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Babel: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Carbide: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Carbide: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CATAAM: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CATAAM: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cautera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cautera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cautera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cisodium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cisodium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cisodium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Claw GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Claw GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Claw GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CloudNextAI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Comp AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Comp AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Comp AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Comp AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compleye: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compleye: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compleye: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compleye: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compliance Compass: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compliance Compass: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ComplianceCow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ComplianceCow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ComplianceCow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ComplianceCow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complychain: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complychain: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- condignum: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- condignum: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- condignum: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- condignum: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ControlCase: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ControlCase: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ControlCase: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CosmoSec: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CosmoSec: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cyber Sierra: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cyberday: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cyberday: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cyberday: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberHeed: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberHeed: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberHeed: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberS3c: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberS3c: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberS3c: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberSmart: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberSmart: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberSmart: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CyberSmart: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cynomi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cynomi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ditis (Voith): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ditis (Voith): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ditis (Voith): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ditis (Voith): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ditis (Voith): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ditis (Voith): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Domyno: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Domyno: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Drata: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EFFITEK: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EFFITEK: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EFFITEK: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EFFITEK: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EFFITEK: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Egerie Cyber GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Egerie Cyber GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Egerie Cyber GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Egerie Cyber GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Egerie Cyber GRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ELLIA Intelligence: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ELLIA Intelligence: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ELLIA Intelligence: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ELLIA Intelligence: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- FEHA Assurtech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- FEHA Assurtech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- FEHA Assurtech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- FEHA Assurtech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- fuentis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- fuentis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- fuentis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- fuentis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- fuentis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Galea: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Galea: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GRiCk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GRiCk: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Guardiso: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Guardiso: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Guardiso: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hicomply: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hicomply: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hicomply: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hicomply: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HiScout GRC Suite: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HiScout GRC Suite: company location / legal entityVendor/provider source · check date see provider entry
- i-doit GRC Suite+: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- i-doit GRC Suite+: company location / legal entityVendor/provider source · check date see provider entry
- infodas (Airbus): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- infodas (Airbus): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- infodas (Airbus): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- infodas (Airbus): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- infodas (Airbus): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- IntelliGRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- IntelliGRC: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Intervalid: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Intervalid: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Intervalid: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Intuitem CISO Assistant: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Intuitem CISO Assistant: company location / legal entityVendor/provider source · check date see provider entry
- isidaten: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- isidaten: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- isidaten: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- isidaten: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ISMS.online: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ISMS.online: company location / legal entityVendor/provider source · check date see provider entry
- Isodora: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Isodora: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Isodora: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Kertos: company location / legal entityVendor/provider source · check date see provider entry
- KRES.ID: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- KRES.ID: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- KRES.ID: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lutech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lutech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Make IT Safe: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Make IT Safe: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Make IT Safe: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Make IT Safe: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Meta-Data Digital: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Meta-Data Digital: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Meta-Data Digital: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Mindlapse: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Mindlapse: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Mindlapse: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Naq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Naq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Naq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- neonotu: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- neonotu: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- neonotu: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OptiTech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OptiTech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ORBIT: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ORBIT: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ostendio: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ostendio: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Paramify: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Paramify: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Perium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Perium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Perium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Perium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Perium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Phinasoft: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Phinasoft: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Phinasoft: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Phinasoft: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Reglyze: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Reglyze: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RegO: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RegO: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RegO: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RegO: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RegScale: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Risk Hunter: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Risk Hunter: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Risk Hunter: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Risk Hunter: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ScalePad: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ScalePad: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Scrut Automation: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Secani: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Secani: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Secani: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Secani: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Secfix: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Secfix: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Secfix: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SECJUR: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SECJUR: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SECJUR: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SECJUR: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SECJUR: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SECJUR: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SecTepe: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SecTepe: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SecTepe: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SecureSlate: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SecureSlate: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sekit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sekit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sekit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sigea: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sigea: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sokigo (Addnode Group): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sokigo (Addnode Group): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Strike Graph: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Strike Graph: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TameTrust: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TameTrust: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Teddy Technologies: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Teddy Technologies: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Telcon: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Telcon: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Telefónica Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Telefónica Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Telefónica Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Telefónica Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Telefónica Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TicTac: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TicTac: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TrustCloud: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TrustCloud: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TrustCloud: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trustero: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trustero: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trustero: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TrustMAPP: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TrusTrak Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TrusTrak Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TrusTrak Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TTS Trusted Technologies and Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TTS Trusted Technologies and Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TTS Trusted Technologies and Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TTS Trusted Technologies and Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- TTS Trusted Technologies and Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- UESE Italia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- UESE Italia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- UESE Italia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Uncia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Uncia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Uncia: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Unicis.Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Unicis.Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Unicis.Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- UPRIVER / AuditFlow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- UPRIVER / AuditFlow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- UPRIVER / AuditFlow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vailor: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vailor: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VectaIA: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VectaIA: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- verinice: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- verinice: company location / legal entityVendor/provider source · check date see provider entry
- VibrantiX: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VibrantiX: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VibrantiX: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VibrantiX: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VibrantiX: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Virtualis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Virtualis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Virtualis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Virtualis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- xmera Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- xmera Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- xmera Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zania: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zania: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zania: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zania: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zania: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- 2B Advice: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- 2B Advice: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- 2B Advice: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Acompli: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Acompli: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AIGOY: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AIGOY: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AIGOY: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AlgoGrass: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AlgoGrass: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- audatis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- audatis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- audatis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- caralegal Data Responsibility Platform: company location / legal entityVendor/provider source · check date see provider entry
- Complynz: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complynz: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Copilot Works: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Copilot Works: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Copilot Works: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dastra: company location / legal entityVendor/provider source · check date see provider entry
- DataGrail: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DataGrail: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DataGuard: company location / legal entityVendor/provider source · check date see provider entry
- dcomply: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- dcomply: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GDPR Register: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GDPR Register: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GDPR Register: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GDPR Register: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GDPR Register: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GoTrust: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GoTrust: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GoTrust: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GoTrust: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- heyData: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- heyData: company location / legal entityVendor/provider source · check date see provider entry
- ITML: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ITML: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ketch: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ketch: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- LedgerAI (Quantyx): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- LedgerAI (Quantyx): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- LedgerAI (Quantyx): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Leto: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Leto: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Leto: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lightbeam: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lightbeam: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lightbeam: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lightbeam: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lightbeam: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Mine: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Mine: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- preeco: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- preeco: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- preeco: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- preeco: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Privacy Tools: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Privacy Tools: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Privacy Tools: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PrivacyEngine: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PrivacyEngine: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PrivacyEngine: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PrivacyEngine: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Privado AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Privado AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Priverion: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Priverion: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PrivIQ: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PrivIQ: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PrivIQ: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Proliance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Proliance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Proliance: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Redacto: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Redacto: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Relyance AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Relyance AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Relyance AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Relyance AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Relyance AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Responsum: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Responsum: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Responsum: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Responsum: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ROPAi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ROPAi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Schindler IT Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Schindler IT Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Schindler IT Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Schindler IT Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Securiti AI (Veeam): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Securiti AI (Veeam): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Transcend: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Transcend: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Transcend: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trilateral Research: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trilateral Research: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- UnnaData: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- UnnaData: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Valdra: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Valdra: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Willaw: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Willaw: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Witik: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Witik: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Actify: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Actify: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ai.res: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ai.res: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Asenion: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Asenion: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Asenion: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Asenion: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Conformami: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Conformami: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Credo AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Credo AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Daiki: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Daiki: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Daiki: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Daiki: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Deeploy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Deeploy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Deeploy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Deeploy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Enzai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Enzai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Enzai: company location / legal entityVendor/provider source · check date see provider entry
- Fiddler AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fiddler AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fiddler AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Holistic AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Holistic AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Holistic AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Holistic AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lumenova AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lumenova AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ModelOp: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ModelOp: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ModelOp: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Monitaur: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Monitaur: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Monitaur: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- QuantPi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- QuantPi: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- QuantPi: company location / legal entityVendor/provider source · check date see provider entry
- Saidot: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Saidot: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Saidot: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Saidot: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Saidot: company location / legal entityVendor/provider source · check date see provider entry
- Trusenta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trusenta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trusenta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trusenta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- UNAIT: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- UNAIT: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ValidMind: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VerifyWise: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VerifyWise: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- VerifyWise: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vidimus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vidimus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vidimus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Abiton Ventures: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Abiton Ventures: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Abiton Ventures: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ArvexLab: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ArvexLab: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ArvexLab: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AsiaVerify: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AsiaVerify: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AsiaVerify: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Atlas Systems: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Atlas Systems: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Auditive: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Auditive: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Auditive: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Bitsight Vendor Risk Management: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Black Kite: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Black Kite: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Certa: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Certa: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CHEVORA: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CHEVORA: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CHEVORA: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Conitiv: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Conitiv: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Conveyor: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Conveyor: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Conveyor: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Conveyor: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Conveyor: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Coverbase: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Coverbase: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Coverbase: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DueSphere AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DueSphere AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DueSphere AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DueSphere AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DueSphere AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DueSphere AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Enlighta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Enlighta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Enlighta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Enlighta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ethixbase360: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ethixbase360: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ethixbase360: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ethixbase360: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Ethixbase360: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Galink: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Galink: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Galink: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Galink: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hatfield.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hatfield.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hatfield.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hatfield.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Hatfield.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HICX: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HICX: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Innova Ibérica: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Innova Ibérica: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Innova Ibérica: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- interos.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- interos.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- interos.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lysta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lysta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Lysta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Magnitude: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Magnitude: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Magnitude: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Magnitude: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Mastercard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Mastercard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Mastercard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Neotas: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Neotas: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OPEN / RoboRobo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OPEN / RoboRobo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OPEN / RoboRobo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OPEN / RoboRobo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Orbiq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Orbiq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Panorays: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Panorays: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Panorays: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Panorays: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Prewave: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Prewave: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Prewave: company location / legal entityVendor/provider source · check date see provider entry
- ProcessUnity TPRM Platform: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ProcessUnity TPRM Platform: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Rescana: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Rescana: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Resilinc: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Resilinc: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Resilinc: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Resilinc: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Risk Ledger: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Risk Ledger: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- S&P Global: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- S&P Global: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SAFE Security: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SAFE Security: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SAFE Security: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SAFE Security: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SAFE Security: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SAFE Security: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sayari: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sayari: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sayari: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sayari: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Schwarzthal Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Schwarzthal Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Schwarzthal Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Scrioo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Scrioo: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SecurityPal: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SecurityPal: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SecurityScorecard TITAN AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ShieldByte Infosec: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ShieldByte Infosec: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ShieldByte Infosec: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Supply Wisdom: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Supply Wisdom: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Supply Wisdom: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Supply Wisdom: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vendorica: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vendorica: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zenta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zenta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- 4C Strategies Continuity Manager: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Blue Cipher: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Blue Cipher: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Blue Cipher: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Blue Cipher: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Continuity2 Meridian: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Continuity2 Meridian: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Continuity2 Meridian: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Continuity2 Meridian: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Controllit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Controllit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Controllit: company location / legal entityVendor/provider source · check date see provider entry
- Cryptaguard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cryptaguard: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dalysie: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Dalysie: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Everbridge 360 AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Everbridge 360 AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fortiv: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fortiv: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HoliSentra: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HoliSentra: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HoliSentra: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- HoliSentra: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Inoni: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Inoni: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Motorola Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Motorola Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Motorola Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Motorola Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Premier Continuum ParaSolution: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskFinder: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RiskFinder: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Solustiq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Solustiq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Solustiq: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Veoci: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Veoci: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Veoci: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- A-LIGN: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- A-LIGN: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- A-LIGN: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Alea360: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Alea360: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Alea360: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Alea360: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Alea360: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Andera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Andera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Andera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AssurAI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AssurAI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audavis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audavis: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audirium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audirium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audirium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audirium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audirium: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audit Compass: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audit Compass: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audit Sight: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audit Sight: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audit Sight: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audit Sight: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audit Sight: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AuditBrain: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AuditBrain: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AuditHeroes: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AuditHeroes: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AuditHeroes: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AuditJet: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AuditJet: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AuditX / HiA: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AuditX / HiA: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- AuditX / HiA: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audomate: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audomate: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audvera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audvera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Audvera: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CapItAll: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CapItAll: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Caseware: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Caseware: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Caseware: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Caseware: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Caseware: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Circit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Circit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Circit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Circit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- cluetec: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- cluetec: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- cluetec: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complyon: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Complyon: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ControlHatch: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- ControlHatch: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CORAA AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- CORAA AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cortea: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Cortea: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DataSnipper: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DataSnipper: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- DataSnipper: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Denki: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Denki: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Digital Airways: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Digital Airways: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fieldguide: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fieldguide: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fieldguide: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Fieldguide: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GO SELL: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GO SELL: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GO SELL: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GRCfy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- GRCfy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Groupe Lefebvre: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Groupe Lefebvre: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Groupe Lefebvre: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Intemic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Intemic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Intemic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Irame Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Irame Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Irame Tech: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Litmus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Litmus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Litmus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- LOKIQ: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- MindBridge: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- MindBridge: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- MindBridge: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- NCS SoftSolutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- nextAudit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- nextAudit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- nextAudit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- nextAudit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OP.Serv (ROK Solution): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OP.Serv (ROK Solution): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- OP.Serv (ROK Solution): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Oxus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Oxus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Oxus: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Petual: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Petual: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Petual: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- proISMS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- proISMS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- proISMS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- proISMS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PwC Deutschland: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PwC Deutschland: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- PwC Deutschland: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- QualityReady: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- QualityReady: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- QualityReady: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Regulatory Intelligence Compliance Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Regulatory Intelligence Compliance Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Regulatory Intelligence Compliance Solutions: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RINA: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RINA: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Roz: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Roz: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RunAudit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- RunAudit: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SANNOS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SANNOS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SANNOS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SANNOS: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Skepta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Skepta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Skeptics.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Skeptics.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Skeptics.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Skeptics.ai: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SOX-AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SOX-AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SOX-AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sumeru: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sumeru: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Supervizor: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Supervizor: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Supervizor: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trenta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trenta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trenta: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trullion: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trullion: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Trullion: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Valid8 Financial: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Valid8 Financial: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Valid8 Financial: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Valid8 Financial: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vero AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vero AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vero AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Vero AI: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zenya: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zenya: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zenya: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Zenya: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Assent: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Assent: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Assent: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Assent: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Benchmark Gensuite: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Benchmark Gensuite: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Bizzmine: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Bizzmine: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Bizzmine: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Bizzmine: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Bizzmine: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Bizzmine: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compgova: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compgova: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Compgova: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Digitaliso: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Digitaliso: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EcoOnline: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EcoOnline: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EcoOnline: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- EcoOnline: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- IANClic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- IANClic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- IANClic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- IntegrityNext: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- IntegrityNext: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- IntegrityNext: company location / legal entityVendor/provider source · check date see provider entry
- Metrikflow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Metrikflow: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Neuros Distribution (1-One): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Neuros Distribution (1-One): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Neuros Distribution (1-One): product, documentation or provider assignmentVendor/provider source · check date see provider entry
- NOVASLAN: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- NOVASLAN: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- NOVASLAN: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Novisto: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Novisto: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Novisto: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Novisto: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Nulogy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Nulogy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Nulogy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Nulogy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Nulogy: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- osapiens: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- osapiens: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- osapiens: company location / legal entityVendor/provider source · check date see provider entry
- Phronesys: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Phronesys: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Position Green: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Position Green: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Position Green: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Prodity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Prodity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Prodity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Prodity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Prodity: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- QMS Nordic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- QMS Nordic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Quentic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Quentic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Quentic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Quentic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Quentic: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sedex: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sedex: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sedex: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sinergest: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sinergest: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Sinergest: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Speeki: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Speeki: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Speeki: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SpheraCloud: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- SpheraCloud: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- StarTex Software: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- StarTex Software: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- StarTex Software: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Symalean: product, documentation or provider assignmentVendor/provider source · check date see provider entry
- Symalean: product, documentation or provider assignmentVendor/provider source · check date see provider entry
Update of 15 October 2026: The register comprises 647 providers and provider groups. For 292 entries, a source review status more recent than 14 October 2026 is recorded. The individual review statuses and extensions are marked in the dataset; older source checks are not redated by this editorial update. Location and legal entity remain open where no sufficient source is available.