T-NEX
Menu
DEEN
GRC provider register · Category 1 of 11 · Part 4 of 5

GRC platforms & suites, N to R:
43 providers with AI classification.

In short: Part 4 of 5 of the Platforms & suites category: full entries for 43 of the 192 providers, alphabetically from N to R, as of 18 October 2026. Of these, 32 document specific AI functions (74%). Only one has a documented headquarters in Germany, Austria or Switzerland, and it is in Germany.

By and Published: As of: · Subpage of the GRC provider register Reviewed by Andreas Unruh and Christoph Gembruch, managing directors of T-NEX GmbH, on
Illustration: globe with networked GRC providers whose AI evidence flows into a checked provider register

Neither completeness nor a general suitability for banks is claimed. Providers are listed alphabetically. The order is not a performance rating.

All 682 GRC providers in the market overview · 379 European GRC providers · Platforms & suites category page (192)

Publisher: T-NEX GmbH. Andreas Unruh and Christoph Gembruch are managing directors of T-NEX. This editorial market overview is based on vendor sources and specialist primary sources. It contains no ranking and is not based on a joint product test. The market overview covers 682 providers from GRC and adjacent specialist areas. Acquired brands and former product names are not counted separately. Methodology and sources

Context, figures, review questions and the regulatory framework are on the Cross-functional GRC platforms and suites category page.

Entries from N to R: functions, AI classification and sources.

The assignment describes the offering considered, not all of the company's products. AI information names specific functions or limits of the public documentation. Scope of delivery, data storage and regional availability must be checked for each offering. Download provider overview as CSV (German), licensed under CC BY 4.0, credit “T-NEX GRC-Anbieterregister, t-nex.de”.

Is a provider missing or an entry out of date? Send us a note with a source via the contact form. Accepted changes are marked in the entry with the date they were checked.

Cross-functional GRC platforms and suites: N to R

43 entries

Cross-functional GRC platforms and suites · N to R · 43 providers
Provider / productDocumented focusAI functions and classification
Naris · Product: NARIS-GRC; Sensus BPM Online · Headquarters: Netherlands [1] · NARIS-GRC; Naris GRC; Sensus Process Management; Sensus BPM OnlineDocumented focus: NARIS-GRC links risks, controls, compliance obligations, audits and incidents according to the Three Lines model. Complementary functions cover data protection, information security and insurance. Through the merger with Sensus Process Management, the group extends its links to process architecture and process modelling; according to the vendor, the integration is being developed further.AI functions and classification: The integrated AI assistant Sara supports the definition of suitable risks and controls on the basis of the organisational context. Suggestions can be linked with existing processes, controls, causes and consequences in the NARIS-GRC system and adopted into the platform.[2] [1] [3] [4] [5] [6] [7] · Specific AI functions documented
Suggest context-specific risks and controls · Link risk information with processes, causes and consequences · Adopt AI suggestions into the GRC system
AI evidence: [6] · The vendor describes Sara as an assistant already integrated into NARIS-GRC and offers a demo. Confirm licence, activation and data processing before procurement; no product test by us.
Source check: 2026-10-15
NcontractsDocumented focus: Risk, compliance, audit, BCM and supplier solutions for financial organisations; the portfolio also includes Quantivate and Venminder.AI functions and classification: Ncontracts documents AI for reviewing supplier contracts, classifying complaints and answering regulatory questions with sources. These functions belong to specific products of the suite.[11] [12] · Specific AI functions documented
Review supplier contracts · Classify complaints and potential compliance issues · Answer regulatory questions with sources
AI evidence: [11] · Documented by the vendor as functions of individual Ncontracts products, not a separate general AI platform. Not tested in practice.
Source check: 2026-10-14
NEXIS · Product: NEXIS GRC · Headquarters: Germany [13] · Nexis Group GmbH; Rudolf-Vogt-Straße 6, Regensburg; HRB 20640, Amtsgericht Regensburg. The current legal notice names the Group GmbH. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office. · QSEC; product history: WMC WüpperDocumented focus: Connects requirements, risks, controls and operational resilience. Within the NEXIS platform, the solution can be linked with identity and access governance.AI functions and classification: NICO and the AI functions of the NEXIS platform support identity governance: anomaly and SoD detection, recertification recommendations and the creation of governance documentation. This documents the IAM area, not all NEXIS GRC modules.[14] [15] [13] · Specific AI functions documented
Detect access anomalies and SoD conflicts · Support recertifications · Draft IAM governance documentation
AI evidence: [15] [14] · Documented by the vendor for NICO/identity governance; the customer's own enterprise LLM and MCP connection are supported. Configure the scope; no product test.
Source check: 2026-10-14
Njordium Cyber Group · Product: Inspect360 GRC; Inspect360 TPRM · Headquarters: Sweden [16] · Njordium Cyber Group AB; Inspect360; Inspect360 GRC; Inspect360 TPRMDocumented focus: Inspect360 GRC links requirements, policies, risks, controls, evidence and audits in a continuously maintained register. Owners, approvals and review dates make decisions traceable; accepted risks are given documented exceptions with an expiry date. The complementary TPRM product maps external dependencies. The GRC solution was officially presented in October 2026 and is offered as SaaS or for self-hosted operation.AI functions and classification: Inspect360 GRC uses AI to detect missing information, explain anomalies, extract obligations from documents and suggest review intervals.[17] [16] [18] · Specific AI functions documented
Detect gaps in GRC records · Explain status and anomalies · Extract obligations from documents · Suggest review intervals
AI evidence: [17] · Documented by the vendor; decisions and responsibility remain with the responsible persons; no product test.
Source check: 2026-10-14
Normio · Product: Normio AI; Normio GOV; Normio IT; Nora · Headquarters: Netherlands [19] · The provider describes Normio as a Dutch software company, KvK 42110935, with its registered office in Lisse. No specific legal form is derived from this. · Normio; Nora Compliance AssistantDocumented focus: Normio brings together self-assessments, risks, tasks and evidence for digital compliance. In addition to AI Act topics, the offering covers information security, data protection and Dutch requirements for public organisations.AI functions and classification: The integrated AI assistant Nora answers regulatory questions with references to the knowledge base and relevant articles. It also explains the respective workflow in the application. The terms of use also describe AI-generated document drafts.[20] [21] [19] · Specific AI functions documented
Answer regulatory questions with sources · Explain compliance work steps · Support document drafts
AI evidence: [20] [21] · Monthly subscriptions with a 14-day trial; Nora is included in paid modules and can be switched off per team.
Source check: 2026-10-15
NorthGRC · Product: NorthGRC Platform · Headquarters: Denmark [22] · Neupart; Neupart A/S; neupartOne; Secure ISMSDocumented focus: NorthGRC connects regulatory requirements, tasks, risks, controls and evidence in a shared GRC platform. Work already documented can be mapped to several supported frameworks. Risk assessments, supplier and incident management and reports support ongoing processing. Roles and delegated tasks enable use across several companies, departments and locations.AI functions and classification: NorthGRC documents frameworks and workflows for AI governance as well as connected GRC data. A specific AI-supported work step within the platform is not documented in the sources checked.[23] [24] [25]Not specifically documented in the source check
AI governance and general use of external assistants not counted as a product function; no evidence of the absence of AI.
Sources checked: [23] [25] · No specific AI assistance documented in the sources checked.
Source check: 2026-10-14
Novasecur · Product: MyNovasecur Advanced; MyNovasecur Révolution · Headquarters: France [26] · MyNovasecurDocumented focus: MyNovasecur Advanced combines risk mapping, internal controls, audit recommendations, actions and business continuity. The platform supplements these functions with analyses of risk dependencies and management reports. Further modules address compliance, cyber risks and insurance; according to the vendor, standardised components can be adapted to individual processes.AI functions and classification: MyNovasecur describes AI and predictive analytics for detecting previously unknown risk dependencies and deriving operational recommendations.[27] [26] · Specific AI functions documented
Detection of risk dependencies · Derivation of operational risk recommendations
AI evidence: [27] · Documented by the vendor; no product test.
Source check: 2026-10-14
OLING Management et Technologie · Product: MAPSI · Headquarters: France [28] · MAPSI; OLING Management & TechnologieDocumented focus: MAPSI connects risks, controls, internal audits, evidence and actions in a shared SaaS platform. Organisations can assign requirements and responsibilities, document deviations and track improvements. OLING develops and supports the software itself; the fields of application described range from internal control systems and risk management to data protection, information security and continuity management.AI functions and classification: The MAPSI and OLING product pages checked describe workflows, evidence, audits and risk registers. A specific AI work step is not documented in the source check.[29] [28] [30] [31]Not specifically documented in the source check
Product pages read and vendor domains searched specifically for intelligence artificielle. No evidence does not mean that AI is absent.
Sources checked: [29] [31] [30] · No specific available AI support documented in the source check; no product test.
Source check: 2026-10-14
OMNINET · Product: OMNITRACKER GRC Center · OMNINET is the provider; OMNITRACKER product family.Documented focus: Connects audits, assessments and other GRC workflows. The shared database enables relationships with IT service processes; cloud, hybrid and on-premise operating models are offered.AI functions and classification: OMNINET documents an AI platform for document and service processes. However, a specific AI work step within the GRC Center is not documented in the sources checked.[32] [33] [34]Not specifically documented in the source check
AI functions for ITSM and a general article on AI risk management are not sufficient evidence of AI in the GRC product.
Sources checked: [32] [33] [34] · AI platform offered; specific integration into GRC work steps not documented in the source check.
Source check: 2026-10-14
OneAdvanced · Product: Risk Management / Governance & Risk · Headquarters: United Kingdom [35] · Decision Time; Advanced Computer Software Group; OneAdvanced Governance & RiskDocumented focus: OneAdvanced brings together strategic, operational and project-related risks in configurable registers. Owners, review dates, actions and a shared control library structure the processing. Reports show gross, net and target risks. The solution, which emerged from Decision Time, is aimed at organisations that want to combine risk management and board work on a shared governance foundation.AI functions and classification: Risk Assist structures risk descriptions and suggests suitable controls and mitigation measures on the basis of the risk entries.[36] [37] · Specific AI functions documented
Standardise risk descriptions · Suggest controls · Draft mitigation measures
AI evidence: [36] · Documented by the vendor; agree the specific licence and implementation scope. No product test.
Source check: 2026-10-14
Onspring · Product: Onspring GRC SuiteDocumented focus: Configurable applications connect risks, controls, compliance and audits. Business units can link registers, workflows and reports on the same platform.AI functions and classification: Onspring AI detects duplicate risk and incident reports, extracts information from supplier SOC 2 reports and suggests context-specific wording.[38] · Specific AI functions documented
Detect duplicate risks and incidents · Evaluate SOC 2 reports and fill fields · Complete GRC texts
AI evidence: [38] · Documented by the vendor; no product test.
Source check: 2026-10-14
Opal GRC · Product: Opal · Headquarters: USA [39] · The company page explicitly describes Opal as US-based and names Jeff Moore as founder. Full legal company name not stated in the pages checked; not equated with other Opal products. · Opal; Optimal GRCDocumented focus: Opal is aimed at small audit and compliance teams with SOX and other control requirements. The platform connects control operation and testing with risks, audit projects, policies, supplier assessments and attestations.AI functions and classification: The product description describes AI for analysing evidence, assessing control designs and preparing audit findings. Process descriptions, risk control matrices and flowcharts can be produced from process interviews. According to the provider, AI results only enter the formal record after human acceptance.[40] [39] [41] · Specific AI functions documented
Analyse control evidence · Draft audit findings and remediation · Convert process interviews into risk control matrices
AI evidence: [40] [41] · Young provider with a demo and a programme for early customers. Specific AI functions documented; confirm scope and exact contracting company before procurement.
Source check: 2026-10-15
Operlity · Product: Operlity GRC; Helios AI Assistant · Headquarters: India [42] · Contact page and terms name Operlity Technologies Private Limited in Bangalore, India; the current footer, by contrast, names Operlity GRC Solutions Private Limited as an Ejyle company. Both names documented, counted as one provider group; clarify the exact contracting entity before procurement. · Operlity Technologies Private Limited; Operlity GRC Solutions Private Limited; Ejyle; Helios AI AssistantDocumented focus: Operlity connects risk and compliance management with audits, policies, third parties and evidence. The Helios assistant accesses the data of the respective GRC programme.AI functions and classification: Helios conducts risk and compliance assessments as a dialogue, records answers and evidence and creates structured summaries for approval by the reviewer. Teams can also ask questions about the risk register, open findings and control status.[43] [44] [45] [42] [46] · Specific AI functions documented
Conduct assessments in dialogue · Summarise answers and evidence for reviewers · Query GRC programme data
AI evidence: [43] [44] · Demo and separate enterprise subscriptions. According to the vendor, model, region and deployment are configurable; a self-hosted model configuration is also offered. Confirm contractual scope and actually available integrations.
Source check: 2026-10-15
Optial GRC SmartStartDocumented focus: Connected modules for risks, compliance, audit, incidents, BCM and planning; deployable as SaaS, private cloud or on the customer's own infrastructure.AI functions and classification: The Optial pages checked describe GRC automation, analytics and AI governance. General statements about AI in GRC software do not name any AI work step clearly attributed to SmartStart.[47] [48] [49]Not specifically documented in the source check
General market overview and predictive analytics without attribution to AI not sufficient; no evidence of the absence of AI.
Sources checked: [47] [49] · No specific AI function documented in the sources checked.
Source check: 2026-10-14
Optro (formerly AuditBoard) · To the detailed profile · Headquarters: USA [50] · The vendor names Optro, Inc., Wilmington, USA. According to an announcement of 6 May 2026, Midship was acquired; the same source names FairNow as an earlier acquisition. These product brands are not counted additionally. A complete technical integration is not inferred from this. · AuditBoard; Midship; FairNowDocumented focus: Audit, controls, enterprise risk and information security on a shared GRC platform.AI functions and classification: Optro describes AI functions for mapping controls, collecting evidence and control testing, as well as for supporting supplier assessments. Agent decisions and evidence are intended to remain traceable for subject-matter review.[51] [52] · Specific AI functions documented
Control mapping · Evidence collection · Control testing · Supplier assessment
AI evidence: [52] · Documented in the current Optro AI portfolio; specific product modules, activation and contractual scope must be checked separately. The presentation provides for configurable human oversight.
Source check: 2026-10-14
Oracle · Product: Fusion Cloud Risk Management and ComplianceDocumented focus: Addresses risks and controls in Fusion Cloud ERP and HCM. The focus is on segregation of duties, access monitoring, financial controls and transaction analyses.AI functions and classification: Oracle Fusion Cloud Risk Management and Compliance describes AI agents for financial controls, audit testing and access risks. They explain authorisation risks and support reviews of business transactions and segregation of duties.[53] · Specific AI functions documented
Explanation of access risks · Support for financial controls · Audit testing with Assurance Advisor
AI evidence: [53] · Documented by the vendor; no product test.
Source check: 2026-10-14
ORCA Opti · Product: Opti Core / Opti Assist · Headquarters: Australia [54] · The privacy policy identifies ORCA Opti Software Ltd as an Australian company with its principal place of business in Queensland. · ORCA Opti Software Ltd; Opti Core; Opti AssistDocumented focus: GRC system for risks, controls, incidents, policies, assets, suppliers and actions with mapped compliance frameworks.AI functions and classification: Opti Assist answers questions about internal policies and obligations from the organisation's documents. AI agents handle event-driven tasks; interactions and workflow decisions are logged as governance evidence.[55] [56] [54] · Specific AI functions documented
Query policies and obligations in natural language · Support supplier onboarding and policy approvals · Generate governance evidence from interactions
AI evidence: [56] [55] · Opti Assist can be started free of charge; Opti Core is offered in paid plans with the assistant included and tiered AI quotas.
Source check: 2026-10-15
Origami RiskDocumented focus: Origami Risk combines ERM, internal controls, compliance, third-party risk and business continuity.AI functions and classification: The AI Concierge supports record creation, note drafts and bulk changes with confirmation before execution. Risk Assessment Intelligence accompanies risk modelling and explains deviations between model results and human assessments.[57] [58] · Specific AI functions documented
Draft GRC records and notes · Support risk modelling · Compare model results with risk assessments
AI evidence: [58] · According to the release announcement of 28 September 2026, available to customers. Actions with confirmation; model assumptions remain under human control. No product test.
Source check: 2026-10-14
Oxial GRCDocumented focus: Risks, controls, audits, incidents and actions with shared directories; complementary specialist areas such as IT security and data protection.AI functions and classification: Oxial mentions integrated AI/ML for analyses and simulations. However, the product page checked does not describe an AI work step that is sufficiently specific and traceable for the filter.[59] [60]Not specifically documented in the source check
Product page read in full and vendor domain searched specifically. Statements on AI/ML simulations remain without specified inputs, results or product workflow.
Sources checked: [59] · AI/ML advertised in general terms; specific GRC functional scope not documented in the source check.
Source check: 2026-10-14
PAN Software · Product: Riskware / SOCRAITES · Headquarters: Australia [61] · PAN Software names Melbourne, Australia as its location; the terms of use identify PAN Software Pty. Ltd. as provider and rights holder. · PAN Software Pty. Ltd.; RiskWare; Riskware R3; SOCRAITESDocumented focus: Integrated platform for enterprise risk, compliance, internal controls, audit, information security and business continuity with additional occupational health and safety modules.AI functions and classification: The embedded SOCRAITES copilot supports natural-language, context-specific conversations about enterprise risks and helps work out overlooked risk aspects and possible mitigation measures.[62] [63] [61] [64] · Specific AI functions documented
Analyse enterprise risks in dialogue · Identify overlooked risk aspects · Prepare risk mitigation measures
AI evidence: [62] [64] · SOCRAITES is embedded in the current module description and is offered via a product demo; the product blog documents its introduction in RiskWare R3.
Source check: 2026-10-15
Pirani · Product: PiraniDocumented focus: Connects operational risk, information security, compliance, money laundering risks and internal audits. Country-specific links to Latin American regulatory frameworks complement documentation and continuity functions.AI functions and classification: Pirani Copilot suggests risks from the organisational context, drafts controls and provides a suggested assessment of the control design for subject-matter adjustment.[65] [66] · Specific AI functions documented
Suggest and create risks · Suggest controls · Prepare control design assessment
AI evidence: [66] · According to the help documentation, available in ORM, Compliance, ISMS and AML; can be switched off organisation-wide, adoption and assessment by users. No product test.
Source check: 2026-10-14
ProcessGene · Product: ProcessGene GRC Software SuiteDocumented focus: Aimed at companies with several subsidiaries. A shared process and control model connects central requirements with local variants as well as risk, compliance and audit workflows.AI functions and classification: The GRC product page checked describes automation, shared process models and control management. A specifically named AI function is not documented in the source check.[67]Not specifically documented in the source check
Product page and targeted vendor search for artificial intelligence checked; third-party directories with generic feature lists not used as evidence.
Sources checked: [67] · No specific AI availability can be derived from the sources checked.
Source check: 2026-10-14
Protecht ERM · To the detailed profile Documented focus: Configurable risk registers, controls, compliance and resilience with connected data, workflows and reports.AI functions and classification: Cognita supports the capture of risk and incident data, explains content in context and creates summaries with themes and prioritised indications from reports. Further agentic workflows are shown as roadmap.[68] [69] [70] · Specific AI functions documented
Edit risk and incident forms · Summarise reports on risks and incidents · Derive anomalies and prioritised indications from reports
AI evidence: [69] · According to the vendor, Cognita is available and can optionally be activated. Agentic TPRM/BCM automation and Regulatory Intelligence remain on the roadmap. Not tested in practice.
Source check: 2026-10-14
ReadiNowDocumented focus: ReadiNow combines pre-built GRC applications with a no-code platform for the organisation's own workflows.AI functions and classification: ReadiNow describes configurable AI agents that capture incidents from natural-language reports, triage them and link them with data. Risks can thus be transferred into further action and compliance workflows.[71] [72] · Specific AI functions documented
Incident capture · Incident triage · Triggering of risk actions
AI evidence: [71] · Configurable ReadiAgents documented by the vendor within or in connection with existing GRC processes; no product test.
Source check: 2026-10-14
Regulativ.ai · Product: Regulativ Regulatory Compliance Automation Platform · Headquarters: United Kingdom [73] · Regulativ.AI Ltd; Regulativ; LCA-HubDocumented focus: Regulativ.ai brings together regulatory requirements, risk and audit management as well as third-party assessments in one platform. A shared control library connects several frameworks; workflows organise assessments, policy versions, approvals and evidence. Specialised AI agents support gap analyses, policy drafts, control mappings and the preparation of audit documentation. The solution is aimed, among others, at financial institutions and other regulated companies.AI functions and classification: Documented by the vendor: specialised AI agents analyse compliance gaps, draft context-specific policies, map controls to comparable requirements of other frameworks and prepare evidence or audit reports.[74] [75] [76] [73] · Specific AI functions documented
Analyse compliance gaps · Draft policies · Map controls across frameworks · Prepare audit documentation
AI evidence: [74] · Documented by the vendor as existing functions of the platform offered; no pilot or planned status in the functional description checked. Not tested in practice; agree specific agents and mode of operation.
Source check: 2026-10-14
Reguroo · Product: Compliance Command Centre · Headquarters: South Africa [77] · Operator EAM ECOM (Pty) Ltd, registration number 2024/262476/07; terms and conditions under South African law, billing in rand. · EAM ECOM (Pty) LtdDocumented focus: Compliance management for South African regulatory frameworks with obligations, controls, evidence versions, audit reports and alerts.AI functions and classification: AI evaluates regulatory changes, describes their impact and maps them to controls. It flags gaps and supports the creation of audit reports.[78] [79] [77] · Specific AI functions documented
Evaluate regulatory changes · Map impact on controls · Prepare audit reports
AI evidence: [78] [79] · Free entry-level option, paid Business plan and customised enterprise offerings publicly described; customer login and demo available.
Source check: 2026-10-15
Remedy / RiskCognition · Product: Remedy · Headquarters: USA [80] · The vendor names RiskCognition Corporation with an address in Rockaway, New Jersey. Not to be grouped with ITSM, tax or healthcare products of the same name. · RiskCognition Corporation; goremedy.ai; Remedy GRCDocumented focus: Remedy connects enterprise risk, third parties, audit and information security with regulatory compliance. Requirements, controls, policies, evidence and remediation actions are linked to one another.AI functions and classification: According to the product page, AI reads regulatory texts, extracts individual obligations and maps them to controls. It suggests remediation actions and policy changes and groups controls with similar content for review of overlaps.[81] [82] [80] · Specific AI functions documented
Extract regulatory obligations and map controls · Create remediation and policy drafts · Group similar controls semantically
AI evidence: [81] [82] · Demo offered with specific functional descriptions. The advertised 200+ agents are at the same time marked as roadmap; no complete current availability is inferred from this. Confirm individual modules and agents contractually.
Source check: 2026-10-15
ResolverDocumented focus: Resolver connects risk management, internal controls and compliance with incidents, security work and investigations.AI functions and classification: Resolver describes AI for intake and triage of investigation cases, for case summaries and for extracting key information from witness statements and case notes. The evidence relates to Investigation Case Management.[83] [84] · Specific AI functions documented
Take in and assign investigation cases · Summarise case files · Analyse witness statements and case notes
AI evidence: [84] · Documented by the vendor for the investigation module; licence scope according to offer. No product test.
Source check: 2026-10-14
Risk Cognizance · Product: Risk Cognizance GRC / AI Agentic GRC Tools · Headquarters: USA [85] · The contact page names 1250 Broadway, New York, NY 10001. The terms of use identify Risk Cognizance LLC. Not to be confused with RiskCognition Corporation and its Remedy platform. · Risk Cognizance LLC; RiskCognizanceDocumented focus: Risk Cognizance offers a modular GRC platform for companies and security service providers. It connects compliance, enterprise risk, policies, audit, third parties and technical security information; a multi-tenant variant supports several client organisations.AI functions and classification: The agent description names tracking evidence and mapping new regulatory requirements. A workflow described checks compensating controls after a vulnerability finding and creates a draft risk acceptance for human review.[86] [85] [87] · Specific AI functions documented
Coordinate evidence-related tasks · Map requirements and controls · Prepare risk acceptance drafts
AI evidence: [86] · Product page and demo offering document the agent functions. Specific agents, approval limits and contractual scope must be confirmed in the procurement process; no product test.
Source check: 2026-10-15
Risk Wizard · Product: Risk Wizard · Risk WizardDocumented focus: Combines risk registers, compliance tasks and incident management. Assessment matrices, responsibilities, reminders and reports support shared risk processes.AI functions and classification: No specific AI work step is documented in the Risk Wizard product sources checked. Rule-based notifications, dashboards and risk registers do not count as AI for this filter.[88] [89] [90]Not specifically documented in the source check
Product functions and official cyber risk article checked; AI topics in the blog navigation do not document an AI product function.
Sources checked: [88] [89] [90] · AI availability not specifically documented in the source check.
Source check: 2026-10-14
riskHive · Product: Enterprise Risk Manager · Headquarters: United Kingdom [91] · riskHive Group; riskHive Software Solutions Limited; riskHive Technical Services Limited; riskHive ERMDocumented focus: riskHive offers configurable software for the enterprise-wide management of risks and opportunities. Existing risk registers can be imported and consolidated at project, programme and portfolio level. The platform supports different assessment methods, consolidated analyses and reports. It is also aimed at organisations with complex undertakings and several risk registers maintained in parallel.AI functions and classification: No specific AI work step was documented in the sources checked on riskHive ERM and the analysis tools. Configurable registers, reports and Monte Carlo simulations alone are not AI evidence.[91] [92] [93]Not specifically documented in the source check
Product pages and targeted vendor search checked. No evidence means no statement about the general absence of AI.
Sources checked: [91] [92] [93] · No specific AI work step documented in the source check; no statement about the absence of AI.
Source check: 2026-10-14
RISKID · Product: RISKID · RISKIDDocumented focus: Focus on collaborative risk identification and assessment. Internal controls, regulatory requirements and evidence complement the risk process.AI functions and classification: No specific AI support for RISKID risk analysis is documented in the source check. The vendor page describes collaborative risk management; general references to possible use of AI do not document a product function.[94] [95]Not specifically documented in the source check
Product overview and indexed vendor brochure checked; general methodological tips not counted as an AI function of the product.
Sources checked: [94] [95] · No specific AI availability can be derived from the sources checked.
Source check: 2026-10-14
RiskMate · Product: RiskMate · Headquarters: United Kingdom [96] · RiskMate Limited; not the platform of the same name riskmate.devDocumented focus: RiskMate connects risks, controls, actions, policies and incidents in a shared application. Risk appetite and categories structure assessments; tasks follow up on gaps in controls. Roles for owners, handlers and risk managers support the three lines of defence model. Exportable reports enable results to be shared with governing bodies and other stakeholders.AI functions and classification: The RiskMate product page checked describes risk registers, incidents, policies and standard reports. An AI-supported work step is not specifically documented there or in the targeted domain research.[97] [98]Not specifically documented in the source check
RiskMate was checked at riskmate.uk, not the platform of the same name riskmate.dev; no evidence of the absence of AI.
Sources checked: [97] · No specific AI function documented in the sources checked.
Source check: 2026-10-14
RiskNow · Product: RiskNow Risk Intelligence Platform · Headquarters: Netherlands [99] · RiskNow B.V.; RiskNow PlatformDocumented focus: RiskNow brings together risks, controls, evidence, incidents, suppliers and compliance frameworks in a connected data model. Teams assess inherent and residual risks, test controls and map them to several regulatory frameworks. The platform also offers assessments, policy management and audit trails as well as functions for data protection, continuity planning and the DORA register of information on ICT service providers.AI functions and classification: RiskNow names AI-supported control recommendations, support in testing controls and guidance on remediating incidents and risk issues.[100] [99] · Specific AI functions documented
Control recommendations · Support for control testing · Guidance on incident remediation
AI evidence: [100] · Documented by the vendor; no product test.
Source check: 2026-10-14
Riskonnect · To the detailed profile · Camms; Sword GRC; CastellanDocumented focus: GRC, insurable risks, claims management and resilience with shared data relationships.AI functions and classification: Riskonnect Intelligent Risk creates summaries of documents, suggests risks and controls and supports the mapping of regulatory changes to policies and controls.[101] [102] [103] [104] [105] · Specific AI functions documented
Document summary · Risk suggestions · Control suggestions · Regulatory mapping
AI evidence: [102] · According to the provider, the AI functions are activated via opt-in. Available functions and configuration depend on the Riskonnect product used; a universal functional scope was not checked.
Source check: 2026-10-14
RiskRhinoDocumented focus: Links business processes, risks, controls and audits with tasks, evidence and actions across the lines of defence.AI functions and classification: RiskRhino uses AI to extract control requirements from policies and ISAE reports, maps them to the internal control framework and shows documentation gaps as well as suggestions for improvement.[106] [107] [108] · Specific AI functions documented
Extract control requirements from documents · Map requirements to internal controls · Analyse control and evidence gaps · Suggest improvements to the control framework
AI evidence: [107] · Documented by the vendor; no product test.
Source check: 2026-10-14
RiskSmart · Product: RiskSmart GRC · Headquarters: United Kingdom [109] · Risk Smart Limited; not TS Imagine RiskSmart or RiskSmart+Documented focus: RiskSmart connects risk and control management with modules for policies, compliance, internal audits and third-party risk. Organisations can adapt taxonomies, registers and responsibilities and link risks with controls and incidents. Dashboards and notifications support ongoing monitoring. The platform addresses, among others, financial service providers, legal service providers and mid-sized companies.AI functions and classification: RiskSmart documents AI input aids, context-specific suggestions and data quality checks within the risk and control workflows. Results remain reviewable; responsibility lies with the team.[110] [111] · Specific AI functions documented
Edit risk and control records with suggestions · Check data quality in GRC workflows
AI evidence: [111] · Documented by the vendor as currently embedded support. Human review intended; not tested in practice.
Source check: 2026-10-14
RiskTech · Product: RiskTech GRC · RiskTechDocumented focus: Provider for Vietnamese companies with compliance, internal audit and risk modules. Shared risk and control registers, evidence storage and role models support step-by-step integration.AI functions and classification: RiskTech describes AI suggestions for missing controls, uncovered risks in the audit plan and the impact of regulatory changes on existing obligations.[112] · Specific AI functions documented
Suggest control gaps and controls · Check audit coverage · Map regulatory changes
AI evidence: [112] · Documented by the vendor as assistance that can be switched off, with sources and role-based review/approval. No product test.
Source check: 2026-10-14
Riskuity · Product: Riskuity AI-Assisted GRC · Headquarters: USA [113] · Longevity Consulting LLC is named as the vendor in the product launch; the vendor's privacy policy names Washington, DC 20009. · Longevity Consulting LLC; RiskuityDocumented focus: GRC platform for organisations and public authorities with controls, evidence, risks and audit planning.AI functions and classification: AI suggests framework and control mappings, detects evidence gaps and creates drafts of action plans and audit documents. Responsible persons review and approve the suggestions.[114] [115] [113] · Specific AI functions documented
Map controls · Detect evidence gaps · Create audit and action drafts
AI evidence: [114] [115] · Commercial product with demo and pilot; AI outputs require human approval.
Source check: 2026-10-15
RiskWatchDocumented focus: Risk registers and assessments with a shared control library for compliance, physical security, policies, cyber and supplier risks.AI functions and classification: The AI risk management page checked describes governance of AI systems, including inventory, assessments and controls. This does not document any AI support of the product's own for these GRC work steps.[116] [117]Not specifically documented in the source check
Targeted vendor search mainly returned competitor overviews. RiskWatch by Sift is a different product and was not attributed.
Sources checked: [117] · No specific AI availability can be derived from the sources checked.
Source check: 2026-10-14
RUBIQ · Product: KAIRO · RUBIQ; Guideline BizTech; KAIRODocumented focus: KAIRO connects risks, controls, regulatory mappings and audit evidence. The shared RUBIQ database can be connected with customer and supplier reviews.AI functions and classification: RUBIQ describes AI specialists for triage, screening, drafts, audit preparation and reports on shared governance data. The specialists make recommendations; decisions and approvals remain with the team.[118] · Specific AI functions documented
Pre-structure and screen compliance cases · Prepare audits · Create governance reports and drafts
AI evidence: [118] · Documented by the vendor within the connected RUBIQ products; specific package and implementation terms on request. Not tested in practice.
Source check: 2026-10-14
Ruleguard · Product: Ruleguard GRC Platform · Headquarters: United Kingdom [119] · Strategic Software Applications Ltd; Axiom HQDocumented focus: Ruleguard connects operational risks, controls, compliance monitoring, regulatory change and audits for regulated financial firms. Risk registers, self-assessments, loss events and evidence remain linked to one another. AI supports the analysis of new requirements and suggests how they should be mapped; configurable review and approval stages keep the responsible business owners involved in the decision-making process. Changes and justifications are logged.AI functions and classification: Documented by the vendor: AI agents extract key statements, dates and scopes of regulatory changes, suggest their applicability to units and business lines and check linked risks and control gaps. Results are forwarded for human review in accordance with configured rules.[120] [121] [119] [122] · Specific AI functions documented
Extract requirements and deadlines · Suggest applicability · Analyse risk and control gaps
AI evidence: [120] · Documented by the vendor as a current platform function; no pilot or planned status on the product page checked. Not tested in practice; agree specific modules and approval configuration.
Source check: 2026-10-14

Sources.

The numbers in square brackets refer to this list. It is numbered consecutively for this page.

  1. Naris: vendor source, headquarters evidence checked 15.10.2026
  2. Naris: main source checked 15.10.2026
  3. Naris: vendor source checked 15.10.2026
  4. Naris: vendor source checked 15.10.2026
  5. Naris: vendor source checked 15.10.2026
  6. Naris: vendor source, AI evidence checked 15.10.2026
  7. Naris: vendor source checked 15.10.2026
  8. Navigate / Altara: vendor source, headquarters evidence checked 15.10.2026
  9. Navigate / Altara: main source, AI evidence checked 15.10.2026
  10. Navigate / Altara: vendor source checked 15.10.2026
  11. Ncontracts: products, AI and acquired brands Ncontracts · vendor source, AI evidence, checked 14.10.2026
  12. Ncontracts: acquisition of Venminder Ncontracts · vendor source, checked 14.10.2026
  13. NEXIS: vendor source, headquarters evidence checked 14.10.2026
  14. NEXIS: main source, AI evidence checked 14.10.2026
  15. NEXIS: vendor source, AI evidence checked 14.10.2026
  16. Njordium Cyber Group: vendor source, headquarters evidence checked 14.10.2026
  17. Njordium Cyber Group: main source, AI evidence checked 14.10.2026
  18. Njordium Cyber Group: vendor source checked 14.10.2026
  19. Normio: vendor source, headquarters evidence checked 15.10.2026
  20. Normio: main source, AI evidence checked 15.10.2026
  21. Normio: vendor source, AI evidence checked 15.10.2026
  22. NorthGRC: headquarters evidence checked 14.10.2026
  23. NorthGRC: main source checked 14.10.2026
  24. NorthGRC: vendor source checked 14.10.2026
  25. NorthGRC: vendor source checked 14.10.2026
  26. Novasecur: vendor source, headquarters evidence checked 14.10.2026
  27. Novasecur: main source, AI evidence checked 14.10.2026
  28. OLING Management et Technologie: vendor source, headquarters evidence checked 14.10.2026
  29. OLING Management et Technologie: main source checked 14.10.2026
  30. OLING Management et Technologie: vendor source checked 14.10.2026
  31. OLING Management et Technologie: vendor source checked 14.10.2026
  32. OMNINET: main source checked 14.10.2026
  33. OMNINET: vendor source checked 14.10.2026
  34. OMNINET: vendor source checked 14.10.2026
  35. OneAdvanced: headquarters evidence checked 14.10.2026
  36. OneAdvanced: main source, AI evidence checked 14.10.2026
  37. OneAdvanced: vendor source checked 14.10.2026
  38. Onspring: main source, AI evidence checked 14.10.2026
  39. Opal GRC: vendor source, headquarters evidence checked 15.10.2026
  40. Opal GRC: main source, AI evidence checked 15.10.2026
  41. Opal GRC: vendor source, AI evidence checked 15.10.2026
  42. Operlity: vendor source, headquarters evidence checked 15.10.2026
  43. Operlity: main source, AI evidence checked 15.10.2026
  44. Operlity: vendor source, AI evidence checked 15.10.2026
  45. Operlity: vendor source checked 15.10.2026
  46. Operlity: vendor source checked 15.10.2026
  47. Optial: GRC SmartStart Optial · vendor source, checked 14.10.2026
  48. Optial: GRC planning Optial · vendor source, checked 14.10.2026
  49. Optial GRC SmartStart: vendor source checked 14.10.2026
  50. Optro (formerly AuditBoard): headquarters evidence checked 14.10.2026
  51. Optro: Modern GRC Intelligence Platform Optro · vendor source, checked 14.10.2026
  52. Optro AI: AI for GRC Optro · vendor source, AI evidence, checked 14.10.2026
  53. Oracle: main source, AI evidence checked 14.10.2026
  54. ORCA Opti: vendor source, headquarters evidence checked 15.10.2026
  55. ORCA Opti: main source, AI evidence checked 15.10.2026
  56. ORCA Opti: vendor source, AI evidence checked 15.10.2026
  57. Origami Risk: Governance, Risk and Compliance Origami Risk · vendor source, checked 14.10.2026
  58. Origami Risk: AI Concierge and Q3 2026 release Origami Risk · vendor source, AI evidence, checked 14.10.2026
  59. Oxial: GRC application Oxial · vendor source, checked 14.10.2026
  60. Oxial: company and product approach Oxial · vendor source, checked 14.10.2026
  61. PAN Software: vendor source, headquarters evidence checked 15.10.2026
  62. PAN Software: main source, AI evidence checked 15.10.2026
  63. PAN Software: vendor source checked 15.10.2026
  64. PAN Software: vendor source, AI evidence checked 15.10.2026
  65. Pirani: main source checked 14.10.2026
  66. Pirani: vendor source, AI evidence checked 14.10.2026
  67. ProcessGene: main source checked 14.10.2026
  68. Protecht: GRC platform Protecht · vendor source, checked 14.10.2026
  69. Protecht Cognita: available functions and roadmap Protecht · vendor source, AI evidence, checked 14.10.2026
  70. Protecht: acquisition of VISO TRUST Protecht · vendor source, checked 14.10.2026
  71. ReadiNow: platform, GRC and ReadiAgents ReadiNow · vendor source, AI evidence, checked 14.10.2026
  72. ReadiNow: Legal ReadiNow · vendor source, checked 14.10.2026
  73. Regulativ.ai: register entry, headquarters evidence checked 14.10.2026
  74. Regulativ.ai: main source, AI evidence checked 14.10.2026
  75. Regulativ.ai: vendor source checked 14.10.2026
  76. Regulativ.ai: vendor source checked 14.10.2026
  77. Reguroo: vendor source, headquarters evidence checked 15.10.2026
  78. Reguroo: main source, AI evidence checked 15.10.2026
  79. Reguroo: vendor source, AI evidence checked 15.10.2026
  80. Remedy / RiskCognition: vendor source, headquarters evidence checked 15.10.2026
  81. Remedy / RiskCognition: main source, AI evidence checked 15.10.2026
  82. Remedy / RiskCognition: vendor source, AI evidence checked 15.10.2026
  83. Resolver: Risk Intelligence Platform Resolver · vendor source, checked 14.10.2026
  84. Resolver: Investigations and Case Management Resolver · vendor source, AI evidence, checked 14.10.2026
  85. Risk Cognizance: vendor source, headquarters evidence checked 15.10.2026
  86. Risk Cognizance: main source, AI evidence checked 15.10.2026
  87. Risk Cognizance: vendor source checked 15.10.2026
  88. Risk Wizard: main source checked 14.10.2026
  89. Risk Wizard: vendor source checked 14.10.2026
  90. Risk Wizard: vendor source checked 14.10.2026
  91. riskHive: main source, headquarters evidence checked 14.10.2026
  92. riskHive: vendor source checked 14.10.2026
  93. riskHive: vendor source checked 14.10.2026
  94. RISKID: main source checked 14.10.2026
  95. RISKID: vendor source checked 14.10.2026
  96. RiskMate: headquarters evidence checked 14.10.2026
  97. RiskMate: main source checked 14.10.2026
  98. RiskMate: vendor source checked 14.10.2026
  99. RiskNow: vendor source, headquarters evidence checked 14.10.2026
  100. RiskNow: main source, AI evidence checked 14.10.2026
  101. Riskonnect: GRC Software Riskonnect · vendor source, checked 14.10.2026
  102. Riskonnect: Intelligent Risk Riskonnect · vendor source, AI evidence, checked 14.10.2026
  103. Riskonnect: vendor source checked 14.10.2026
  104. Riskonnect: vendor source checked 14.10.2026
  105. Riskonnect: vendor source checked 14.10.2026
  106. RiskRhino: risk and control management RiskRhino · vendor source, checked 14.10.2026
  107. RiskRhino: Agentic AI RiskRhino · vendor source, AI evidence, checked 14.10.2026
  108. RiskRhino: platform RiskRhino · vendor source, checked 14.10.2026
  109. RiskSmart: headquarters evidence checked 14.10.2026
  110. RiskSmart: main source checked 14.10.2026
  111. RiskSmart: vendor source, AI evidence checked 14.10.2026
  112. RiskTech: main source, AI evidence checked 14.10.2026
  113. Riskuity: vendor source, headquarters evidence checked 15.10.2026
  114. Riskuity: main source, AI evidence checked 15.10.2026
  115. Riskuity: vendor source, AI evidence checked 15.10.2026
  116. RiskWatch: GRC and shared control library RiskWatch · vendor source, checked 14.10.2026
  117. RiskWatch: scope and limits of AI governance RiskWatch · vendor source, checked 14.10.2026
  118. RUBIQ: main source, AI evidence checked 14.10.2026
  119. Ruleguard: vendor source, headquarters evidence checked 14.10.2026
  120. Ruleguard: main source, AI evidence checked 14.10.2026
  121. Ruleguard: vendor source checked 14.10.2026
  122. Ruleguard: third-party source checked 14.10.2026
Back to top