T-NEX
Menu
DEEN
GRC provider register · Category 5 of 11 · Part 1 of 3

GRC software for information security, digits to E:
35 providers with AI classification.

In short: Part 1 of 3 of the Information security category: full entries for 35 of the 106 providers, alphabetically from digits to E, as of 18 October 2026. Of these, 29 document specific AI functions (83%). In Germany, Austria or Switzerland, three have a documented headquarters, two of them in Germany.

By and Published: As of: · Subpage of the GRC provider register Reviewed by Andreas Unruh and Christoph Gembruch, managing directors of T-NEX GmbH, on
Illustration: globe with networked GRC providers whose AI evidence flows into a checked provider register

Neither completeness nor a general suitability for banks is claimed. Providers are listed alphabetically. The order is not a performance rating.

All 682 GRC providers in the market overview · 379 European GRC providers · Information security category page (106)

Publisher: T-NEX GmbH. Andreas Unruh and Christoph Gembruch are managing directors of T-NEX. This editorial market overview is based on vendor sources and specialist primary sources. It contains no ranking and is not based on a joint product test. The market overview covers 682 providers from GRC and adjacent specialist areas. Acquired brands and former product names are not counted separately. Methodology and sources

Context, figures, review questions and the regulatory framework are on the Information security & cyber compliance category page.

Entries from digits to E: functions, AI classification and sources.

The assignment describes the offering considered, not all of the company's products. AI information names specific functions or limits of the public documentation. Scope of delivery, data storage and regional availability must be checked for each offering. Download provider overview as CSV (German), licensed under CC BY 4.0, credit “T-NEX GRC-Anbieterregister, t-nex.de”.

Is a provider missing or an entry out of date? Send us a note with a source via the contact form. Accepted changes are marked in the entry with the date they were checked.

Information security & cyber compliance: digits to E

35 entries

Information security & cyber compliance · digits to E · 35 providers
Provider / productDocumented focusAI functions and classification
6clicksDocumented focus: Controls, risks, ISMS and assessments with central management and separate entities.AI functions and classification: Hailey AI suggests mappings between framework requirements and controls, explains gaps and creates drafts for assessment answers and actions. Suggestions can be checked on the basis of rationales and evidence.[1] [2] · Specific AI functions documented
Control mapping · Gap analysis · Assessment answers · Draft actions
AI evidence: [2] · Documented as functions of Hailey AI. The page checked does not show complete plan limits; subject-matter review and approval of the suggestions are provided for.
Source check: 2026-10-14
Acuity STREAM · Headquarters: United Kingdom [3] · Location of Acuity Risk Management Limited, registered in England and Wales (No. 12369714). · RizikonDocumented focus: Cyber GRC with risks, controls, assets, tasks and evidence. Cloud and Classic editions address different operational and complexity requirements.AI functions and classification: For STREAM RiskOS, AI has been announced that translates GRC and supplier evidence into prioritised recommendations for action and reports for management bodies. Changes to a risk assessment are intended to require evidence and human approval.[4] [5] [6] [7] [3]Announced or in development
Announced prioritisation of risk actions · Announced creation of evidence-based risk reports
AI evidence: [6] · Announced for November 2026. According to the vendor, not yet launched on the check date, without customers, without a product that can be evaluated live and without published prices. No product test.
Source check: 2026-10-14
Akitra · Product: Andromeda · Headquarters: USA [8] · Andromeda; Akitra AndromedaDocumented focus: Akitra combines compliance frameworks, controls, evidence and risks in the Andromeda platform. Integrations supply data for ongoing control testing and audit preparation. Teams can track control gaps and map evidence to multiple requirements. Supplementary functions bring supplier risks and actions to remediate identified gaps into compliance work.AI functions and classification: The vendor describes AI agents for evidence collection, control mapping and the detection of control gaps. The statements document the provider's functions; scope, quality of results and degree of automation were not checked in practice.[9] [8] [10] · Specific AI functions documented
Control mapping · Evidence collection · Detection of control gaps
AI evidence: [9] [8] · Documented by the vendor; not tested in practice.
Source check: 2026-10-14
ApptegaDocumented focus: Security and compliance programmes with assessments, risks, third parties and evidence; also for managed security service providers.AI functions and classification: Apptega's Assessment Completion Agent reads uploaded security policies, extracts answers for an assessment and maps them to common controls. The pre-filled baseline assessment remains intended for review by the team.[11] [12] · Specific AI functions documented
Evaluate security policies · Pre-fill assessment answers · Map answers to common controls
AI evidence: [12] · Documented by the vendor; no product test.
Source check: 2026-10-14
Arduredu · Product: Arduredu GRC; ARIA · Headquarters: Sweden [13] · Homepage names Arduredu AB with headquarters in Sweden and contact locations Stockholm/Riyadh. Exact register data were not independently verified. · Arduredu AB; ARIA; Arduredu Risk Intelligence AgentDocumented focus: Arduredu offers control monitoring, evidence collection, risks and audit reports with a focus on security requirements in the Gulf states. The product description also covers international compliance frameworks.AI functions and classification: The vendor describes AI for extracting evidence as well as ARIA agents that assess technical findings, map risks to control requirements and escalate critical findings.[13] [14] · Specific AI functions documented
Extract evidence · Map technical risks to control requirements · Prioritise critical control gaps
AI evidence: [13] · Demo, pilot installation and download subject to approval offered. Homepage and terms of use describe different deployment and pricing states; expressly confirm the current AI and operational scope.
Source check: 2026-10-15
Avson · Product: Praesys · Headquarters: Spain [15] · The indexed vendor website names Spanish contact addresses in Madrid and Barcelona. Direct retrieval was partially blocked; the country classification is based on the search index of the vendor website and the supplementary company profile of its own. The precise legal company name remains open; Praesys is not counted additionally as a vendor. · Avson GRC; PraesysDocumented focus: Praesys is Avson's own GRC SaaS for security requirements, risks, controls, evidence and continuity. The offering is aimed at both organisations and consultancies with multiple clients and includes, among other things, support for the MAGERIT risk methodology.AI functions and classification: Avson describes the AI-supported creation of organisation-specific policies, procedures and other compliance documents. Praesys additionally names an assistant that handles questions on security frameworks on the basis of the respective project context.[16] [17] [18] [15] · Specific AI functions documented
Draft policies · Create compliance documents · Answer project-specific compliance questions
AI evidence: [16] [17] · Described as project-accompanying access, ongoing subscription and partner access. Vendor offers a personalised demo; define specific AI functions and support contractually.
Source check: 2026-10-15
Babel · Product: ePULPO · Headquarters: Spain [19] · BABEL Sistemas de Información; ePULPO; Ingenia; Ingeniería e Integración AvanzadasDocumented focus: ePULPO is Babel's GRC product for IT processes and information security, with a particular focus on public organisations. It automatically links the inventory of technical assets with risk analysis and risk management. Further functions include action and compliance tracking, vulnerability detection and cyber incidents. Among the supported frameworks, Babel names ENS, data protection and ISMS according to ISO 27001.AI functions and classification: No specific AI work step is documented for ePULPO in the product sources checked. Babel's general AI strategy and partnerships are not counted as evidence of an AI function in ePULPO.[20] [19] [21] [22]Not specifically documented in the source check
ePULPO 4.0 names inventory, BI, risk links, vulnerability and incident management. The corporate partnership does not document any specific AI extension of this product.
Sources checked: [20] [21] · Specific AI functions in ePULPO not documented in the source check.
Source check: 2026-10-14
Carbide · Product: Carbide PlatformDocumented focus: Combines compliance software with optional expert support. The platform structures security and data protection requirements, shows framework gaps and supports audit preparation and cloud monitoring.AI functions and classification: Carbide Analyst queries current compliance data, drafts policies, initiates risk assessments and compares evidence with framework requirements for gaps.[23] [24] · Specific AI functions documented
Query compliance and control status · Draft policies · Prepare risk assessments · Detect evidence gaps
AI evidence: [24] · According to the vendor, available across all plan tiers, activated by the consultant; external LLM connection via configured MCP tokens. Subject-matter approval integrated; no product test.
Source check: 2026-10-14
CATAAM · Product: CATAAM / OKF Context Engine · Headquarters: Canada [25] · Terms of use name TheMarkups Canada Inc. as platform provider and Mississauga, Ontario, Canada, as contact location. · TheMarkups Canada Inc.; OKF Context Engine; CATAAM Claude MCP connectorDocumented focus: CATAAM combines compliance management and evidence with technical security monitoring and security testing. Requirements, controls, assets and findings are managed together and reused for different audit frameworks.AI functions and classification: The OKF Context Engine exports the compliance dataset as a linked knowledge structure. Via the documented Claude MCP connector, specific questions on control coverage, assets and evidence can be asked. The AI evaluation is carried out via the connected assistant; the export remains read-only with respect to CATAAM.[26] [25] · Specific AI functions documented
Query control coverage via AI assistant · Uncover connections between assets and evidence · Provide compliance context for AI-supported analyses
AI evidence: [26] · The vendor describes the add-on as already activatable under Settings / AI Context Export, including MCP API key. External AI assistant required; not tested ourselves.
Source check: 2026-10-15
Cautera · Product: Cautera; AI Assistants · Headquarters: Portugal [27] · Terms of use name Cautera Labs, Unipessoal Lda., NIPC 519436539, with registered office in Lisbon, Portugal. · Cautera Labs, Unipessoal Lda.; Cautera LabsDocumented focus: Cautera brings together cyber risks, controls, evidence, policies, audits and supplier assessments. The platform supports the preparation and ongoing handling of requirements from various security frameworks in a shared workspace.AI functions and classification: The AI suggests evidence and control mappings, extracts findings from audit reports and drafts answers to security questionnaires. Further documented functions support gap analyses, action plans and risk suggestions; suggestions are intended for human review.[28] [29] [27] · Specific AI functions documented
Map evidence to controls · Extract audit findings · Answer security questionnaires · Analyse compliance gaps · Draft action plans
AI evidence: [29] · Offered as B2B SaaS with demo and customer-specific orders. Check individual AI functions and quotas in the contractual scope.
Source check: 2026-10-15
Cisodium · Product: Cisodium ISMP; ELSA · Headquarters: Estonia [30] · Developer entry of the linked Cisodium extension names CISODIUM OÜ with an address in Tallinn, EE. The terms of use name the same legal entity. · CISODIUM OÜ; Cisodium ISMP; ELSA Security AssistantDocumented focus: Cisodium combines security risks, controls, policies, evidence and audits with further areas such as supplier risk and continuity. The platform establishes relationships between these datasets and supports several security frameworks.AI functions and classification: The ELSA assistant answers questions on the basis of the security programme, drafts policies and supports gap analyses. A published browser extension also generates answers to security questionnaires from the data of the Cisodium platform.[31] [32] [30] · Specific AI functions documented
Analyse compliance gaps · Draft policies · Query security programme · Answer security questionnaires
AI evidence: [31] [30] · Vendor offers demo and trial access; ELSA browser extension is publicly listed. Functional scope and deployment depend on the agreed package.
Source check: 2026-10-15
Claw GRC · Product: Claw GRC · One Frequency Inc. is named in the terms as operator. A company headquarters was not separately documented in the sources checked; the choice of Delaware law alone does not determine the country classification. · One Frequency Inc.; ClawGRCDocumented focus: Claw GRC manages security frameworks, controls, evidence, findings and actions. Alongside a focus on AI agents, the product covers general cyber compliance and security audits.AI functions and classification: A documented MCP connector links external AI assistants to compliance data. The assistants can query control status and open findings and create action tickets. The specific evidence concerns this AI integration for GRC work, not just the monitoring of AI agents.[33] [34] [35] · Specific AI functions documented
Query compliance status via AI assistant · Evaluate open security findings · Create action tickets from AI-supported queries
AI evidence: [34] · Trial access and subscriptions offered. AI functions require a compatible external assistant and MCP access. According to the documentation, additional MCP functions for evidence uploads, control management, gap analyses and reports are still on the roadmap.
Source check: 2026-10-15
CloudNextAI · Product: Certus · Headquarters: Canada [36] · Vendor website names CloudNextAI Inc. and Windsor, Ontario, Canada. · CloudNextAI Inc.; Certus PlatformDocumented focus: Certus focuses on cloud compliance and identity controls in Google Cloud environments. The platform combines permission reviews and remedial actions with documented evidence for SOC 2 and ISO 27001.AI functions and classification: The vendor describes a Vertex AI-based platform with dialogue-based requests for time-limited permissions. Review and clean-up of problematic identities are linked with compliance documentation. The specific public AI description is limited to this cloud and identity context.[36] · Specific AI functions documented
Handle permission requests through dialogue · Link cloud control findings with remedial actions · Create compliance evidence from cloud workflows
AI evidence: [36] · Expressly a private beta with early-access request for Canadian Google Cloud customers. Not a generally available enterprise suite; functions and product maturity not tested ourselves.
Source check: 2026-10-15
Comp AI · Product: Comp AI Compliance Platform · Headquarters: USA [37] · Bubba AI, Inc. d/b/a Comp AI with business address in New York according to the terms and conditions; a current press release names Miami as headquarters. Both are in the USA. · Bubba AI, Inc.; Bubba AI; CompAIDocumented focus: Comp AI combines compliance frameworks with policies, technical evidence and control checks. Integrations and configurable check workflows capture the state of the connected systems. Teams can compile evidence for audits and provide published information via a Trust Portal. Supplementary risk and supplier functions are intended to bring security and compliance work together in one platform.AI functions and classification: Comp AI creates policies from organisational information and turns natural-language check instructions into automated control tests. An AI browser workflow is documented that checks controls and captures screenshots as evidence; AI also supports risk drafts and supplier assessments.[38] [39] [37] [40] · Specific AI functions documented
Draft policies from organisational context · Generate control tests from check instructions · Check controls via AI browser and capture evidence · Support risk drafts and supplier assessments
AI evidence: [38] [39] · Product functions documented by the vendor; integrations and access rights must be set up. No product test.
Source check: 2026-10-14
Compleye · Product: Compleye · Headquarters: Netherlands [41] · Compleye OnlineDocumented focus: Compleye combines its own compliance platform with accompanying professional services for technology companies. The software keeps evidence and documentation for security, data protection and quality requirements together. The described areas of use include ISO 27001, SOC 2, NIS2 and AI governance; platform-only contracts are also offered.AI functions and classification: No specific AI work steps are documented in the accessible product description. Individual indexed vendor texts mention AI analytics in general terms without documenting a sufficiently clear product workflow.[42] [41] [43] [44]Not specifically documented in the source check
Current product page read; supplementary indexed texts only general, detailed retrieval faulty. ISO 42001 and AI Act consulting not equated with AI assistants.
Sources checked: [42] [44] · No specific AI availability can be derived from the sources checked.
Source check: 2026-10-14
Compliance Compass · Product: Compliance Compass GRC · Headquarters: Germany [45] · Compliance Compass GmbH, Bonn; Bonn Local Court HRB 30795. · Compliance Compass GmbHDocumented focus: NIS2-oriented platform with risks, policies, suppliers, incidents, training and audits. Evidence and approvals are linked to tasks and controls.AI functions and classification: AI creates and updates policies from templates, organisational context and regulatory requirements. The vendor also describes AI-supported risk detection and assessment; policy versions undergo documented approvals.[46] [45] · Specific AI functions documented
Draft policies from organisational context · Update policies · Pre-assess security risks
AI evidence: [46] · Platform offered with free demo and guided onboarding. Agree the specific module and AI scope; no independent performance review.
Source check: 2026-10-15
ComplianceCow · Product: Agentic GRC Middleware / Automation Studio · Headquarters: USA [47] · ContiNube (differing reference to the legal entity in the terms of use)Documented focus: ComplianceCow supplements existing GRC systems with ongoing evidence collection and testing of technical controls. The software connects cloud and internal systems with control requirements, test results and actions. Integrations transfer results to GRC platforms; notifications and guided workflows support the handling of identified gaps within agreed deadlines.AI functions and classification: The Automation Studio supports building evidence collection and control tests with AI. The vendor also describes natural-language analysis of control status and trends with connected LLM providers and models.[48] [47] [49] [50] · Specific AI functions documented
AI-supported creation of control tests · AI-supported set-up of evidence collection · Natural-language control analysis
AI evidence: [48] · Documented by the vendor; for natural-language analysis with connected LLM providers and models; not tested in practice.
Source check: 2026-10-14
Complychain · Product: Complychain Platform · Headquarters: Denmark [51] · Vendor privacy policy names Complychain ApS, CVR 45031683. Danish company; not the similarly named US consulting offering. · Complychain ApS; Complychain.dk; not ComplyChain SolutionsDocumented focus: Complychain links risks, controls, security incidents and documents with supplier and subcontractor overviews. The platform supports data protection and security frameworks, evidence management and regular compliance tasks.AI functions and classification: The AI assistants described analyse contracts, draft policies and procedures and support supplier oversight and audits. A specific example is the AI-supported creation of subcontractors for documenting the supply chain.[52] [51] · Specific AI functions documented
Analyse contracts · Draft policies · Support supplier oversight · Document subcontractors
AI evidence: [52] · Existing platform with demo, sign-up and published customer examples. Additional agents are continuously being developed; check the specifically agreed scope.
Source check: 2026-10-15
condignum · Product: condignum Plattform · Headquarters: Austria [53] · condignum GmbH; condignum Software GmbHDocumented focus: The condignum platform links security and compliance requirements with risks, controls, actions and evidence. Its GRC area supports ISMS set-up and ongoing operation, audit management, internal controls and gap analyses. Preconfigured content addresses, for example, ISO 27001, NIS2, TISAX and IEC 62443. Dashboards and reminders accompany structured implementation within complex corporate organisations.AI functions and classification: The platform pages checked describe security requirements, risk management, actions and reports. A specifically AI-supported GRC work step is not documented in the source check.[54] [55] [56] [53]Not specifically documented in the source check
Targeted domain research did not yield sufficient product evidence; this does not prove the absence of AI.
Sources checked: [54] [55] · No specific AI function documented in the sources checked.
Source check: 2026-10-14
ControlCase · Product: Compliance Hub / ONE AUDIT · Headquarters: USA [57] · ControlCase LLC; Compliance Hub; ONE AUDIT; CyberNINESDocumented focus: With Compliance Hub and ONE AUDIT, ControlCase offers software for coordinating multiple security and compliance audits. Controls and evidence can be mapped to requirements of different frameworks and reused. Dashboards show progress and open tasks. The offering combines the software with audit and managed service offerings for carrying out audits.AI functions and classification: The general availability announcement describes an LLM-supported preliminary review of submitted documents and answers to relevant evidence questions. The process ends with a review by a ControlCase auditor; fully automatic audit decisions are therefore not documented.[58] [57] [59] · Specific AI functions documented
LLM preliminary review of evidence · Answering questions on evidence
AI evidence: [58] · Documented by the vendor; announced as generally available since 10 June 2024; not tested in practice.
Source check: 2026-10-14
CosmoSec · Product: GRC platform / SiriusAI · Headquarters: Brazil [60] · Provider according to the terms of use: CosmoSec Consultoria em Tecnologia da Informação LTDA., CNPJ 66.756.382/0001-96; website describes the platform as Brazilian. · CosmoSec Consultoria em Tecnologia da Informação LTDA.; SiriusAIDocumented focus: Platform for security controls, risks, suppliers, data protection, policies and continuous evidence. Links diagnosis, actions and audit documentation.AI functions and classification: SiriusAI evaluates the organisation's status, prioritises actions with rationale and drafts policies and action plans. Human approval is required before drafts are adopted as evidence.[61] [60] · Specific AI functions documented
Prioritise actions from control gaps · Draft policies and action plans · Summarise security status for executives
AI evidence: [61] [60] · Commercial access after demo and conclusion of contract; customer login available. SiriusAI is described as part of the platform offered.
Source check: 2026-10-15
Cyber Sierra · Product: Cyber SierraDocumented focus: Supports control gap analyses, supplier assessments and evidence review. Policies, frameworks, assets and corporate systems can be integrated into existing security and GRC structures.AI functions and classification: Cyber Sierra describes AI analysts for framework-specific gap analyses, evidence assessments with rationales, supplier reviews and answers to security questionnaires from the customer's own documents. Results are presented to the responsible persons for review.[62] · Specific AI functions documented
Framework-specific gap analysis · Assessment of audit evidence · Supplier reviews · Answering security questionnaires
AI evidence: [62] · Analysts documented by the vendor, used with the chosen model and configured data connections; various operating models described. No product test.
Source check: 2026-10-14
Cyberday · Product: Cyberday · Headquarters: Finland [63] · DigiturvamalliDocumented focus: Cyberday organises information security as ongoing work with tasks, owners and documented actions. The platform combines security management with employee training and supports collaboration via connected work environments. A guided onboarding creates a suitable compliance programme from company information.AI functions and classification: Cyberday uses AI to create an initial security profile and a compliance plan tailored to it. Policies and documentation are pre-filled; existing compliance reports can be examined for urgent gaps.[64] [63] [65] · Specific AI functions documented
Draft security profile and compliance plan · Pre-fill security policies · Analyse compliance reports for gaps
AI evidence: [64] · Documented by the vendor in the Fast-Track and ISMS offering; drafts must be reviewed and approved. No product test.
Source check: 2026-10-14
CyberHeed · Product: SmartPrep / Evidence & AI · Headquarters: Australia [66] · Website/terms and conditions name CyberHeed Pty Ltd, Melbourne, Australia. · CyberHeed Pty LtdDocumented focus: Cyber compliance with adaptive baseline assessment, control mapping, evidence and ongoing integration signals for multiple frameworks.AI functions and classification: SmartPrep gathers organisational knowledge with AI-supported follow-up questions. Evidence Validator assesses evidence, AutoMatch maps documents to controls, and Policy Assessor checks policies for gaps. Answers can be based on existing evidence and assessments.[67] [68] [66] · Specific AI functions documented
Support compliance baseline assessment · Assess evidence and map it to controls · Detect policy gaps
AI evidence: [67] [68] · Offered as a product with demo, interactive demonstration and customer portals; individual frameworks and integrations must be clarified before procurement.
Source check: 2026-10-15
CyberS3c · Product: Viriatus / AI vCISO · Headquarters: Portugal [69] · CyberS3c names NIF PT515403504 and Loures, Portugal. The associated ANCIBER page describes the same legal entity as CYBERSEC, Lda. · CYBERSEC Lda.; CyberS3c; ViriatusDocumented focus: Viriatus combines technical attack surface analysis with cyber risks, compliance and incident processes. Reports and incident workflows address NIS2 and ISO 27001, among others.AI functions and classification: The AI vCISO answers questions from organisational data by means of retrieval-augmented generation. It supports the prioritisation of risks and prepares reports for security officers and management.[70] [69] [71] · Specific AI functions documented
Explain cyber risks from the organisation's own data · Prioritise risks · Prepare management reports
AI evidence: [70] · Vendor offers a product demonstration and a dedicated Viriatus product page. The platform is offered alongside CyberS3c services; agree scope and data connections.
Source check: 2026-10-15
CyberSaint CyberStrongDocumented focus: CyberStrong combines security data, controls and cyber risks with financial quantification.AI functions and classification: According to the vendor, CyberSaint AI uses graph neural networks to link controls, gaps, assets and threats. The results support the detection and prioritisation of risk hotspots and the updating of risk likelihoods.[72] [73] · Specific AI functions documented
Detect risk and control relationships · Prioritise findings by business impact · Update risk likelihoods on the basis of new signals
AI evidence: [73] · Analysis functions documented by the vendor; the chat co-pilot is expressly only announced and is not counted as a usable function. Not tested in practice.
Source check: 2026-10-14
CyberSmart · Product: CyberSmart / Active Protect / Privacy Toolbox · Headquarters: United Kingdom [74] · CyberSmart LimitedDocumented focus: With device controls, risk reports, training and policy workflows, CyberSmart is aimed at small and medium-sized enterprises. The platform supports, among other things, preparation for Cyber Essentials. A Privacy Toolbox adds data protection assessments, policies and processes for data subject requests.AI functions and classification: The source check on CyberSmart did not document any specific AI function in the compliance workflows. Automated vulnerability scans and information on the secure use of AI are not counted as separate AI-GRC evidence.[75] [74] [76] [77]Not specifically documented in the source check
Product and compliance descriptions and targeted vendor search checked; no statement about the general absence of AI.
Sources checked: [75] [76] [77] · No specific AI work step documented in the source check; no statement about the absence of AI.
Source check: 2026-10-14
Cynomi · Product: Security Growth PlatformDocumented focus: Supports service providers with security programmes and vCISO services for multiple clients. Risk assessments, gap analyses, control mapping, policies and reports form repeatable service processes.AI functions and classification: Cynomi describes AI for assessing cyber risks and for context-based recommendations. In assessments, the AI suggests content on the basis of customer data, scans, integrations and uploaded documents.[78] [79] · Specific AI functions documented
Assess cyber risks · Prepare recommendations for action · Support assessments with context-based suggestions
AI evidence: [78] · Documented by the vendor; no product test.
Source check: 2026-10-14
Cypago · To the detailed profile Documented focus: Cyber GRC for ongoing control monitoring, evidence collection, risk management and user access reviews across connected IT systems.AI functions and classification: ChatGRC answers natural-language questions on frameworks, controls, evidence, risks and findings. AI supports linking relevant data and semantic relationships across systems.[80] [81] · Specific AI functions documented
Query GRC documents and data through dialogue · Detect relationships between controls, requirements and evidence · Bring together status information with document references
AI evidence: [81] · Documented by the vendor; not tested in practice.
Source check: 2026-10-14
ditis (Voith) · Product: ditis InfoSec Manager · Headquarters: Germany [82] · ditis Systeme; ditis InfoSec Manager; JMV SE & Co. KG; VoithDocumented focus: The ditis InfoSec Manager maps information security management on Microsoft 365 and SharePoint Online. It links assets and protection requirements with risks, controls and actions. Responsibilities, residual risks and evidence can be handled in a structured way; audit preparation, management reviews and reports support oversight. Optional content addresses additional requirements such as TISAX or KRITIS.AI functions and classification: The pages checked on the ditis InfoSec Manager document ISMS workflows and the extension to include AI governance. Separate offerings for secure AI and AI consulting do not document any specific AI work step in the GRC product recorded here.[83] [82] [84] [85] [86] [87]Not specifically documented in the source check
Product relevance is decisive: other AI offerings of the provider group are not attributed as AI in the InfoSec Manager.
Sources checked: [83] [86] [87] · No specific AI function documented in the sources checked.
Source check: 2026-10-14
Domyno · Product: Domyno Compliance / IA Cyber · Headquarters: France [88] · Domyno SAS, Paris; SIRET 933 059 099 00012 according to the provider. · Domyno SAS; Domyno IA CyberDocumented focus: ISMS and cyber compliance platform with risks, policies, assets, suppliers and evidence for multiple regulations. Common controls link ISO 27001, NIS2 and DORA, among others.AI functions and classification: Based on the organisational context, AI suggests controls, policies and actions, creates draft documents and prioritises tasks by risk. Via MCP, external AI assistants can query authorised compliance data.[89] [88] · Specific AI functions documented
Suggest controls and actions · Draft policies and reports · Query compliance data in natural language
AI evidence: [89] [88] · Commercial offering with demo. Domyno's own configurable agents are labelled as beta; a Mistral connection is described separately as future. MCP requires a suitable assistant.
Source check: 2026-10-15
DrataDocumented focus: Compliance, risk management and security evidence with reusable questionnaire answers.AI functions and classification: Drata AI suggests policy-to-control mappings, summarises supplier reports, explains failed tests and drafts questionnaire answers from approved content.[90] [91] [92] · Specific AI functions documented
Control mapping · Supplier analysis · Test remediation · Questionnaire answers
AI evidence: [90] [92] · Documented in the product description; specific plan and licence limits not shown on the pages checked.
Source check: 2026-10-14
EFFITEK · Product: Auditor PRO · Headquarters: France [93] · EFFITEK SARL; Auditor Pro; Auditor PRO; auditorpro.appDocumented focus: Auditor PRO by EFFITEK supports cybersecurity and compliance audits as well as ongoing risk management. The platform combines control assessments, referenced evidence, risk registers and action campaigns with recurring controls. Further modules cover suppliers, incidents and security exceptions. Technical audit reports can be imported and mapped to controls; reports and assessment programmes support internal teams and consultancies.AI functions and classification: AI suggestions for threat scenarios, assessment of evidence relevance, draft documents and work instructions for controls are documented. The product history also mentions AI-generated risk chains from technical findings. Outputs are reviewed by auditors; scope and quotas depend on the plan.[94] [95] [96] [97] [93] · Specific AI functions documented
Assess the relevance of existing evidence for controls · Suggest threat scenarios and risk chains · Draft work instructions for recurring controls · Pre-draft information security policies and other ISMS documents
AI evidence: [95] [96] [97] · Documented by the vendor; not tested in practice
Source check: 2026-10-14
Egerie Cyber GRC · Headquarters: France [98] · EGERIE SOFTWARE SAS; registered office 44 Boulevard de Strasbourg, 83000 Toulon; RCS Toulon 817640998. Provider legal entity expressly named in the Legal Notice. Geography checked on 15.10.2026; no conclusions on hosting or owners drawn from the registered office.Documented focus: Cyber risk analyses, compliance programmes, actions and third-party assessments on a shared platform.AI functions and classification: The new Egerie platform uses AI agents to analyse requirements in the organisational context and suggest next actions. Jerry links documents with compliance content and prepares management reports from status and programme data. Approvals, risk acceptance and subject-matter decisions remain with the responsible persons.[99] [100] [101] [102] [103] [104] [98] · Specific AI functions documented
Analyse regulatory requirements in context · Suggest prioritised actions and initial implementation plans · Link documents with compliance content · Prepare compliance reports for management
AI evidence: [101] [100] [102] · Vendor announcement of 30.09.2026 describes the new agentic platform; the compliance module has been in use since June 2026. The current product page describes Jerry as already available. Confirm specific agents, modules and approvals in the offer; not transferable to all older Egerie modules.
Source check: 2026-10-15
ELLIA Intelligence · Product: ELLIT Shield / ARIA · Headquarters: Estonia [105] · ELLIA INTELLIGENCE OÜ, Estonian registry number 17392889, Tallinn; registered since 11.12.2025. Provider website also uses the spelling UO. · ELLIA INTELLIGENCE OÜ; ELLIA Intelligence UO; ELLIT; ELLIT Shield; ARIA; ELLIT Alert TreeDocumented focus: ELLIT Shield supports security risks, policies, regulatory compliance and continuity planning. ARIA supplements the platform as a virtual CISO assistant; further ELLIT products are assigned to the same provider group.AI functions and classification: The AI policy generator creates organisation-specific security documents. ARIA supports risk assessments and prioritised recommendations, taking into account existing policies, controls and audit findings.[106] [107] [108] [105] · Specific AI functions documented
Draft security policies · Assess risks in context · Prioritise actions
AI evidence: [106] [107] [108] · Public product pages offer registration, trial access and plan-dependent ARIA queries. Newer provider presence; check actual functional and licence scope in a test.
Source check: 2026-10-15

Sources.

The numbers in square brackets refer to this list. It is numbered consecutively for this page.

  1. 6clicks: Platform Overview 6clicks · vendor source, checked 14.10.2026
  2. 6clicks: Hailey AI 6clicks · vendor source, AI evidence, checked 14.10.2026
  3. Acuity STREAM: vendor source, headquarters evidence checked 14.10.2026
  4. Acuity: STREAM editions Acuity STREAM · vendor source, checked 14.10.2026
  5. Acuity: STREAM Cloud Acuity STREAM · vendor source, checked 14.10.2026
  6. Acuity: RiskOS roadmap Acuity STREAM · vendor source, AI announcement, checked 14.10.2026
  7. Acuity STREAM: vendor source checked 14.10.2026
  8. Akitra: vendor source, AI evidence, headquarters evidence checked 14.10.2026
  9. Akitra: main source, AI evidence checked 14.10.2026
  10. Akitra: vendor source checked 14.10.2026
  11. Apptega: security and compliance platform Apptega · vendor source, checked 14.10.2026
  12. Apptega: vendor source, AI evidence checked 14.10.2026
  13. Arduredu: main source, AI evidence, headquarters evidence checked 15.10.2026
  14. Arduredu: vendor source checked 15.10.2026
  15. Avson: vendor source, headquarters evidence checked 15.10.2026
  16. Avson: main source, AI evidence checked 15.10.2026
  17. Avson: vendor source, AI evidence checked 15.10.2026
  18. Avson: vendor source checked 15.10.2026
  19. Babel: vendor source, headquarters evidence checked 14.10.2026
  20. Babel: main source checked 14.10.2026
  21. Babel: vendor source checked 14.10.2026
  22. Babel: third-party source checked 14.10.2026
  23. Carbide: main source checked 14.10.2026
  24. Carbide: vendor source, AI evidence checked 14.10.2026
  25. CATAAM: vendor source, headquarters evidence checked 15.10.2026
  26. CATAAM: main source, AI evidence checked 15.10.2026
  27. Cautera: vendor source, headquarters evidence checked 15.10.2026
  28. Cautera: main source checked 15.10.2026
  29. Cautera: vendor source, AI evidence checked 15.10.2026
  30. Cisodium: vendor source, AI evidence, headquarters evidence checked 15.10.2026
  31. Cisodium: main source, AI evidence checked 15.10.2026
  32. Cisodium: vendor source checked 15.10.2026
  33. Claw GRC: main source checked 15.10.2026
  34. Claw GRC: vendor source, AI evidence checked 15.10.2026
  35. Claw GRC: vendor source checked 15.10.2026
  36. CloudNextAI: main source, AI evidence, headquarters evidence checked 15.10.2026
  37. Comp AI: vendor source, headquarters evidence checked 14.10.2026
  38. Comp AI: main source, AI evidence checked 14.10.2026
  39. Comp AI: vendor source, AI evidence checked 14.10.2026
  40. Comp AI: vendor source checked 14.10.2026
  41. Compleye: vendor source, headquarters evidence checked 14.10.2026
  42. Compleye: main source checked 14.10.2026
  43. Compleye: vendor source checked 14.10.2026
  44. Compleye: vendor source checked 14.10.2026
  45. Compliance Compass: vendor source, headquarters evidence checked 15.10.2026
  46. Compliance Compass: main source, AI evidence checked 15.10.2026
  47. ComplianceCow: vendor source, headquarters evidence checked 14.10.2026
  48. ComplianceCow: main source, AI evidence checked 14.10.2026
  49. ComplianceCow: vendor source checked 14.10.2026
  50. ComplianceCow: vendor source checked 14.10.2026
  51. Complychain: vendor source, headquarters evidence checked 15.10.2026
  52. Complychain: main source, AI evidence checked 15.10.2026
  53. condignum: vendor source, headquarters evidence checked 14.10.2026
  54. condignum: main source checked 14.10.2026
  55. condignum: vendor source checked 14.10.2026
  56. condignum: vendor source checked 14.10.2026
  57. ControlCase: vendor source, headquarters evidence checked 14.10.2026
  58. ControlCase: main source, AI evidence checked 14.10.2026
  59. ControlCase: vendor source checked 14.10.2026
  60. CosmoSec: vendor source, AI evidence, headquarters evidence checked 15.10.2026
  61. CosmoSec: main source, AI evidence checked 15.10.2026
  62. Cyber Sierra: main source, AI evidence checked 14.10.2026
  63. Cyberday: vendor source, headquarters evidence checked 14.10.2026
  64. Cyberday: main source, AI evidence checked 14.10.2026
  65. Cyberday: vendor source checked 14.10.2026
  66. CyberHeed: vendor source, headquarters evidence checked 15.10.2026
  67. CyberHeed: main source, AI evidence checked 15.10.2026
  68. CyberHeed: vendor source, AI evidence checked 15.10.2026
  69. CyberS3c: vendor source, headquarters evidence checked 15.10.2026
  70. CyberS3c: main source, AI evidence checked 15.10.2026
  71. CyberS3c: vendor source checked 15.10.2026
  72. CyberSaint: How CyberStrong Works CyberSaint · vendor source, checked 14.10.2026
  73. CyberSaint AI Overview CyberSaint · vendor source, AI evidence, checked 14.10.2026
  74. CyberSmart: register entry, headquarters evidence checked 14.10.2026
  75. CyberSmart: main source checked 14.10.2026
  76. CyberSmart: vendor source checked 14.10.2026
  77. CyberSmart: vendor source checked 14.10.2026
  78. Cynomi: main source, AI evidence checked 14.10.2026
  79. Cynomi: vendor source checked 14.10.2026
  80. Cypago: cyber GRC and control monitoring Cypago · vendor source, checked 14.10.2026
  81. Cypago ChatGRC: queries with document references Cypago · vendor source, AI evidence, checked 14.10.2026
  82. ditis (Voith): vendor source, headquarters evidence checked 14.10.2026
  83. ditis (Voith): main source checked 14.10.2026
  84. ditis (Voith): vendor source checked 14.10.2026
  85. ditis (Voith): vendor source checked 14.10.2026
  86. ditis (Voith): vendor source checked 14.10.2026
  87. ditis (Voith): vendor source checked 14.10.2026
  88. Domyno: vendor source, AI evidence, headquarters evidence checked 15.10.2026
  89. Domyno: main source, AI evidence checked 15.10.2026
  90. Drata AI: Agentic Trust Management for GRC Drata · vendor source, AI evidence, checked 14.10.2026
  91. Drata: Security Questionnaire Automation Drata · vendor source, checked 14.10.2026
  92. Drata: vendor source, AI evidence checked 14.10.2026
  93. EFFITEK: vendor source, headquarters evidence checked 14.10.2026
  94. EFFITEK: main source checked 14.10.2026
  95. EFFITEK: vendor source, AI evidence checked 14.10.2026
  96. EFFITEK: vendor source, AI evidence checked 14.10.2026
  97. EFFITEK: vendor source, AI evidence checked 14.10.2026
  98. Egerie Cyber GRC: vendor source, headquarters evidence checked 15.10.2026
  99. Egerie: cyber GRC platform Egerie · vendor source, checked 14.10.2026
  100. Egerie: compliance module and AI-supported content Egerie · vendor source, AI evidence, checked 14.10.2026
  101. Egerie Cyber GRC: vendor source, AI evidence checked 15.10.2026
  102. Egerie Cyber GRC: vendor source, AI evidence checked 15.10.2026
  103. Egerie Cyber GRC: vendor source checked 15.10.2026
  104. Egerie Cyber GRC: vendor source checked 15.10.2026
  105. ELLIA Intelligence: register entry, headquarters evidence checked 15.10.2026
  106. ELLIA Intelligence: main source, AI evidence checked 15.10.2026
  107. ELLIA Intelligence: vendor source, AI evidence checked 15.10.2026
  108. ELLIA Intelligence: vendor source, AI evidence checked 15.10.2026
Back to top