T-NEX
Menu
DEEN
GRC provider register · Category 1 of 11 · Part 3 of 5

GRC platforms & suites, F to M:
37 providers with AI classification.

In short: Part 3 of 5 of the Platforms & suites category: full entries for 37 of the 192 providers, alphabetically from F to M, as of 18 October 2026. Of these, 26 document specific AI functions (70%). In Germany, Austria or Switzerland, six have a documented headquarters, five of them in Germany.

By and Published: As of: · Subpage of the GRC provider register Reviewed by Andreas Unruh and Christoph Gembruch, managing directors of T-NEX GmbH, on
Illustration: globe with networked GRC providers whose AI evidence flows into a checked provider register

Neither completeness nor a general suitability for banks is claimed. Providers are listed alphabetically. The order is not a performance rating.

All 682 GRC providers in the market overview · 379 European GRC providers · Platforms & suites category page (192)

Publisher: T-NEX GmbH. Andreas Unruh and Christoph Gembruch are managing directors of T-NEX. This editorial market overview is based on vendor sources and specialist primary sources. It contains no ranking and is not based on a joint product test. The market overview covers 682 providers from GRC and adjacent specialist areas. Acquired brands and former product names are not counted separately. Methodology and sources

Context, figures, review questions and the regulatory framework are on the Cross-functional GRC platforms and suites category page.

Entries from F to M: functions, AI classification and sources.

The assignment describes the offering considered, not all of the company's products. AI information names specific functions or limits of the public documentation. Scope of delivery, data storage and regional availability must be checked for each offering. Download provider overview as CSV (German), licensed under CC BY 4.0, credit “T-NEX GRC-Anbieterregister, t-nex.de”.

Is a provider missing or an entry out of date? Send us a note with a source via the contact form. Accepted changes are marked in the entry with the date they were checked.

Cross-functional GRC platforms and suites: F to M

37 entries

Cross-functional GRC platforms and suites · F to M · 37 providers
Provider / productDocumented focusAI functions and classification
F24 TopEase · To the detailed profile · Headquarters: Germany [1] · F24 AG; Munich, Germany; HRB 158196.Documented focus: Modular GRC platform with a shared database for risks, ICS, processes, assets, BCM, information security and third parties.AI functions and classification: No specific AI function was documented for TopEase in the current source check. The product pages describe linked data, workflows, controls and analyses; AI functions of other F24 products are not transferred to TopEase.[2] [3]Not specifically documented in the source check
Product overview and targeted TopEase AI search checked. Automation alone is not AI evidence.
Sources checked: [3] [2] · No specific AI work step documented in the source check; no statement about the absence of AI.
Source check: 2026-10-14
Flow GRC · Product: Flow · Location and exact contracting entity remain open; no regional classification derived from the English-language website.Documented focus: Flow combines risk registers, control management, compliance mapping and audit preparation. Risks are given owners and treatment plans; evidence and supplier reviews complete the workflow.AI functions and classification: According to the provider, Claude supports the creation of risk registers from company descriptions, the mapping of controls and the analysis of gaps. An AI risk analyst answers questions and examines scenarios.[4] [5] · Specific AI functions documented
Draft risk registers · Map controls · Analyse compliance gaps
AI evidence: [4] [5] · The vendor offers an entry-level option and a demo. Check the specific functional scope; location and legal entity not conclusively verified.
Source check: 2026-10-15
focus-GRC · Headquarters: Germany [6] · focus DV-Technologie, Beratung und Entwicklung GmbH; Unterhaching; DE157691658.Documented focus: Modular GRC suite with risk aggregation, ICS, regulatory requirements, incidents and business continuity.AI functions and classification: No specific AI support for GRC work steps is documented in the source check. Monte Carlo simulation, risk aggregation and automated calculation of key figures are not counted as AI on their own.[7] [8]Not specifically documented in the source check
Product page and targeted vendor search for AI/artificial intelligence checked.
Sources checked: [7] · No specific AI availability can be derived from the sources checked.
Source check: 2026-10-14
Formalize · Product: Formalize · Headquarters: Denmark [9] · Formalize ApS; Aarhus, Denmark; VAT DK42045136. Spanish subsidiary listed separately; assigned to the main operating provider.Documented focus: Connects risks, compliance requirements and operational controls. Shared workflows support several regulatory frameworks, including information security as well as DORA, NIS2 and AI governance requirements.AI functions and classification: Smart Fill extracts contract terms and fills configured fields. Formalize IQ is additionally intended to interpret official standards and identify GRC gaps; this extension is described as a pilot in the partnership announcement.[10] [11] [12] · Specific AI functions documented
Extract contract data and renewal clauses · Fill configured contract fields with AI
AI evidence: [11] [12] · Smart Fill requires activation of the AI and configuration of the contract fields. Formalize IQ described as a pilot in the announcement checked. Not tested in practice.
Source check: 2026-10-14
FullyInControl · Product: FullyInControl GRC · Headquarters: Netherlands [13] · The current provider website names Fully In Control B.V. with the address Takenhofplein 1, Nijmegen, Netherlands. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office.Documented focus: Links risks and control objectives with processes, actions, audits and evidence. Information can be used for several regulatory frameworks; responsibilities and reports are configurable.AI functions and classification: FullyInControl describes AI support for identifying relevant risks and for determining suitable risk measures within the GRC software.[14] [13] · Specific AI functions documented
Risk identification · Suggestions for risk measures
AI evidence: [14] · Documented by the vendor; no product test.
Source check: 2026-10-14
G.R.A.I.S. · Product: Governance Reporting and Intelligence System · Headquarters: Not separately checked [15] · Operator Ndondo (Pty) Ltd documented in the privacy policy. The .co.za domain and +27 support number point to South Africa; an explicit statement of the registered office or country of registration was not documented. · Ndondo (Pty) LtdDocumented focus: Governance platform for boards and committees, resolutions, reporting, risks and audit. Connects decision documents and evidence trails.AI functions and classification: AI creates draft agendas and management briefings, extracts meeting minutes and supports risk and anomaly detection. The vendor describes an audit trail for these workflows.[16] [15] [17] · Specific AI functions documented
Draft board agendas and briefings · Extract meeting minutes · Detect risk anomalies
AI evidence: [16] · Listed as commercial SaaS with a demo and customer support; detailed product documentation and release notes are offered on request.
Source check: 2026-10-15
GBTEC GRC Management · Headquarters: Germany [18] · GBTEC Software AG; explicit registered office Bochum; HRB 9621.Documented focus: Modular GRC platform with links to process management and enterprise architecture; formerly BIC GRC.AI functions and classification: Arty is documented for process management and other platform tasks. However, the GRC and company pages checked do not document a specific AI work step in the GRC module.[19] [20] [21]Not specifically documented in the source check
GRC page, company facts and Arty announcement read; targeted GRC/Arty search. Platform-wide AI and Monte Carlo simulation are not automatically attributed to the GRC module.
Sources checked: [19] [20] [21] · No specific available AI support documented in the source check; no product test.
Source check: 2026-10-14
GIEOM · Product: Risk CentralDocumented focus: Platform for operational risk and resilience. Configurable forms and workflows connect risk, incident and compliance processes; interfaces connect external systems.AI functions and classification: GIEOM ComplyAssure analyses regulatory documents, breaks requirements down into obligations and creates structured policies. The AI also detects overlaps and conflicts between regulatory frameworks; an integration with Risk Central is described.[22] [23] · Specific AI functions documented
Extract regulatory obligations · Draft structured policies · Detect overlaps and regulatory conflicts
AI evidence: [23] · Documented by the vendor for ComplyAssure with MagpieAI and integration with Risk Central; not assumed to be an automatic basic function of every Risk Central package. Not tested in practice.
Source check: 2026-10-14
GlobalSuite Solutions · Product: GlobalSuite · Headquarters: Spain [24] · AUDISEC, SEGURIDAD DE LA INFORMACIÓN S.L. trades as GlobalSuite Solutions; commercial register Ciudad Real, CIF B13422902. The Legal Notice names Madrid and Ciudad Real as Spanish addresses. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office.Documented focus: Connects risk, compliance, audit and business continuity with further specialist modules. Methods, controls, evidence and actions can be linked across several regulatory frameworks and units.AI functions and classification: GlobalSuite AI supports querying compliance data, drafts policies and risk-control scenarios and checks evidence for gaps.[25] [26] [24] · Specific AI functions documented
Query compliance data · Draft policies · Suggest risks and controls · Check evidence for gaps
AI evidence: [25] [26] · Documented by the vendor; agree the specific licence and implementation scope. No product test.
Source check: 2026-10-14
Grace Connect · Product: Grace Connect GRC Suite · Headquarters: Luxembourg [27] · Grace Connect SARL; Grace Connect GRC Suite; GCCSDocumented focus: Grace Connect brings together the management of non-financial risks in a modular GRC suite. A shared data model connects processes, risks, controls, incidents and audit findings. Risk owners document causes, likelihood and impact; internal audit and management track recommendations, action deadlines and key figures. Complementary modules support data protection, outsourcing risk and the operational implementation of DORA.AI functions and classification: The GRC product brochure checked describes risks, controls, audits and workflows, but does not document any specific AI support for these tasks.[27] [28] [29]Not specifically documented in the source check
41-page vendor brochure from January 2025 checked; current web product pages provided no usable content. No evidence in accessible sources; recent changes are therefore only captured to a limited extent.
Sources checked: [29] · No specific AI availability can be derived from the sources checked.
Source check: 2026-10-14
GRCompli · Product: GRCompli · Provider attribution not conclusively resolved: indexed metadata names AEIV Global, the page contact consultrnr.com. These names are not counted separately; location open. · AEIV Global; contact reference consultrnr.comDocumented focus: GRCompli brings together requirements, controls, risks, incidents, audits, evidence and policies. The product description also covers asset and supplier management.AI functions and classification: The indexed vendor page describes AI for assessing evidence against requirements as well as drafts of policies, incident reports and management summaries.[30] [31] · Specific AI functions documented
Assess evidence against requirements · Create policy drafts · Prepare management summaries
AI evidence: [30] [31] · Demo offered. AI evidence from indexed vendor text; direct page retrieval limited. Confirm operating status and contractual scope before procurement.
Source check: 2026-10-15
GRCPerfect / PrivacyPerfect · Product: GRCPerfect with PrivacyPerfect, SecurityPerfect, AI Perfect and VRMPerfect · Headquarters: Netherlands [32] · PrivacyPerfect; GRCPerfect; PrivacyAgent B.V.; SecurityPerfect; AI Perfect; VRMPerfectDocumented focus: GRCPerfect combines data protection, information security, AI governance and supplier risk on a shared platform. The modules link processing activities, risks, controls, audits and evidence. PrivacyPerfect remains the data protection offering; SecurityPerfect maps an ISMS. Further functions include an AI inventory and impact assessments as well as supplier assessments linked to data protection processes and incidents within the same governance model.AI functions and classification: The GRCPerfect pages checked describe AI registers, risk classifications and governance requirements for AI systems. A specific AI-supported GRC work step is not documented in them.[33] [34] [35] [32] [36]Not specifically documented in the source check
Governance of AI and a rule-based questionnaire scan do not document any use of AI in the product; no evidence of the absence of AI.
Sources checked: [35] [36] · No specific AI assistance documented in the sources checked.
Source check: 2026-10-14
Guardial · Product: Guardial AI · Headquarters: USA [37] · The terms of use name Predictive IRM LLC as operator; the page footer explicitly names San Diego, California, as headquarters. · Guardial AI; Predictive IRM LLC; Predictive IRM, LLCDocumented focus: Guardial combines compliance, enterprise risk, third parties, audit and control monitoring. The platform is aimed particularly at financial service providers and manages, among other things, policies, risk registers, audits, complaints and actions.AI functions and classification: During onboarding, AI agents suggest relevant requirements, summarise changes in the compliance programme and draft policies, audit templates, supplier questionnaires and risk entries from existing programme data. Suggestions include sources and justifications; adoption requires human approval.[38] [37] · Specific AI functions documented
Draft policies and risk entries · Summarise programme changes for briefings · Prepare audit templates from existing programme data
AI evidence: [38] · A demo, trial access and platform sign-up are offered. The AI suggestions described require confirmation before adoption. Not tested by us.
Source check: 2026-10-15
HelmGuard · Product: HelmGuard; Atlas · Headquarters: United Kingdom [39] · The vendor explicitly names London as headquarters and further US locations. The terms of use name HelmGuard Technologies, Inc.; the country classification refers to the operational headquarters, not to an exclusively British legal entity. · HelmGuard Technologies, Inc.; HelmGuard AIDocumented focus: HelmGuard combines security, risk and compliance data in a shared knowledge base. The platform supports internal control assessments, supplier risk and the handling of security requests with integrated workflows.AI functions and classification: AI agents collect and assess evidence, map controls to frameworks and answer security questionnaires. Further agents support supplier assessments and create risk reports tailored to their audience; source references and human reviews are part of the workflow described.[40] [39] [41] [42] · Specific AI functions documented
Collect and assess evidence · Map controls to frameworks · Analyse supplier risks · Answer security questionnaires · Draft risk reports
AI evidence: [40] · The platform is offered with a demo; the vendor describes active customer use. Check specific agents, integrations and approval rules in the respective offer.
Source check: 2026-10-15
HiQ Solutions · Product: SinergIA · Headquarters: Italy [43] · HiQ Solutions S.r.l., Via Decio Filipponi 14, Rome; P.IVA/C.F. 13947681006. · HiQ Solutions S.r.l.; SinergIADocumented focus: Platform for governance, risk and compliance with specialist agents for, among other things, ICT/DORA, AML, ESG and regulatory reports. The organisation's own documents and systems form the working basis.AI functions and classification: AI reads balance sheets, contracts, policies and evidence, carries out gap analyses and prepares auditable reports. Answers refer to documents and specific passages; submissions are reviewed and filed by the user.[44] [43] · Specific AI functions documented
Evaluate contracts and evidence · Analyse GRC gaps · Prepare regulatory reports
AI evidence: [44] · Commercial offering with a demo and documented implementation and operating options. Reports remain intended for human review and approval.
Source check: 2026-10-15
ibi systems iris · Headquarters: Germany [45] · ibi systems GmbH; official provider address Regensburg, Germany.Documented focus: ibi systems iris links information assets, requirements, risks, controls and actions.AI functions and classification: The iris product description checked does not document a specific AI work step. Automated audit planning, data linking and action management are therefore not classified as AI across the board.[46] [47] [48]Not specifically documented in the source check
Product page and targeted search of the vendor domain checked; the statement is limited to evidence found publicly.
Sources checked: [46] [48] · No specific AI function documented in the sources checked.
Source check: 2026-10-14
IBM OpenPages · To the detailed profile Documented focus: Modular risk, compliance and internal audit management, including model and third-party risk.AI functions and classification: OpenPages describes embedded AI for classifying GRC content and creating records. Via APIs, watsonx.ai or the customer's own models can be connected; the MCP Server supports agents in querying and editing GRC objects.[49] [50] · Specific AI functions documented
Classify GRC content · Create records · Query and edit GRC objects via agents
AI evidence: [49] · Documented by the vendor; connecting models and agents requires corresponding configuration. No product test.
Source check: 2026-10-14
iComply.pt · Product: iComply Governance Platform · Headquarters: Portugal [51] · Contemporary Constellation, Lda., Lisbon, legal entity no. 516756583. · Contemporary Constellation Lda.; iComply Portugal; iComply.ptDocumented focus: GRC platform for requirements, common controls, risks, audits and evidence. It offers specialist areas for, among other things, security, data protection, compliance programmes and third parties.AI functions and classification: The compliance copilot drafts policies, summarises audits and answers control questions from the organisation's own data. AI analyses documents, maps them to controls and regulatory frameworks and shows evidence gaps.[52] [51] · Specific AI functions documented
Draft policies · Summarise audits · Map documents to controls
AI evidence: [52] · Platform with a demo and modular subscriptions. AI copilot described in the Professional offering; additional announced or tested modules not assumed to be available.
Source check: 2026-10-15
Ignimission · Product: Maestro GRC · Headquarters: France [53] · Ignimission SAS; Ignimotion; Maestro GRC; ProjidDocumented focus: Ignimission Maestro connects existing GRC systems and organises risk, compliance and security processes via a configurable platform. Business units can design data models, data collection campaigns and approval workflows. Pre-built applications support, among other things, supplier risk, regulatory compliance and business impact analyses. The AI helps build these applications; interfaces integrate existing tools and data sources.AI functions and classification: The AI copilot generates GRC workflows from natural language and supports the mapping of data models as well as the configuration of user interfaces in the platform builders.[54] [53] [55] [56] · Specific AI functions documented
Generate GRC workflows from natural language · Map data models for GRC applications
AI evidence: [54] · AI copilot documented by the vendor; cloud and on-premise operation are offered. According to the vendor, the AI engine can be set up within the customer's own network. No product test.
Source check: 2026-10-14
Impero · Product: Impero Platform · Headquarters: Denmark [57] · Impero A/S; not to be confused with the British education software Impero HoldingsDocumented focus: Impero supports the documentation of risks, the performance of internal controls and the testing of their effectiveness in a central system. The platform is based on COSO principles and is aimed in particular at finance, tax, compliance and internal audit teams. Risk maps, control programmes, reminders and reports connect central management with the work of individual group companies.AI functions and classification: Impero Assist supports the drafting of internal controls as well as summaries and analyses of the risk and control landscape. Users review and confirm the AI results before adoption.[58] [59] [60] · Specific AI functions documented
Prepare control drafts · Summarise risks and controls · Analyse risk and control data
AI evidence: [59] · Opt-in beta for all customers on request; disabled by default. Human review intended. Not tested in practice.
Source check: 2026-10-14
Interact Solutions · Product: Interact Suite SA · SA Risk Manager; SA Audit Manager; Interact PocketDocumented focus: Connects corporate management and processes with risk, audit and document management. Shared analyses and mobile access complement the specialist modules.AI functions and classification: Interact Aion supports the mapping of risks, controls and causes, drafts actions and analyses weaknesses. Document review and summaries are also described.[61] [62] · Specific AI functions documented
Map risks, controls and causes · Draft actions · Analyse weaknesses · Review and summarise documents
AI evidence: [62] · According to the vendor, already available in Interact Suite; a separate OpenAI account is recommended, adoption only after confirmation. No product test.
Source check: 2026-10-14
Iskera · Product: Iskera; Optimiso Suite; Qualitadd; Acuredge; Pocket Result · Headquarters: France [63] · Optimiso; Optimiso Group; Acuredge; Pocket Result; PocketResult; QualitaddDocumented focus: Iskera brings together applications for internal controls, risk management, audit, integrated management systems and data quality. The group connects process and control documentation with operational risk management and reporting. Optimiso, Acuredge, Pocket Result and Qualitadd are listed as brands and solutions of the same provider group.AI functions and classification: IA Iskera answers questions about documents, risks, controls and audits, detects inconsistencies and drafts reports or action plans from existing GRC data.[64] [63] [65] [66] [67] [68] · Specific AI functions documented
Query GRC data in natural language · Detect inconsistencies in audit data · Draft reports and action plans
AI evidence: [68] · Documented by the vendor; access according to user rights, subject-matter validation by users; no product test.
Source check: 2026-10-14
JCAD · Product: JCAD CORE · JC Application Development; JCAD; COREDocumented focus: Solution for risk, control and compliance management for public and private sector organisations. Supports consistent risk information and reports tailored to their audience.AI functions and classification: The CORE product page checked describes risk registers, input wizards and reports. Specific AI support in these workflows is not documented; the AI article deals with the risks of using AI.[69] [70]Not specifically documented in the source check
Input validation, KRI analysis and general AI risk notes not counted as an AI function; no evidence of their absence.
Sources checked: [69] [70] · No specific AI function documented in the sources checked.
Source check: 2026-10-14
K10 Vision · Product: K10 Vision ARC Software Suite (AM, RM, CM) · Headquarters: United Kingdom [71] · K10 Vision Limited; K10 Vision AM; K10 Vision RM; K10 Vision CMDocumented focus: K10 Vision brings together internal audit, enterprise risk and compliance in the ARC Software Suite. The audit module supports risk-based planning, working papers and the follow-up of findings. Complementary modules manage risk registers, control libraries, obligations, evidence and improvement actions. Methods, workflows and reports can be adapted to different assurance and governance processes.AI functions and classification: K10 Vision describes the ARC suite and its audit, risk and compliance modules as AI-enabled. However, the product description checked does not sufficiently distinguish specific AI work steps from general workflows and analyses.[72] [73]Not specifically documented in the source check
AI-enabled and AI-enabled insight without sufficiently described input/output or AI action; therefore not a positive filter criterion.
Sources checked: [72] · No specific AI function documented in the sources checked.
Source check: 2026-10-14
Keel GRC · Product: Keel / Ask Keel · Headquarters: USA [74] · The team page explicitly names Keel GRC LLC and Atlanta, Georgia, as the company seat and headquarters. · Keel GRC LLC; Keel; Ask Keel; Keel QualityDocumented focus: Keel combines controls, requirements, risks, policies, suppliers and evidence in a shared workspace. Complementary functions cover audit planning, actions, Trust Center and quality management according to ISO 9001.AI functions and classification: Ask Keel answers questions from the organisation's own records with linked sources. Further AI actions draft policies and risks, answer security questionnaires and check policies and evidence for gaps. The results remain editable suggestions for human review.[75] [74] · Specific AI functions documented
Query GRC records with source references · Draft policies and risk entries · Summarise evidence and check control gaps
AI evidence: [75] · According to the vendor, AI actions are included in all paid plans and limited on a credit basis. Self-service access and a demo are available; no product test by us.
Source check: 2026-10-15
Key2Control · Product: Key2Control GRC · Headquarters: Netherlands [76] · Key2Control GRCDocumented focus: Key2Control supports internal control and evidence processes with risk and standards frameworks as well as integrated audit programmes. Particularly for municipalities and public organisations, the platform offers audit files, self-assessments, control objects and work programmes. Audit scope and requirements can be linked; tasks, findings and audit trails complement modules for financial regularity, information security, data protection and continuity.AI functions and classification: The AI Management System supports the governance of AI and the documentation of associated controls. The pages checked do not document any AI support of the product's own for a GRC work step.[76] [77] [78] [79]Not specifically documented in the source check
Audit and AI management pages read and vendor domain searched for AI assistance. Governance of AI is not the same as AI in GRC.
Sources checked: [77] [79] · No specific available AI support documented in the source check; no product test.
Source check: 2026-10-14
Kopexa · Product: Kopexa · Headquarters: Germany [80] · Kopexa GmbH; Schauenburgerstraße 116, Kiel; HRB 28912, Amtsgericht Kiel. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office.Documented focus: Links risks, processes, actions and evidence for information security and other management systems.AI functions and classification: Kopexa supports the development of risk scenarios with AI. Via MCP, external assistants can query current GRC data, such as open audit actions, within the user's permissions.[81] [80] · Specific AI functions documented
Develop risk scenarios · Query open audit actions via AI assistants
AI evidence: [81] · Documented by the vendor; MCP requires connecting an external AI assistant. Not tested in practice.
Source check: 2026-10-14
KRAL · Product: ReportAct · Headquarters: Austria [82] · The legal notice names KRAL GmbH in Vienna, FN 686444b, as developer and operator of ReportAct. · KRAL GmbH; ReportAct; Report ActDocumented focus: ReportAct brings together suppliers, assets, risks, controls and evidence for several compliance frameworks. This includes data protection workflows, incident handling, policies and auditable exports.AI functions and classification: Specialised AI functions suggest supplier classifications and control statuses, check contract clauses and draft data protection impact assessments and records of processing activities. Suggestions are shown with a justification or confidence level and require human confirmation.[83] [84] [82] · Specific AI functions documented
Classify suppliers · Suggest control status from evidence · Check contract clauses · Create DPIA and RoPA drafts
AI evidence: [83] · A demo and free entry-level option are offered. TISAX and ISO 42001 are still marked as upcoming extensions on the product page; do not assume them to be frameworks that are already available.
Source check: 2026-10-15
Kyūdō · Product: Sensei AI Advisor; Compliance Graph · Headquarters: USA [85] · The terms of use name a Delaware corporation with headquarters in Costa Mesa, California. · Kyudo, Inc.; KyudoDocumented focus: Kyūdō links controls, risks, policies, suppliers and evidence in a Compliance Graph. The platform is aimed at regulated organisations with Microsoft security data and describes operation in the customer's own Azure tenant.AI functions and classification: Sensei AI Advisor answers questions using linked control, policy and evidence data with source references. Answers with too low a confidence level are intended to be forwarded for human review.[86] [85] · Specific AI functions documented
Answer questions about controls and evidence · Support source-referenced GRC analysis
AI evidence: [86] [85] · Consultation and demonstration offered; check customer-side Azure prerequisites and licence scope. Statements on reliability are vendor information.
Source check: 2026-10-15
Lahebo · Product: Lahebo Risk & Compliance Management · Headquarters: Australia [87] · The EULA displayed on the product page names Lahebo Pty Ltd, Mount Waverley, Melbourne, Australia. · Lahebo Pty LtdDocumented focus: Lahebo connects risk and compliance registers with a legislation library, incidents and actions. Risks can be assessed, assigned to owners and linked to legal obligations.AI functions and classification: The vendor describes AI-supported notifications about changes to subscribed legislation. These updates support the maintenance of the legal register and the review of associated risks.[87] [88] · Specific AI functions documented
Detect and report legislative changes for compliance registers
AI evidence: [87] [88] · Demo and product access available. The specifically documented AI use case concerns regulatory updates; further AI risk assessment is not derived from it.
Source check: 2026-10-15
LogicGate Risk Cloud · To the detailed profile Documented focus: Linked GRC applications on a graph database with configurable workflows.AI functions and classification: AI Skills draft and condense GRC content. Separately licensed GRC Agents handle, among other things, supplier assessments and recurring enterprise risk assessments; each agent run is then submitted for human review.[89] [90] · Specific AI functions documented
GRC text drafts · Summaries · Supplier assessments · Enterprise risk assessment
AI evidence: [90] · According to the FAQ, AI Skills are included in Risk Cloud subscriptions; GRC Agents are a paid add-on. The FAQ of 1 September 2026 names TPRM, AI Governance, ERM and BCM as available agent areas. Further announced areas are not counted as available here.
Source check: 2026-10-14
LogicManagerDocumented focus: Enterprise-wide risk management with linked risks, controls, policies, third parties and processes.AI functions and classification: LMX provides context-specific risk assistance. Document Analyzer extracts information from policies and reports; Risk Ripple Analytics suggests relationships and suitable controls.[91] [92] · Specific AI functions documented
Answer risk questions in context · Extract document information · Suggest risk and control relationships
AI evidence: [92] · Documented by the vendor; agree the specific licence and implementation scope. No product test.
Source check: 2026-10-14
Maps Group · Product: GZOOM GRC · Headquarters: Italy [93] · Maps S.p.A.; GZOOM; Maps LayersDocumented focus: GZOOM GRC connects business processes with risks, controls and compliance workflows. The software maps enterprise risks across the organisation, aggregates risk positions and links performance indicators with risk metrics. Recurring audits, non-conformities and corrective actions can be tracked, including deadlines and notifications. The designated GRC product thereby complements Maps' other software offerings for corporate management.AI functions and classification: The GZOOM GRC description checked names risk aggregation, audits, controls and automatic notifications. A specific AI work step is not documented in it or in the targeted vendor search.[94] [95] [93]Not specifically documented in the source check
General automation and structured risk models not equated with AI.
Sources checked: [94] · No specific AI availability can be derived from the sources checked.
Source check: 2026-10-14
MetricStream · To the detailed profile Documented focus: Shared data model for risk, compliance, internal audit, cyber and third-party risk.AI functions and classification: MetricStream's AI assistants answer policy questions, support audit documentation and map regulatory changes to the affected obligations and controls. From this, they can suggest gaps and next processing steps.[96] [97] · Specific AI functions documented
Policy information · Audit documentation · Regulatory mapping · Action suggestions
AI evidence: [97] · Documented as solution-specific AI assistants. The scope of delivery and activation of the individual assistants must be clarified with the provider; the page checked does not show a complete pricing or availability matrix.
Source check: 2026-10-14
Mitratech Global GRC PlatformDocumented focus: Broad GRC portfolio with Alyne, Preparis, Prevalent and PolicyHub for connected specialist tasks.AI functions and classification: ARIES answers questions about connected GRC data, creates consolidated reports and supports analyses with context-specific recommendations. Decisions remain with the user.[98] · Specific AI functions documented
Query connected GRC data conversationally · Create consolidated GRC reports · Analyse risks and prepare recommendations
AI evidence: [98] · According to the vendor, AI can optionally be activated; scope depends on the connected Mitratech products. Not tested in practice.
Source check: 2026-10-14
Modus Consulting · Product: ProcessFrame · Headquarters: Italy [99] · Modus Consulting Srl; ProcessFrame; ProcessCloudDocumented focus: ProcessFrame is the platform developed by Modus for governance, risk management and compliance. It records events and audit activities, connects risk assessments with processes or assets and manages corrective actions via approvals and deadlines. Configurable variants support enterprise-wide risk management, information security and industry-specific compliance processes, for example in insurance, healthcare and public institutions.AI functions and classification: The ProcessFrame pages checked describe configurable GRC processes, workflows and technical interfaces. A specific AI work step in the product was not documented.[99] [100] [101] [102]Not specifically documented in the source check
Product pages and targeted search of the Italian vendor domain checked; no statement about all possible customer-specific extensions.
Sources checked: [99] [101] [102] · No specific AI function documented in the sources checked.
Source check: 2026-10-14
Mynder · Product: Mynder Core; Lara; Mynder Agents · Headquarters: Norway [103] · The privacy policy names Mynder AS, org. no. 831 377 372, with an address in Bergen, Norway. · Mynder AS; Mynder Core; Lara; Mynder Agents; Mynder Trust ProfileDocumented focus: Mynder connects security, data protection and risk documentation with supplier assessments, incidents and evidence. Trust Profiles and a Trust Center support the traceable sharing of the documented status.AI functions and classification: Lara generates analyses and document drafts from platform content. In addition, external AI agents can support risk and supplier assessments as well as compliance checks within defined permissions. Sources, suggestions and approvals are documented.[104] [105] [103] [106] · Specific AI functions documented
Support risk analyses · Prepare supplier assessments · Draft compliance documents · Handle regulatory questions
AI evidence: [104] [105] · Demo and platform modules that can be activated. The vendor also describes Mynder Agents in customer testing. External agent connection is optional; the separate regulatory framework connector only provides public regulatory content and no customer data.
Source check: 2026-10-15

Sources.

The numbers in square brackets refer to this list. It is numbered consecutively for this page.

  1. F24 TopEase: headquarters evidence checked 14.10.2026
  2. F24 TopEase: GRC platform and operating models F24 TopEase · vendor source, checked 14.10.2026
  3. TopEase: modules, shared database and interfaces F24 TopEase · vendor source, checked 14.10.2026
  4. Flow GRC: main source, AI evidence checked 15.10.2026
  5. Flow GRC: vendor source, AI evidence checked 15.10.2026
  6. focus-GRC: headquarters evidence checked 14.10.2026
  7. focus: focus-GRC product suite focus-GRC · vendor source, checked 14.10.2026
  8. focus: company focus-GRC · vendor source, checked 14.10.2026
  9. Formalize: headquarters evidence checked 14.10.2026
  10. Formalize: main source checked 14.10.2026
  11. Formalize: vendor source, AI evidence checked 14.10.2026
  12. Formalize: vendor source, AI evidence checked 14.10.2026
  13. FullyInControl: vendor source, headquarters evidence checked 14.10.2026
  14. FullyInControl: main source, AI evidence checked 14.10.2026
  15. G.R.A.I.S.: vendor source, headquarters evidence checked 15.10.2026
  16. G.R.A.I.S.: main source, AI evidence checked 15.10.2026
  17. G.R.A.I.S.: vendor source checked 15.10.2026
  18. GBTEC GRC Management: headquarters evidence checked 14.10.2026
  19. GBTEC GRC Management: modules and integrated platform GBTEC · vendor source, checked 14.10.2026
  20. GBTEC: official company facts and name history GBTEC · vendor source, checked 14.10.2026
  21. GBTEC GRC Management: vendor source checked 14.10.2026
  22. GIEOM: main source checked 14.10.2026
  23. GIEOM: vendor source, AI evidence checked 14.10.2026
  24. GlobalSuite Solutions: vendor source, headquarters evidence checked 14.10.2026
  25. GlobalSuite Solutions: main source, AI evidence checked 14.10.2026
  26. GlobalSuite Solutions: vendor source, AI evidence checked 14.10.2026
  27. Grace Connect: main source, headquarters evidence checked 14.10.2026
  28. Grace Connect: vendor source checked 14.10.2026
  29. Grace Connect: vendor source checked 14.10.2026
  30. GRCompli: main source, AI evidence checked 15.10.2026
  31. GRCompli: vendor source, AI evidence checked 15.10.2026
  32. GRCPerfect / PrivacyPerfect: vendor source, headquarters evidence checked 14.10.2026
  33. GRCPerfect / PrivacyPerfect: main source checked 14.10.2026
  34. GRCPerfect / PrivacyPerfect: vendor source checked 14.10.2026
  35. GRCPerfect / PrivacyPerfect: vendor source checked 14.10.2026
  36. GRCPerfect / PrivacyPerfect: vendor source checked 14.10.2026
  37. Guardial: vendor source, headquarters evidence checked 15.10.2026
  38. Guardial: main source, AI evidence checked 15.10.2026
  39. HelmGuard: vendor source, headquarters evidence checked 15.10.2026
  40. HelmGuard: main source, AI evidence checked 15.10.2026
  41. HelmGuard: vendor source checked 15.10.2026
  42. HelmGuard: vendor source checked 15.10.2026
  43. HiQ Solutions: vendor source, headquarters evidence checked 15.10.2026
  44. HiQ Solutions: main source, AI evidence checked 15.10.2026
  45. ibi systems iris: headquarters evidence checked 14.10.2026
  46. ibi systems iris: integrated ISMS and GRC solution ibi systems · vendor source, checked 14.10.2026
  47. ibi systems GmbH: company ibi systems · vendor source, checked 14.10.2026
  48. ibi systems iris: vendor source checked 14.10.2026
  49. IBM OpenPages IBM · vendor description · retrieved/checked 13.10.2026
  50. IBM OpenPages: Model Risk Governance IBM · vendor source, checked 14.10.2026
  51. iComply.pt: vendor source, headquarters evidence checked 15.10.2026
  52. iComply.pt: main source, AI evidence checked 15.10.2026
  53. Ignimission: vendor source, headquarters evidence checked 14.10.2026
  54. Ignimission: main source, AI evidence checked 14.10.2026
  55. Ignimission: vendor source checked 14.10.2026
  56. Ignimission: vendor source checked 14.10.2026
  57. Impero: headquarters evidence checked 14.10.2026
  58. Impero: main source checked 14.10.2026
  59. Impero: vendor source, AI evidence checked 14.10.2026
  60. Impero: vendor source checked 14.10.2026
  61. Interact Solutions: main source checked 14.10.2026
  62. Interact Solutions: vendor source, AI evidence checked 14.10.2026
  63. Iskera: vendor source, headquarters evidence checked 14.10.2026
  64. Iskera: main source checked 14.10.2026
  65. Iskera: vendor source checked 14.10.2026
  66. Iskera: vendor source checked 14.10.2026
  67. Iskera: vendor source checked 14.10.2026
  68. Iskera: vendor source, AI evidence checked 14.10.2026
  69. JCAD: main source checked 14.10.2026
  70. JCAD: vendor source checked 14.10.2026
  71. K10 Vision: headquarters evidence checked 14.10.2026
  72. K10 Vision: main source checked 14.10.2026
  73. K10 Vision: vendor source checked 14.10.2026
  74. Keel GRC: vendor source, headquarters evidence checked 15.10.2026
  75. Keel GRC: main source, AI evidence checked 15.10.2026
  76. Key2Control: main source, headquarters evidence checked 14.10.2026
  77. Key2Control: vendor source checked 14.10.2026
  78. Key2Control: vendor source checked 14.10.2026
  79. Key2Control: vendor source checked 14.10.2026
  80. Kopexa: vendor source, headquarters evidence checked 14.10.2026
  81. Kopexa: main source, AI evidence checked 14.10.2026
  82. KRAL: vendor source, headquarters evidence checked 15.10.2026
  83. KRAL: main source, AI evidence checked 15.10.2026
  84. KRAL: vendor source checked 15.10.2026
  85. Kyūdō: vendor source, AI evidence, headquarters evidence checked 15.10.2026
  86. Kyūdō: main source, AI evidence checked 15.10.2026
  87. Lahebo: main source, AI evidence, headquarters evidence checked 15.10.2026
  88. Lahebo: vendor source, AI evidence checked 15.10.2026
  89. LogicGate: Risk Cloud Platform LogicGate · vendor source, checked 14.10.2026
  90. LogicGate: GRC Agents FAQ, updated 1 September 2026 LogicGate · vendor source, AI evidence, checked 14.10.2026
  91. LogicManager: Enterprise Risk Management LogicManager · vendor source, checked 14.10.2026
  92. LogicManager: current AI functions and human review LogicManager · vendor source, AI evidence, checked 14.10.2026
  93. Maps Group: vendor source, headquarters evidence checked 14.10.2026
  94. Maps Group: main source checked 14.10.2026
  95. Maps Group: vendor source checked 14.10.2026
  96. MetricStream: platform and shared data model MetricStream · vendor source, checked 14.10.2026
  97. MetricStream AI for GRC MetricStream · vendor description · retrieved/checked 13.10.2026
  98. The Mitratech Global GRC Platform Mitratech · vendor source, AI evidence, checked 14.10.2026
  99. Modus Consulting: main source, headquarters evidence checked 14.10.2026
  100. Modus Consulting: vendor source checked 14.10.2026
  101. Modus Consulting: vendor source checked 14.10.2026
  102. Modus Consulting: vendor source checked 14.10.2026
  103. Mynder: vendor source, headquarters evidence checked 15.10.2026
  104. Mynder: main source, AI evidence checked 15.10.2026
  105. Mynder: vendor source, AI evidence checked 15.10.2026
  106. Mynder: vendor source checked 15.10.2026
Back to top