GRC platforms & suites, digits to B:
33 providers with AI classification.
In short: Part 1 of 5 of the Platforms & suites category: full entries for 33 of the 192 providers, T-NEX first as publisher, then alphabetically from digits to B, as of 18 October 2026. Of these, 29 document specific AI functions (88%). In Germany, Austria or Switzerland, six have a documented headquarters, two of them in Germany.

Neither completeness nor a general suitability for banks is claimed. T-NEX is listed first as publisher; other providers follow alphabetically within each group. The order is not a performance rating.
All 682 GRC providers in the market overview · 379 European GRC providers · Platforms & suites category page (192)
Publisher: T-NEX GmbH. Andreas Unruh and Christoph Gembruch are managing directors of T-NEX. This editorial market overview is based on vendor sources and specialist primary sources. It contains no ranking and is not based on a joint product test. The market overview covers 682 providers from GRC and adjacent specialist areas. Acquired brands and former product names are not counted separately. Methodology and sources
Context, figures, review questions and the regulatory framework are on the Cross-functional GRC platforms and suites category page.
Entries from digits to B: functions, AI classification and sources.
The assignment describes the offering considered, not all of the company's products. AI information names specific functions or limits of the public documentation. Scope of delivery, data storage and regional availability must be checked for each offering. Download provider overview as CSV (German), licensed under CC BY 4.0, credit “T-NEX GRC-Anbieterregister, t-nex.de”.
Is a provider missing or an entry out of date? Send us a note with a source via the contact form. Accepted changes are marked in the entry with the date they were checked.
33 providers
Missing evidence does not mean that the provider has no AI functions. Vendor documentation does not replace a product test. Licence, pilot status and availability are listed with the provider. Unchecked locations are hidden in a regional selection; this does not mean they are regarded as non-European. The location is not evidence of ownership structure, hosting or regulatory suitability.
There is no entry for this combination. Try another keyword or reset the filters.
Cross-functional GRC platforms and suites: digits to B
33 entries
| Provider / product | Documented focus | AI functions and classification |
|---|---|---|
| T-NEX Banking Platform · Publisher's product · To the detailed profile · Headquarters: Germany [1] · Provider T-NEX GmbH; Horn-Bad Meinberg, Germany; HRB 11526 Amtsgericht Lemgo. Headquarters documented, no statement on hosting or owners. | Documented focus: Controlling, reporting, compliance, risk, PPM and fraud detection in the Banking Platform. | AI functions and classification: Shared AI basis for chatbot, documents and workflows; handovers are set up. For T-NEX Compliance, requirement derivation, AI-supported assessment, draft action plans and audit report summaries are documented. The risk management product page shows a demonstrator; agree the platform scope.[2] [3] [4] [5] · Specific AI functions documented Requirement derivation · Requirement and gap assessment · Draft action plans · Audit report summary AI evidence: [4] [5] [3] · Compliance: documented functional status 15.23.0 of 30 August 2026; language model access, background processing, roles and approvals must be set up. Installation and operating scope are agreed per project. AI Risk Manager: risk and scenario functions are shown separately as a demonstrator; no validated quantitative stress test. Source check: 2026-10-14 |
| 360factors Predict360 · To the detailed profile | Documented focus: Platform for risks, controls, compliance testing, regulatory changes, policies, complaints and audit findings for financial organisations. | AI functions and classification: Ask Kaia researches regulatory requirements with sources, drafts and compares policies and supports advertising and credit data reviews. The shared regulatory knowledge base focuses on US federal and state law.[6] [7] · Specific AI functions documented Regulatory research with sources · Policy drafting and comparison · Review of advertising and credit data AI evidence: [7] · Compliance agents available according to the vendor; access depends on plan and add-on modules. Lending and Third-Party Intelligence are announced for Q4 2026 and not counted as generally available. No product test. Source check: 2026-10-14 |
| Acuna · Product: Acuna GRC / Aiko+ · Headquarters: Switzerland [8] · AcunaGRC; Aiko+; Abilene Group SA; Abilene Advisors | Documented focus: Acuna bundles requirement mapping, operational controls, recurring tasks and audit evidence in a shared GRC workspace. Extensions support supplier reviews and data protection. Aiko+ uses the organisation's own programme data for queries and prepares assessments and mapping suggestions. Responsible persons review these results and confirm changes before they enter the regulated compliance process. | AI functions and classification: Aiko+ answers questions from the organisation's own GRC data, pre-assesses supplier responses including PDF evidence and suggests mappings between requirements and controls with confidence scores. Users confirm the suggestions.[9] [10] [8] [11] · Specific AI functions documented Answer compliance questions using own GRC data · Pre-assess supplier responses and PDF evidence · Map requirements and controls with confidence scores AI evidence: [10] [9] · Aiko+ module documented by the vendor; organisation-wide activation, function permissions and monthly usage budgets. Suggestions require human confirmation. No product test. Source check: 2026-10-14 |
| AdaptiveGRC · Headquarters: Poland [12] · AdaptiveGRC is a solution from C&F S.A.; its own contact page explicitly names its headquarters in Warsaw, Poland. Geography checked on 15.10.2026; no inference of hosting or owners from the headquarters. | Documented focus: Modular GRC platform with risk and control assessments, internal audit, compliance, supplier management, BCM and data protection. | AI functions and classification: The AI Assistant summarises audit reports, policies and procedures, translates documents and extracts key information. Audit decisions are not made automatically as a result.[13] [14] [12] [15] · Specific AI functions documented Summarise audit reports · Translate compliance documents · Extract key information from policies AI evidence: [14] · Documented by the vendor; no product test. Source check: 2026-10-14 |
| AdmiralOne · Product: AdmiralOne / Compliance AI · Headquarters: Chile [16] · Admiral Compliance SpA, RUT 77.566.761-3, Ahumada 341, Piso 8, Santiago de Chile. · Admiral Compliance SpA; Admiral One; Compliance AI | Documented focus: GRC software for risk matrices, whistleblowing channel, due diligence, policies and audits. Focus on compliance programmes and requirements in Chile. | AI functions and classification: Compliance AI recommends industry-specific risks and controls, classifies reports and, after violations, drafts action plans for review and approval. The assistant also summarises relevant rulebooks.[17] [16] [18] · Specific AI functions documented Suggest risks and controls · Classify reports · Draft action plans for approval AI evidence: [17] · Commercial SaaS offering with demo; Compliance AI described as an integrated module. Specific licensing and coverage must be confirmed in the offer. Source check: 2026-10-15 |
| ADOGRC · Headquarters: Austria [19] · BOC Products & Services AG; explicit headquarters Vienna, Austria; FN 262953x. | Documented focus: ADOGRC connects risk, ICS, compliance, audit and other disciplines with a compliance library and role-based workflows. | AI functions and classification: ADOGRC documents natural-language questions to GRC models and saved queries via MCP. AI support for process drafts and analyses comes from the integrated ADONIS foundation.[20] [21] · Specific AI functions documented Draft process models from natural language · Query GRC objects and properties · Run saved queries via AI assistant AI evidence: [21] · MCP connection from version 14.2; own agent, activation and usually a separate LLM subscription required. Not tested in practice. Source check: 2026-10-14 |
| AiBizzApps · Product: GRCxAI · Headquarters: United Kingdom [22] · Provider names AiBizzApps Limited, Company No. 16632419, registered in England and Wales. Country assignment follows the legal entity. · AiBizzApps Limited; AIBIZZAPPS LIMITED; GRCxAI | Documented focus: GRCxAI connects risk management, controls, audits, supplier reviews, documents and other compliance tasks. The platform supports shared standards and documented approvals in one workspace. | AI functions and classification: The published list of AI functions names rulebook questions, draft policies and reports, risk summaries and the extraction of risk suggestions from assessments. For third parties, AI compares uploaded evidence with the answers given; results are reviewed by humans.[22] [23] [24] · Specific AI functions documented Extract risks from assessments · Review supplier evidence · Draft policies · Prepare compliance reports · Answer rulebook questions AI evidence: [23] · Commercial platform with demo. AI list explicitly distinguishes language model functions from other calculations. The statement mentions separate, ongoing work on labelling exported AI content. Source check: 2026-10-15 |
| AKARION · Product: AKARION GRC Cloud · Headquarters: Austria [25] · Operating company Akarion GmbH, Linz, FN 480226 s, is the media owner and the service company named in the legal notice. In addition, Akarion AG in Munich as parent company; country assignment here explicitly follows the operating GmbH, not the group headquarters. | Documented focus: Combines information security, business continuity, audits, data protection and whistleblowing systems. | AI functions and classification: Smart Content AI or AKAI drafts and links GRC records, including threats, risks and measures based on the organisational context.[26] · Specific AI functions documented Risk and measure suggestions · Create and optimise GRC texts · Link assets, processes and risks AI evidence: [26] · Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| Allgress GRC Platform | Documented focus: Risks, compliance and audits with a central evidence repository; control evidence can be mapped to several frameworks. | AI functions and classification: Rixena uses AI to evaluate regulatory changes, compare uploaded policies and prepare measures against identified gaps.[27] [28] · Specific AI functions documented Analyse regulatory changes · Identify policy gaps · Prepare remediation measures AI evidence: [28] · Documented by the vendor; no product test. Source check: 2026-10-14 |
| Aluura · Product: Aluura GRC / Aluura AI · Headquarters: USA [29] · Terms of use name Aluura LLC with principal business address in Katy, Texas, USA. · Aluura LLC; Aluura, LLC | Documented focus: Aluura manages compliance, risks, controls, policies and audit projects in a cloud application. Control tests, evidence and policy versions can be edited collaboratively. | AI functions and classification: Aluura AI answers questions from the organisation's own GRC data, drafts control test procedures and risk assessments and suggests mapping evidence to controls together with a justification. Policies and control descriptions are created as editable drafts.[30] [29] · Specific AI functions documented Draft control test procedures · Map evidence to controls with justification · Prepare risks and mitigation measures AI evidence: [30] · According to the vendor, AI is included in the subscriptions; usage can be limited. Registration and trial access are offered. Drafts require subject-matter review. Source check: 2026-10-15 |
| Anecdotes | Documented focus: Connects policies, risks, controls and evidence with shared data, approvals and measures. Dedicated applications support governance, ERM, compliance and third-party risk. | AI functions and classification: Productised agents structure document evidence, complete risk fields and create findings from audit and penetration test reports. Agent templates and MCP orchestrations are listed separately from these.[31] [32] · Specific AI functions documented Structure and summarise document evidence · Complete risk fields and control relationships · Create findings and measures from audit reports AI evidence: [32] · According to the vendor, integrated agents can be used after activation; templates and external MCP orchestrations separate. Not tested in practice. Source check: 2026-10-14 |
| Archer · To the detailed profile | Documented focus: Configurable risk registers, controls, compliance and audit trails on a GRC platform. | AI functions and classification: Archer Evolv Risk describes AI-supported risk assessments from internal and external signals. Assessments can be traced back to sources and processed further in Archer; uncertain results are routed for human review.[33] [34] · Specific AI functions documented AI-supported risk assessment · Consolidation of risk signals · Source-referenced preparation of risk findings AI evidence: [34] · Documented by the vendor; no product test. Source check: 2026-10-14 |
| Arengi · Product: ArengiBox · Headquarters: France [35] · ArengiBox | Documented focus: ArengiBox connects risk mapping, internal controls, compliance assessments and tracking of audit recommendations. The platform developed by Arengi supports aggregation across companies, processes and projects as well as questionnaires, for example on anti-corruption and data protection. In addition, the vendor offers consulting on risk management. | AI functions and classification: The product pages checked do not document any specific AI work step within ArengiBox. General articles on the use of generative AI in risk management are not product evidence.[36] [35] [37] [38] [39]Not specifically documented in the source check Product pages read and vendor domains specifically searched for intelligence artificielle/IA. No evidence does not mean that AI is absent. Sources checked: [36] [38] [39] · No specific available AI support documented in the source check; no product test. Source check: 2026-10-14 |
| ART25 · Product: ART25 ECP · European orientation is vendor information. Not yet included in the country register without sufficiently documented headquarters of the contracting entity. | Documented focus: ART25 ECP connects risks, compliance, data protection, security and AI governance. Measures, evidence and decisions are managed in the respective governance context. | AI functions and classification: ART25 describes AI and automation for reconstructing relationships, identifying gaps and supporting analyses. Responsibility for decisions remains with humans.[40] [41] [42] · Specific AI functions documented Identify governance gaps · Prepare relationships for GRC analyses AI evidence: [40] [41] · Demo on request; publicly described functions, no product test. Check specific modules and operational maturity contractually. Source check: 2026-10-15 |
| Aryza · Product: Aryza GRC and RiskLogix aCCelerate · RiskLogix part of Aryza since 3 April 2025. | Documented focus: The acquired RiskLogix platform adds risk and control assessments, risk indicators, incidents, compliance and internal audit to Aryza. | AI functions and classification: The GRC product sources checked do not document any specific AI work step. AI offerings for credit and collection processes are not transferred across the board to Aryza GRC.[43] [44] [45]Not specifically documented in the source check GRC product page read and official domain searched for GRC, AI-powered and RiskLogix. General AI strategy and the Webio acquisition are not evidence of GRC functions. Sources checked: [43] [44] [45] · AI availability for GRC not specifically documented in the source check. Source check: 2026-10-14 |
| Ascent Business Technology · Product: autoResilience · Headquarters: Singapore [46] · Section 2.1 names Atc Finetr Software Pte. Ltd., registration 201720078C, with headquarters in Singapore. The introduction additionally uses Ascent Business Technology Pte. Ltd.; confirm the specific contracting company during procurement. · autoResilience; AutoBCM; Ascent Risk & Resilience Software; Atc Finetr Software Pte. Ltd.; Ascent Business Technology Pte. Ltd. | Documented focus: autoResilience connects enterprise risks, compliance, policies, audit and third-party risk with business continuity and operational resilience. The platform is offered by Ascent Business Technology for regulated organisations. | AI functions and classification: In policy management, AI supports the creation of drafts. It monitors regulatory changes, flags outdated policies and suggests revisions. The suggestions are embedded in versioning, collaboration and approval processes.[47] [48] [46] · Specific AI functions documented Create policy drafts · Identify outdated policies · Suggest revisions following regulatory changes AI evidence: [47] · Commercial enterprise offering with individual demo and contract offer. Specific module and AI scope must be agreed; no product test of our own. Source check: 2026-10-15 |
| AssurePlus · Product: GRC platform · Headquarters: Australia [49] · Australian ABN register: TECHFORCE SERVICES PTY LTD, ABN 40 607 989 293, business name ASSUREPLUS KOMPLY CARE. Vendor post assigns the product to TechForce. · TechForce Services; TECHFORCE SERVICES PTY LTD; ASSUREPLUS KOMPLY CARE | Documented focus: GRC software for risks, compliance, incidents, audits, suppliers and resilience. One focus is on regulated Australian companies and care providers. | AI functions and classification: The vendor describes AI that reads regulatory texts, maps new obligations to existing controls and pre-sorts incident reports by severity and patterns. The detailed incident page also describes rule-based processes; not every automation is therefore to be understood as AI.[50] [51] [52] [53] [49] · Specific AI functions documented Evaluate regulatory documents · Map obligations to controls · Pre-sort incident reports AI evidence: [51] · Commercial, configurable offering with demo. Detailed AI evidence comes mainly from vendor product comparisons; check scope in the specific offer. Source check: 2026-10-15 |
| Athereon · Product: Athereon GRC · Headquarters: Germany [54] · Athereon GRC GmbH; Innovationsring 7–9, Saarbrücken; HRB 104798, Amtsgericht Saarbrücken. Geography checked on 15.10.2026; no inference of hosting or owners from the headquarters. | Documented focus: Connects risks, requirements, assets and measures in shared workflows. LAiKA supports the creation of GRC objects and the evaluation of policies. | AI functions and classification: LAiKA supports the creation of GRC objects, analyses policies for gaps and checks supplier responses for deviations from requirements.[55] [54] · Specific AI functions documented Risk and document drafts · Policy and gap analysis · Review supplier questionnaires AI evidence: [55] · Documented by the vendor; agree the specific licence and implementation scope. No product test. Source check: 2026-10-14 |
| Atlant Security · Product: Venvera · Headquarters: Bulgaria [56] · Venvera; Atlant Security EOOD | Documented focus: Venvera bundles risk registers, control evidence, policies, incidents and supplier assessments. Atlant Security's platform maps shared controls to several frameworks and presents the processing status for management. AI functions supplement policy drafts and the review of submitted evidence. | AI functions and classification: Venvera describes AI for policy drafts, explanations of control gaps and the review of submitted evidence.[57] [56] [58] · Specific AI functions documented Draft policies · Explain control gaps · Review evidence AI evidence: [57] · Documented by the vendor; customer-selected model provider and own API key required; no product test. Source check: 2026-10-14 |
| AuditCue | Documented focus: Connects risks, controls, audit planning and evidence. Dedicated workflows for internal and external auditors support assessments, queries, reports and approvals. | AI functions and classification: The vendor page for auditors explicitly mentions AI-supported preparation of audit reports. Further AI work steps or technical details are not specifically documented there.[59] [60] [61] · Specific AI functions documented Prepare audit reports with AI AI evidence: [61] · Documented by the vendor; model, package and approval scope not specified. Not tested in practice. Source check: 2026-10-14 |
| Auditrunner · Product: Auditrunner GRC · GRCrunner; Auditrunner | Documented focus: Connects process- and risk-oriented internal audits with other configurable GRC applications. Findings, deviations and measures can be tracked across modules. | AI functions and classification: The product and technology pages checked document audit and GRC automation, but no sufficiently specifically described AI work step. General customer statements about added AI components are not sufficient for the AI filter.[62] [63] [64]Not specifically documented in the source check Vendor pages and targeted domain search checked; no evidence that AI is absent overall. Sources checked: [62] [63] [64] · No specific AI function documented in the sources checked. Source check: 2026-10-14 |
| AugIx System · Product: AuditDex · Headquarters: India [65] · AugIx System LLP, Noida, Uttar Pradesh; LLPIN ACR-1200. · AugIx System LLP; AUDITDEX; AuditWork | Documented focus: GRC platform for audit management, risk assessment, evidence requests and regulatory reports. Focus is on companies with several rulebooks and Indian compliance requirements. | AI functions and classification: According to the product FAQ, AI models detect anomalies and control failures in ongoing data sets, prioritise findings by risk severity and generate early warning signals for further review.[66] [67] [65] · Specific AI functions documented Detect anomalies for audits · Reveal control failures · Prioritise findings by risk AI evidence: [67] · Ops Audit, Risk Assessment and DRL Engine explicitly offered as early access; structured pilot for suitable companies. DPDPA module only announced with an older publication date, current release not confirmed. Source check: 2026-10-15 |
| Avalon Technology Solutions · Product: Avalon GRC · Headquarters: Switzerland [68] · Avalon Technology Solutions GmbH; Avalon GRC; Classeon | Documented focus: Avalon GRC connects processes, assets, risks, obligations and responsibilities in a shared model. The modular platform supports, among other things, information security, IT risks, compliance, operational risks and third-party management. Assessments, approvals and processing histories are documented. AI support can be integrated into selected processes; subject-matter owners review and adopt the suggested results. | AI functions and classification: Documented are the extraction of relevant information with references, prepared assessments including justification as well as text and report drafts from the case context. As an example, the provider shows a protection requirements assessment by confidentiality, integrity and availability. Suggestions can be accepted, edited or discarded.[69] [70] [68] · Specific AI functions documented Extract information and references from documents · Prepare protection requirements assessments · Create justifications and draft reports AI evidence: [70] · Documented by the vendor; not tested in practice Source check: 2026-10-14 |
| Axcelasia · Product: AXCELRADAR · Axcelasia Roots; former names: Tricor Roots | Documented focus: Malaysian GRC software offering for enterprise risks, internal audits and operational risks. Includes control self-assessments, risk indicators, loss events as well as compliance, incident and continuity management. | AI functions and classification: AxcelRadar IAMS describes AI-supported identification and prioritisation of audit risks as well as drafts for findings, observations and audit reports.[71] [72] · Specific AI functions documented Identify and prioritise audit risks · Draft audit findings · Formulate audit reports AI evidence: [72] · Documented by the vendor; no product test. Source check: 2026-10-14 |
| Axiom GRC (CoreStream GRC) · Product: CoreStream GRC · Headquarters: United Kingdom [73] · CoreStream GRC Ltd, 20 Grosvenor Place, London, SW1X 7HN; specific provider entity of the Axiom group. ICO registration ZA154741 is stated. · CoreStream GRC; independent of core-grc.com; Axiom GRC; VinciWorks; Barbour EHS; Vantify | Documented focus: Configurable platform for risks, controls, compliance and audits. Enterprise risks can be linked with strategic objectives and data from other enterprise systems. | AI functions and classification: The optional AI Co-Pilot completes risk descriptions, checks the quality of risks and controls and answers questions on the basis of internal policies. Documents can also be used to fill in due diligence questionnaires.[74] [75] [76] [73] [77] · Specific AI functions documented Complete risk descriptions · Review control documentation · Answer policy questions with sources · Pre-fill due diligence questionnaires AI evidence: [77] · Optional AI integration and additional functions; customer-owned or preferred AI providers possible. Not tested in practice. Source check: 2026-10-14 |
| Axovern · Product: Axovern / Axo AI · The company page identifies Axovern Inc., but only names countries served and hosting regions. No headquarters country is derived from this. · Axovern Inc.; Axo; Axo AI | Documented focus: Axovern manages controls, evidence, policies, risks, suppliers and audit collaboration in a linked workspace. A Trust Center and functions for MSPs supplement continuous compliance monitoring. | AI functions and classification: Axo examines data in the current workspace, answers questions with reference to evidence and drafts security questionnaire answers as well as changes to controls. Suggestions are reviewed in a separate approval queue; the read-only agent tools do not change records independently.[78] [79] [80] · Specific AI functions documented Investigate control failures in the programme data · Draft questionnaire answers with sources · Prepare control changes for approval AI evidence: [78] · According to the company page, commercially available since June 2026, with platform sign-up and demo. Axo is optional and depends on configuration; no product test of our own. Source check: 2026-10-15 |
| BarnOwl · Product: BarnOwl Risk, Compliance & Audit · BarnOwl; IDI Technology | Documented focus: Connects risk, regulatory compliance and internal audit in software that can be introduced modularly. Shared risk data, obligations and audit processes support several departments. | AI functions and classification: The product and vendor articles checked did not document any specifically available AI function within BarnOwl. The articles describe possible AI evaluations and the benefit of structured governance data.[81] [82] [83]Not specifically documented in the source check Product scope checked and targeted vendor search carried out. Future examples are not evidence of availability; no statement that AI is generally absent. Sources checked: [81] [82] [83] · No specific AI work step documented in the source check; no statement about the absence of AI. Source check: 2026-10-14 |
| Basenorm · Product: Basenorm / AskNorman · Headquarters: Netherlands [84] · Basenorm B.V.; AskNorman; AskNorman AI | Documented focus: Basenorm brings together controls, risks, evidence and responsibilities in a shared library. Several standards can access the same controls while relationships and audit information are preserved. AskNorman supports the evaluation of this data in the product or via connected AI assistants. Subject-matter owners assess evidence, risk treatment and suggested next steps. | AI functions and classification: AskNorman answers questions about control and evidence gaps, explains relationships between risks and controls and prepares status summaries and follow-up tasks. Use in the product or via MCP with external AI assistants such as ChatGPT or Claude.[85] [86] [87] [84] [88] · Specific AI functions documented Query control and evidence gaps · Explain relationships between risks and controls · Prepare compliance status and follow-up tasks AI evidence: [86] [87] · Software documented by the vendor; model use with plan-dependent token budget or own API key. MCP connections depend on permissions and configuration. No product test. Source check: 2026-10-14 |
| BCMLogic · Product: BCMLogic Next; AI GRC Expert · Headquarters: Poland [89] · Vendor contact details name BCMLogic Solutions Sp. z o.o. in Warsaw, Poland; current own LinkedIn company profile confirms Warsaw. The exact street address was not re-checked in the register. · BCMLogic Solutions Sp. z o.o.; BCMLogic Next; BCMLogic One; AI GRC Expert | Documented focus: BCMLogic connects enterprise risks, continuity, incidents, supplier risks and compliance. The platform is aimed particularly at regulated organisations and supports joint processing of risk registers, BIA, controls and evidence. | AI functions and classification: The AI GRC Expert analyses policies, contracts and questionnaires for regulatory gaps, supports risk assessments and creates BIA drafts with source references. Described agents prepare supplier assessments and detect conspicuous risk indicators; results are intended for review.[90] [91] [92] [93] [89] [94] · Specific AI functions documented Analyse regulatory gaps · Support risk assessments · Draft BIA · Prepare supplier assessments · Check risk indicators for anomalies AI evidence: [91] · Current offering page describes an available online demo environment; the company page still names the launch of Next in the third quarter of 2026. Confirm individual agents and expansion stages in the specific offer. Own LLM connection is described as an option. Source check: 2026-10-15 |
| BCT Digital / Bahwan CyberTek · Product: rt360 GRC · BCT Digital; Bahwan CyberTek; rt360 | Documented focus: Supports risk identification, control effectiveness testing and related workflows. Reports and dashboards bring together risk types and business areas. | AI functions and classification: For risk assessment within the rt360 GRC suite, BCT Digital explicitly describes an alternative AI/ML approach. This serves to score risks and assign values to key risks, residual risks and control effectiveness. A generative assistant is not thereby documented.[95] [96] [97] · Specific AI functions documented Assess risks with AI/ML-supported scoring · Quantify key and residual risks as well as control effectiveness AI evidence: [97] · Documented as a function of the rt360 GRC suite offered. Model choice, training and evaluation data and activation of the alternative AI/ML scoring must be clarified before procurement; no publicly verified model quality or product validation. Source check: 2026-10-15 |
| Bizzdesign · Product: HOPEX / Enterprise Transformation Suite · To the detailed profile · Headquarters: Netherlands [98] · Bizzdesign B.V.; Capitool 15, Enschede, Netherlands; KVK 08204584. The group privacy policy names this company and its affiliated companies. Geography checked on 15.10.2026; no inference of hosting or owners from the headquarters. | Documented focus: Risk and compliance management in the context of business processes, data, applications and enterprise architecture. | AI functions and classification: Bizzdesign connects external AI assistants to the architecture repository via MCP. Risk and continuity owners can query risk data in natural language and trace the effects of outages, supplier problems or regulatory changes across processes and applications.[99] [100] [101] [102] [103] [98] · Specific AI functions documented Natural-language query of risk data · Analysis of dependencies in operational disruptions · Preparation of the impact of regulatory changes AI evidence: [102] [103] · MCP connection documented by the vendor; external AI client and configured repository access required. Check product and licence scope; no blanket assignment to all HOPEX modules. No product test. Source check: 2026-10-14 |
| Bridge GRC · Product: Bridge GRC; Compliance Copilot · Headquarters: Saudi Arabia [104] · Vendor names Riyadh as headquarters. Contact and terms and conditions refer to graxoconsulting.com; clarify the exact legal contracting entity before procurement, no second provider count. · Bridge GRC; Graxo Consulting (contact assignment) | Documented focus: Bridge GRC offers control and evidence management, data protection registers and audits against Saudi Arabian and international frameworks. Compliance Copilot analyses uploaded policies and related documents. | AI functions and classification: The Copilot maps document passages to controls, assesses their coverage and suggests measures for gaps. It provides evidence references, summaries and answers to document questions; users can change assessments and export reports.[105] [104] [106] · Specific AI functions documented Map documents to controls · Assess control coverage and gaps · Answer evidence-related questions AI evidence: [105] · Free trial with limited credit allowance and paid credit packages offered. Coverage, confidence values and measures are vendor representations and must be validated on subject-matter grounds. Source check: 2026-10-15 |
| Brillnet · Product: Pulsar GRC · Headquarters: Poland [107] · Terms of use name Brillnet Piotr Adamski with an address in Łódź, Poland. · Brillnet Piotr Adamski; Pulsar GRC; pulsar-grc.pl | Documented focus: Pulsar GRC links requirements, control tests, evidence, risks, audits and corrective measures. Responsibilities and decisions remain documented on the respective work item. | AI functions and classification: On request, the AI creates draft descriptions, summaries and structures for GRC material. Users check content, sources and gaps and can adapt, accept or discard the suggestions.[108] [109] [107] · Specific AI functions documented Draft GRC descriptions · Summarise compliance material · Prepare document structures AI evidence: [108] [109] · Explicitly early access. Trial phase and plan-dependent AI allowances described; according to the terms, actual activation follows the respective product releases. No generally production-ready full scope assumed. Source check: 2026-10-15 |
Sources.
The numbers in square brackets refer to this list. It is numbered consecutively for this page.
- T-NEX Banking Platform: headquarters evidence checked 14.10.2026
- T-NEX Banking Platform: integrated product with eleven specialist modules T-NEX · current platform description, as of 18.10.2026 · retrieved/checked 18.10.2026
- T-NEX Risk Management: documented demonstrator T-NEX · product description and status of the demo · retrieved/checked 13.10.2026
- T-NEX Compliance: working with regulations and requirements T-NEX · product description · retrieved/checked 13.10.2026
- Technical evidence and compliance manual T-NEX · manual as of 30.08.2026, version 15.23.0 · retrieved/checked 13.10.2026
- 360factors: Predict360 platform 360factors · vendor source, checked 14.10.2026
- 360factors: Ask Kaia, available scope and roadmap 360factors · vendor source, AI evidence, checked 14.10.2026
- Acuna: vendor source, headquarters evidence checked 14.10.2026
- Acuna: main source, AI evidence checked 14.10.2026
- Acuna: vendor source, AI evidence checked 14.10.2026
- Acuna: vendor source checked 14.10.2026
- AdaptiveGRC: vendor source, headquarters evidence checked 14.10.2026
- AdaptiveGRC: platform and modules AdaptiveGRC · vendor source, checked 14.10.2026
- AdaptiveGRC: AI Assistant AdaptiveGRC · vendor source, AI evidence, checked 14.10.2026
- AdaptiveGRC: vendor source checked 14.10.2026
- AdmiralOne: vendor source, headquarters evidence checked 15.10.2026
- AdmiralOne: main source, AI evidence checked 15.10.2026
- AdmiralOne: vendor source checked 15.10.2026
- ADOGRC: headquarters evidence checked 14.10.2026
- BOC Group: ADOGRC GRC platform BOC Group · vendor source, checked 14.10.2026
- ADOGRC 14: documented new features BOC Group · vendor source, AI evidence, checked 14.10.2026
- AiBizzApps: main source, headquarters evidence checked 15.10.2026
- AiBizzApps: vendor source, AI evidence checked 15.10.2026
- AiBizzApps: vendor source checked 15.10.2026
- AKARION: headquarters evidence checked 14.10.2026
- AKARION: main source, AI evidence checked 14.10.2026
- Allgress: GRC platform and evidence repository Allgress · vendor source, checked 14.10.2026
- Allgress Rixena: regulatory changes and gap analysis Allgress · vendor source, AI evidence, checked 14.10.2026
- Aluura: vendor source, headquarters evidence checked 15.10.2026
- Aluura: main source, AI evidence checked 15.10.2026
- Anecdotes: shared GRC applications Anecdotes · vendor source, checked 14.10.2026
- Anecdotes: Agent Library and deployment options Anecdotes · vendor source, AI evidence, checked 14.10.2026
- Archer: platform and Evolv Archer · vendor source, checked 14.10.2026
- Archer Evolv Risk: scope and availability Archer · vendor source, AI evidence, checked 14.10.2026
- Arengi: vendor source, headquarters evidence checked 14.10.2026
- Arengi: main source checked 14.10.2026
- Arengi: vendor source checked 14.10.2026
- Arengi: vendor source checked 14.10.2026
- Arengi: vendor source checked 14.10.2026
- ART25: main source, AI evidence checked 15.10.2026
- ART25: vendor source, AI evidence checked 15.10.2026
- ART25: vendor source checked 15.10.2026
- Aryza: main source checked 14.10.2026
- Aryza: vendor source checked 14.10.2026
- Aryza: vendor source checked 14.10.2026
- Ascent Business Technology: vendor source, headquarters evidence checked 15.10.2026
- Ascent Business Technology: main source, AI evidence checked 15.10.2026
- Ascent Business Technology: vendor source checked 15.10.2026
- AssurePlus: register entry, headquarters evidence checked 15.10.2026
- AssurePlus: main source checked 15.10.2026
- AssurePlus: vendor source, AI evidence checked 15.10.2026
- AssurePlus: vendor source checked 15.10.2026
- AssurePlus: vendor source checked 15.10.2026
- Athereon: vendor source, headquarters evidence checked 14.10.2026
- Athereon: main source, AI evidence checked 14.10.2026
- Atlant Security: vendor source, headquarters evidence checked 14.10.2026
- Atlant Security: main source, AI evidence checked 14.10.2026
- Atlant Security: vendor source checked 14.10.2026
- AuditCue: GRC with risks, audits and controls AuditCue · vendor source, checked 14.10.2026
- AuditCue: audit management AuditCue · vendor source, checked 14.10.2026
- AuditCue: auditor workspace and report preparation AuditCue · vendor source, AI evidence, checked 14.10.2026
- Auditrunner: main source checked 14.10.2026
- Auditrunner: vendor source checked 14.10.2026
- Auditrunner: vendor source checked 14.10.2026
- AugIx System: vendor source, headquarters evidence checked 15.10.2026
- AugIx System: main source checked 15.10.2026
- AugIx System: vendor source, AI evidence checked 15.10.2026
- Avalon Technology Solutions: vendor source, headquarters evidence checked 14.10.2026
- Avalon Technology Solutions: main source checked 14.10.2026
- Avalon Technology Solutions: vendor source, AI evidence checked 14.10.2026
- Axcelasia: main source checked 14.10.2026
- Axcelasia: vendor source, AI evidence checked 14.10.2026
- Axiom GRC (CoreStream GRC): vendor source, headquarters evidence checked 14.10.2026
- Axiom GRC (CoreStream GRC): main source checked 14.10.2026
- Axiom GRC (CoreStream GRC): vendor source checked 14.10.2026
- Axiom GRC (CoreStream GRC): vendor source checked 14.10.2026
- Axiom GRC (CoreStream GRC): vendor source, AI evidence checked 14.10.2026
- Axovern: main source, AI evidence checked 15.10.2026
- Axovern: vendor source checked 15.10.2026
- Axovern: vendor source checked 15.10.2026
- BarnOwl: main source checked 14.10.2026
- BarnOwl: vendor source checked 14.10.2026
- BarnOwl: vendor source checked 14.10.2026
- Basenorm: vendor source, headquarters evidence checked 14.10.2026
- Basenorm: main source checked 14.10.2026
- Basenorm: vendor source, AI evidence checked 14.10.2026
- Basenorm: vendor source, AI evidence checked 14.10.2026
- Basenorm: vendor source checked 14.10.2026
- BCMLogic: vendor source, headquarters evidence checked 15.10.2026
- BCMLogic: main source checked 15.10.2026
- BCMLogic: vendor source, AI evidence checked 15.10.2026
- BCMLogic: vendor source checked 15.10.2026
- BCMLogic: vendor source checked 15.10.2026
- BCMLogic: vendor source checked 15.10.2026
- BCT Digital / Bahwan CyberTek: main source checked 15.10.2026
- BCT Digital / Bahwan CyberTek: vendor source checked 15.10.2026
- BCT Digital / Bahwan CyberTek: vendor source, AI evidence checked 15.10.2026
- Bizzdesign: vendor source, headquarters evidence checked 14.10.2026
- Bizzdesign: GRC functions Bizzdesign Hopex · vendor source, checked 14.10.2026
- Bizzdesign Hopex: platform and AI Bizzdesign Hopex · vendor source, checked 14.10.2026
- Bizzdesign: MEGA and Alfabet acquisitions Bizzdesign Hopex · vendor source, checked 14.10.2026
- Bizzdesign: vendor source, AI evidence checked 14.10.2026
- Bizzdesign: vendor source, AI evidence checked 14.10.2026
- Bridge GRC: vendor source, headquarters evidence checked 15.10.2026
- Bridge GRC: main source, AI evidence checked 15.10.2026
- Bridge GRC: vendor source checked 15.10.2026
- Brillnet: vendor source, headquarters evidence checked 15.10.2026
- Brillnet: main source, AI evidence checked 15.10.2026
- Brillnet: vendor source, AI evidence checked 15.10.2026