T-NEX
Menu
DEEN
GRC provider register · Category 1 of 11 · Part 5 of 5

GRC platforms & suites, S to Z:
42 providers with AI classification.

In short: Part 5 of 5 of the Platforms & suites category: full entries for 42 of the 192 providers, alphabetically from S to Z, as of 18 October 2026. Of these, 35 document specific AI functions (83%). In Germany, Austria or Switzerland, six have a documented headquarters, four of them in Germany.

By and Published: As of: · Subpage of the GRC provider register Reviewed by Andreas Unruh and Christoph Gembruch, managing directors of T-NEX GmbH, on
Illustration: globe with networked GRC providers whose AI evidence flows into a checked provider register

Neither completeness nor a general suitability for banks is claimed. Providers are listed alphabetically. The order is not a performance rating.

All 682 GRC providers in the market overview · 379 European GRC providers · Platforms & suites category page (192)

Publisher: T-NEX GmbH. Andreas Unruh and Christoph Gembruch are managing directors of T-NEX. This editorial market overview is based on vendor sources and specialist primary sources. It contains no ranking and is not based on a joint product test. The market overview covers 682 providers from GRC and adjacent specialist areas. Acquired brands and former product names are not counted separately. Methodology and sources

Context, figures, review questions and the regulatory framework are on the Cross-functional GRC platforms and suites category page.

Entries from S to Z: functions, AI classification and sources.

The assignment describes the offering considered, not all of the company's products. AI information names specific functions or limits of the public documentation. Scope of delivery, data storage and regional availability must be checked for each offering. Download provider overview as CSV (German), licensed under CC BY 4.0, credit “T-NEX GRC-Anbieterregister, t-nex.de”.

Is a provider missing or an entry out of date? Send us a note with a source via the contact form. Accepted changes are marked in the entry with the date they were checked.

Cross-functional GRC platforms and suites: S to Z

42 entries

Cross-functional GRC platforms and suites · S to Z · 42 providers
Provider / productDocumented focusAI functions and classification
SafePaaS · Product: ARCPaaS / AccessPaaS / MonitorPaaS · ARCPaaS; AccessPaaS; MonitorPaaS; SafeIQDocumented focus: SafePaaS offers shared management of audits, risks and compliance requirements. ARCPaaS connects audit planning, findings, risk assessment and the mapping of controls to requirements. Complementary applications monitor authorisations, segregation of duties, transactions and configuration changes in business systems. Tasks and reports support the handling of identified gaps across several applications.AI functions and classification: SafeIQ answers questions about identity and access risks in natural language. It searches SafeInsights data within the user's permission context and links answers with the underlying accounts, risks or SoD findings.[1] [2] [3] · Specific AI functions documented
Natural-language query of access risks · Investigation of SoD violations · Identification of orphaned or inactive identities
AI evidence: [2] · Documented by the vendor; no product test.
Source check: 2026-10-14
Sahl · Product: Sahl GRC · Headquarters: Saudi Arabia [4] · Vendor information: Saudi platform with an office in Riyadh. The terms of use checked do not name a full legal company name and contain an incomplete template sentence. Legal entity and contract documents remain to be checked separately. · Sahl GRC; getsahl.ioDocumented focus: Sahl brings together policies, controls, evidence, risks and supplier assessments in a GRC platform with a focus on Saudi Arabia and the MENA region. Teams can map requirements of several frameworks, track document versions and compile audit documentation. Audit management and a Trust Center complement ongoing compliance work and communication with customers.AI functions and classification: The product page describes AI for mapping evidence to controls, for detecting outdated documentation and for initial policy drafts for human review.[5] [6] [4] [7] [8] · Specific AI functions documented
Map evidence to controls of several frameworks · Flag outdated or expiring evidence · Create policy drafts for review
AI evidence: [5] · Documented by the vendor; agree set-up and specific functional scope with the provider. No product test.
Source check: 2026-10-14
SAI360 · Plural PolicyDocumented focus: GRC with ethics and compliance training, policies, controls and incidents.AI functions and classification: SAI360 describes AI for suggesting answers in assessments, analysing policies and evidence and mapping regulatory requirements to controls. Risk signals and incidents can also be examined for patterns.[9] [10] [11] · Specific AI functions documented
Suggest assessment answers · Analyse evidence and policies · Map regulation to controls · Detect risk patterns in incidents
AI evidence: [10] · Embedded in the platform; available data and tasks depend on the modules used. Human validation remains intended. No product test.
Source check: 2026-10-14
SAP GRC · To the detailed profile · Headquarters: Germany [12] · SAP SE; Walldorf; HRB 719915, Registergericht Mannheim.Documented focus: Modular GRC suite closely linked to SAP processes, financial data and authorisation management.AI functions and classification: SAP describes a Governance Assistant with specialised AI agents for control monitoring, audit evidence, the identification of risks and suggestions for remediating compliance issues.[13] [14] · Specific AI functions documented
Configure and support control monitoring · Analyse audit evidence · Create risk drafts from signals · Suggest actions to remediate compliance issues
AI evidence: [14] · Documented by the vendor; availability, licence and specific scope of agents to be checked per SAP solution. No evidence of general activation of all agents shown; not tested in practice.
Source check: 2026-10-14
SAS · Product: Governance and Compliance Manager · AI Governance Manager and Model Risk Management are further SAS products.Documented focus: Centralises risks, controls, incidents and policies. Risk indicators, actions and audits can be connected with SAS analytics and data management tools.AI functions and classification: SAS describes AI-supported analyses in Governance and Compliance Manager on Viya to identify new risk signals from risk, control, incident and audit data and to support the prioritisation of cases and actions.[15] [16] · Specific AI functions documented
Evaluate GRC data for new risk signals · Support prioritisation of incidents and actions
AI evidence: [15] [16] · Documented by the vendor for GCM on Viya; clarify analytics configuration and licence scope. No product test.
Source check: 2026-10-14
SAVISCON · Product: GRC-COCKPITDocumented focus: Connects requirements, risks and actions of different management systems. Supports risk, compliance, information security and data protection management on a shared database.AI functions and classification: No specific available AI function is documented for the GRC-COCKPIT in the source check. Publicly mentioned AI plans for support and explanations are kept separate from documented product functions.[17] [18]Not specifically documented in the source check
Product page and indexed company announcement checked. General future plans without a clear GRC work step are not sufficient even for announced.
Sources checked: [17] [18] · No specific AI availability can be derived from the sources checked.
Source check: 2026-10-14
Schleupen R2C · Headquarters: Germany [19] · Schleupen SE; Ettlingen; HRB 741856 Amtsgericht Mannheim.Documented focus: R2C product family for risk, ICS, compliance, policies and information security with analytics.AI functions and classification: In business continuity management, Schleupen documents AI-supported suggestions for event descriptions and actions. No blanket AI coverage of all R2C modules is derived from this.[20] [21] [22] · Specific AI functions documented
Suggest BCM event descriptions · Draft the content of resilience measures
AI evidence: [22] · Documented by the vendor for BCM; agree the specific licence and module scope. Not tested in practice.
Source check: 2026-10-14
Sentrient · Product: Sentrient GRC / AI Agents · Headquarters: Australia [23] · Sentrient Pty Ltd, ABN 63 609 044 788; business address in Melbourne according to the provider footer. · Sentrient Pty LtdDocumented focus: GRC platform for risks, controls, incidents, policies, audits and registers. Complementary HR and training modules are part of the broader offering.AI functions and classification: Configurable AI agents read, search, supplement and update GRC records. Examples are control re-checks, incident triage and risk reviews; write actions can be submitted individually for approval.[23] · Specific AI functions documented
Support control and risk reviews · Pre-sort incidents · Maintain GRC registers with auditable actions
AI evidence: [23] · Offered as a product function with a demo. Model, run limits and permissions are configurable per agent; external connectors have their own permission limits.
Source check: 2026-10-15
ServiceNow Integrated Risk Management · To the detailed profile Documented focus: Risk and compliance in connection with IT, cybersecurity and operational workflows.AI functions and classification: Otto for IRM summarises findings and supports the identification of potential risks and the review of controls with generative AI within existing IRM workflows.[24] [25] · Specific AI functions documented
Findings summary · Risk indications · Control review
AI evidence: [25] · Requires the corresponding IRM AI functions and licences. The documentation names restrictions by region, model offering and operating environment; not all functions are available in regulated or self-hosted environments.
Source check: 2026-10-14
SimpleRisk · Product: SimpleRisk / AI Extra · Headquarters: USA [26] · The SimpleRisk data sheet linked from the vendor website explicitly names headquarters in Texas, USA. The current legal form and full ownership structure were not separately verified. · SimpleRisk Core; SimpleRisk AI ExtraDocumented focus: SimpleRisk supports the capture, assessment and treatment of risks as well as work with controls, policies and audit evidence. Companies can track actions and link compliance requirements with existing documents. In addition to the core system, extensions are available. The AI Extra supplements these workflows with reviewable suggestions and drafts for further processing by the responsible business owners.AI functions and classification: The technical documentation describes document-control mappings with justification, suggestions for risk mitigation and drafts for control tests and policies. AI outputs are intended to be reviewed by operators before being adopted into the authoritative data. Some of the functions require the AI Extra and a configured model provider.[27] [28] [29] [30] [26] · Specific AI functions documented
Control-document mapping · Risk mitigation suggestions · Control test drafts · Policy drafts
AI evidence: [27] [28] · Documented by the vendor; AI Extra and a configured model provider required for the additional functions described; not tested in practice.
Source check: 2026-10-14
Skylen · Product: ComplyTrain · Headquarters: Denmark [31] · The privacy policy names Skylen Solutions ApS, CVR 45855287, with its registered office in Copenhagen, Denmark. · Skylen Solutions ApS; ComplyTrain; ComplyTrain by SkylenDocumented focus: ComplyTrain connects quality management, audits, risks, controlled documents, requirements and supplier assessments. The offering is aimed in particular at regulated supply chains and documents the connection between requirements, actions and evidence.AI functions and classification: AI agents answer questions from approved company documents and draft standard-related document sections. Missing information is flagged; suggested changes appear with a justification for acceptance or rejection. Approved documents are locked against subsequent AI changes.[32] [33] [31] · Specific AI functions documented
Draft compliance documents · Answer requirement-related questions · Flag document gaps · Support audit preparation
AI evidence: [32] · Commercial platform with trial access and a demo. AI creates reviewable suggestions; document approvals remain human decisions.
Source check: 2026-10-15
Smart Global Governance · Product: Smart Global Governance · Headquarters: France [34] · Smart Global Privacy; Smart Global Governance FranceDocumented focus: Smart Global Governance offers a modular software offering for compliance, risk management and the management of governance tasks. The applications are intended to bring together regulatory requirements, assessments and recurring workflows. For European buyers, the provider is to be classified in particular as a French GRC vendor with a complementary focus on data protection.AI functions and classification: Optivalue.ai analyses compliance questions and creates suggested answers from internal policies, reference documents and previous answers. The user reviews and corrects the suggestions; source references support verification.[35] [34] [36] [37] · Specific AI functions documented
Analysis of compliance questionnaires · Generation of document-based suggested answers
AI evidence: [36] [37] · Documented by the vendor; no product test.
Source check: 2026-10-14
Snap Compliance · Product: Snap Compliance GRC / Risk Copilot · Headquarters: USA [38] · The current MSA dated 04.10.2026 names Snap Compliance Labs LLC, incorporated in Delaware, with its main address in Doral, Florida. Chile contact: Snap Compliance Chile SpA, RUT 77.568.668-5, Santiago. · Snap Compliance Labs LLC; Snap Compliance Chile SpA; Risk CopilotDocumented focus: GRC suite for anti-money laundering, enterprise risk, corporate governance and whistleblowing processes with a focus on Latin America. Connects risk matrices, internal controls and evidence.AI functions and classification: Risk Copilot generates risk matrices from organisational, industry and country context and suggests actions or controls. AI also supports due diligence and matrix analyses.[39] [38] [40] · Specific AI functions documented
Draft risk matrices in context · Suggest controls and actions · Support due diligence analyses
AI evidence: [39] · Commercial SaaS offering with a demo and trial access; Risk Copilot described as a current product offering. Modules and scope depend on the subscription chosen.
Source check: 2026-10-15
SoftExpert GRCDocumented focus: SoftExpert positions GRC within a suite for processes, documents, quality and corporate management.AI functions and classification: The AI Compliance Reader extracts requirements from regulatory PDFs and allows results to be refined via chat. In the document module, AI summarises differences between versions for review and approval.[41] [42] · Specific AI functions documented
Extract regulatory requirements from PDFs · Refine requirements through dialogue · Summarise document changes for review
AI evidence: [42] · Described as functions of the Suite 3.0 update of 16 June 2026; check module and configuration scope. No product test.
Source check: 2026-10-14
Sorena AI · Product: Sorena; Research Copilot; Assessment Autopilot · Headquarters: Sweden [43] · The provider names Sorena AB, registration number 559573-7338, with its registered office in Stockholm. · Sorena AB; SorenaDocumented focus: Sorena connects regulatory sources and internal documents with risk, contract and compliance work. A central knowledge model contains controls, evidence, policies and responsibilities.AI functions and classification: AI assistants research compliance questions and provide source references. Research Copilot creates report drafts and questionnaire answers; Assessment Autopilot supports recurring review workflows.[44] [43] · Specific AI functions documented
Answer compliance questions with source references · Draft audit reports · Handle security questionnaires
AI evidence: [44] · Demo and trial access offered. Promises of error-free answers are not adopted here as a documented product characteristic; review results from a subject-matter perspective.
Source check: 2026-10-15
Strategix · Product: XGRC; MAIA · Headquarters: South Africa [45] · The vendor describes development in South Africa and names Johannesburg and Cape Town as locations; the website terms and conditions name Strategix Application Solutions (Pty) Ltd. British branch not counted separately. · Strategix Application Solutions (Pty) Ltd; XGRC Software; MAIA; SHEQX; ENVIRX; MSX; MSXCyberDocumented focus: XGRC brings together enterprise risk, compliance, internal audits and policies. Specialist modules for information security, environment and occupational health and safety use the same database; MAIA adds the analysis of existing GRC data.AI functions and classification: MAIA answers questions about risk registers, policies and audit findings in natural language. The vendor describes compliance summaries and analyses of regulatory impact under existing access rights, with AI interactions logged.[46] [45] [47] · Specific AI functions documented
Query risk registers and audit findings · Summarise compliance status · Analyse regulatory impact
AI evidence: [46] · Customer-specific configuration and demo offered. Public demonstrations use fictitious data. The ISO/IEC 42001 certification targeted in October 2026 is not treated as already completed.
Source check: 2026-10-15
Stratsys · Product: Stratsys GRC Suite; Risk & Control · Headquarters: Sweden [48] · Stratsys AB; Hypergene in the same provider group; EvaluateDocumented focus: Stratsys connects risk management, internal controls, information security and compliance in a shared platform. Risks are linked with owners, actions, controls and evidence. Complementary modules support internal audits, incidents and business continuity. The solution addresses, among others, public organisations, mid-sized companies and regulated industries with several organisational units involved.AI functions and classification: Stratsys AI summarises risk assessments, controls and deviations and suggests actions for identified risks and gaps. The support is integrated into the platform's GRC work.[49] [50] · Specific AI functions documented
Summarise risk and control assessments · Prepare deviations for follow-up · Suggest actions for risks and gaps
AI evidence: [49] · Documented by the vendor; package and functional scope to be checked. Not tested in practice.
Source check: 2026-10-14
SureCloud · Product: SureCloud GRC · Headquarters: United Kingdom [51] · SureCloud Ltd, registered in England and Wales under 05703655; registered office and principal place of business in London according to the privacy policy.Documented focus: Connects compliance, risk, internal audit, data protection and third-party risk. A shared control model supports reusable evidence for several regulatory frameworks.AI functions and classification: Gracie AI supports supplier onboarding, creates workflows from descriptions and suggests controls matching risks from the framework library.[52] [51] · Specific AI functions documented
Capture suppliers and prepare initial assessment · Configure GRC workflows from descriptions · Map controls to risks
AI evidence: [52] · Documented by the vendor; scope depends on the SureCloud plan and configured roles/workflows. No product test.
Source check: 2026-10-14
SwissGRC Platform / GRC Toolbox · Headquarters: Switzerland [53] · Swiss GRC AG, head office Lucerne, Switzerland; CHE-145.606.205.Documented focus: Risk, controls, compliance, information security and data protection with process and contract management on a shared database.AI functions and classification: Grace AI answers questions about risks, controls and processes on the basis of platform data, summarises matters and suggests next steps.[54] · Specific AI functions documented
Query GRC data in natural language · Summarise risk matters · Suggest next processing steps
AI evidence: [54] · Documented by the vendor; no product test.
Source check: 2026-10-14
Symbiant GRC & Audit · Headquarters: United Kingdom [55] · Registered office and postal address London; operational sales/support office Leeds. US branch shown separately.Documented focus: Modular platform for risks, compliance and internal audit with relationships to controls, incidents and corporate objectives.AI functions and classification: The optional AI assistant drafts risk descriptions, controls and mitigation measures, supports root cause analyses and links risks with organisational data. Users review and adopt the suggestions.[56] [57] · Specific AI functions documented
Draft risk descriptions · Suggest controls and mitigation measures · Analyse incident causes and affected areas · Supplement risk fields
AI evidence: [57] · Optional paid add-on according to the vendor; suggestions are not applied without user approval. Not tested in practice.
Source check: 2026-10-14
TeamGRC · Product: TeamGRC SaaS Suite · Headquarters: Netherlands [58] · The terms of use name TeamGRC, KvK 42164844, Amstelveen. The page footer additionally uses TeamGRC Inc.; clarify the exact legal form when concluding the contract. · TeamGRC.ai; TeamGRC Inc.Documented focus: TeamGRC links regulatory obligations with risks, controls, policies, owners and measures. The platform supports a common control model as well as the documentation of approvals and risk decisions.AI functions and classification: The vendor documentation describes AI for mapping requirements, analysing policy gaps and risk assessments. In addition, security profiles and policy drafts are generated from the respective organisational context.[59] [58] · Specific AI functions documented
Map requirements to controls · Analyse policy gaps · Draft security profiles
AI evidence: [59] [58] · SaaS access under a separate enterprise contract. The public AI demonstrations are explicitly illustrative examples, not evidence of a product test having been carried out.
Source check: 2026-10-15
TESISQUARE / Compet-e · Product: CORA GRC and ERM · Headquarters: Italy [60] · Compet-e; Compet-e Srl; CORA; C*RA; TESI GRC CORA; Tesi SpADocumented focus: CORA combines modular compliance management with process-based enterprise risk management. The platform links organisation, processes, assets and controls, offers configurable risk matrices and scenario analyses, and tracks treatment plans. Audits, incidents, findings and key figures complete the risk cycle. Specialist modules cover, among other things, data protection, information security, DORA, anti-money laundering and the governance of AI systems.AI functions and classification: C*RA AI supports the recording, risk assessment and governance of AI systems. However, no separate AI work step for performing GRC tasks was specifically documented in the CORA pages checked.[61] [62] [60] [63] [64]Not specifically documented in the source check
Governance of AI deliberately separated from AI support in GRC; targeted Italian domain search checked.
Sources checked: [62] [64] · No specific AI function documented in the sources checked.
Source check: 2026-10-14
The Access Group · Product: Access Risk & Compliance; Enterprise Risk Management · Headquarters: United Kingdom [65] · Access UK Limited; Riliance; Riliance Software Limited; Access ComplianceDocumented focus: Access offers software for risk and compliance processes, particularly in the legal services sector. Modules connect risk registers, audits, breach reports, complaints and reports with configurable workflows. Enterprise risk management supports the identification, assessment and ongoing monitoring of risks. The solutions formerly offered under Riliance are now part of the Access portfolio.AI functions and classification: Access offers the AI environment Evo across the group. However, no specific AI work step is documented for the Risk & Compliance/Riliance products checked.[66] [67] [68]Not specifically documented in the source check
GRC product page and Evo description read; targeted search for Risk/Compliance/Evo. Group-wide AI is not automatically attributed to the GRC product.
Sources checked: [66] [68] · No specific available AI support documented in the source check; no product test.
Source check: 2026-10-14
Tickit Systems · Product: Tickit On Demand · Tickit On Demand is the product; Tickit Health is a different company.Documented focus: Australian web-based risk and compliance software. Visual risk assessments and configurable reports support ongoing management and monitoring.AI functions and classification: No specific AI work step is documented in the sources checked for Tickit On Demand. The risk registers, graphical assessments and configurable reports described are not sufficient as AI evidence.[69]Not specifically documented in the source check
Official product page read; a supplementary search for AI and artificial intelligence on the vendor domain yielded no specific product evidence.
Sources checked: [69] · AI availability not specifically documented in the source check.
Source check: 2026-10-14
TogetherSecure · Product: HITGuard · Headquarters: Austria [70] · TogetherSecure GmbH; registered office Wels, Austria; company register 468227 w, company register court Wels. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office.Documented focus: Brings together risk, compliance, audits and internal controls in a modular platform for mid-sized companies. Further modules cover data protection, supplier risk and document management.AI functions and classification: On the ISMS product page, HITGuard describes AI support for draft answers and suggestions on risks, measures and controls.[71] [72] [70] · Specific AI functions documented
Suggested answers for ISMS questions · Suggest risks and controls · Suggest measures
AI evidence: [72] [71] · Documented by the vendor; agree the specific licence and implementation scope. No product test.
Source check: 2026-10-14
TransVare · Product: TransVare GRC Suite · KnowledgeVare has been announced.Documented focus: Links enterprise risks, internal audit, compliance, governance, cyber risks and incidents. Shared evidence and group views complement locally owned processes.AI functions and classification: AiiVare drafts and classifies risks, prepares audit findings and maps obligations to controls and evidence. Outputs remain drafts until reviewed by the responsible persons.[73] [74] · Specific AI functions documented
Draft and classify risks · Prepare audit findings · Map obligations to controls and evidence · Summarise incidents
AI evidence: [74] · Documented by the vendor for the TransVare suite; human review and approval. The separate KnowledgeVare is marked as Coming Soon and is not counted here as available; no product test.
Source check: 2026-10-14
Uno AI · Product: Uno AI Agents Platform for GRC · Headquarters: USA [75] · The licence terms name Uno.ai, Inc.; provider address in Mountain View, California. TrustMAPP describes a partnership with Uno, not an identical brand or a joint company; the two providers continue to be counted separately. · Uno.ai, Inc.; Uno AI, Inc.Documented focus: Uno offers a modular platform for enterprise risk, compliance, internal audit, third parties and resilience. Evidence, controls, risk analyses and audits use a common data basis.AI functions and classification: Documented AI agents collect evidence and map it to control requirements, examine audit gaps and produce draft reports. For supplier assessments they process, among other things, SOC 2 reports and security questionnaires. The licence terms require human review of the results.[76] [75] [77] · Specific AI functions documented
Map evidence to control requirements · Prepare audit gaps and draft reports · Evaluate supplier documents for risk assessments
AI evidence: [76] [75] · The vendor offers modules, assessment agents and demos. The licence terms require expert human review; no autonomous automated decision without meaningful oversight.
Source check: 2026-10-15
Values Associates · Product: Values Associates GRC, Sapin 2 and TPRM · Headquarters: France [78]Documented focus: Values Associates develops configurable applications for risk mapping, internal controls, internal audit and action tracking. In addition, there are programmes for anti-corruption, conflicts of interest and third-party assessments. The common approach combines specialist compliance processes with customisable data models and workflows on a platform developed in-house by the provider.AI functions and classification: The third-party assessment solution uses Mistral models to produce source-referenced summaries and supports the segmentation of third parties and risks according to customisable categories.[78] [79] [80] · Specific AI functions documented
Summarise third-party information with sources · Segment third parties and risks by category
AI evidence: [80] · Documented by the vendor; information types and processes can be customised for each project. Not tested in practice.
Source check: 2026-10-14
VamiSec (Vami Group) · Product: VamiGRC · Headquarters: Germany [81] · VamiSec GmbH; VamiGRC; VamiAI; Vami Group; softScheck; softScheck GmbHDocumented focus: VamiGRC from VamiSec links management systems for information security, data protection, business continuity and AI with a common control model. The platform manages risks, evidence, framework mappings and tasks. Documents and project descriptions form the basis of supported assessments; supplier questionnaires and policies are also part of the documented scope of use. VamiSec and softScheck are run under the Vami Group.AI functions and classification: VamiAI derives risk suggestions from project descriptions and evidence, classifies uploaded documents and maps them to controls. Answers to security questionnaires and drafts of measures are also documented. The specific review and approval rules should be clarified before procurement.[82] [81] [83] · Specific AI functions documented
Suggest risks from project descriptions and evidence · Classify documents and map them to controls · Pre-fill security questionnaires · Produce draft measures
AI evidence: [82] · Documented by the vendor; not tested in practice
Source check: 2026-10-14
Vantage Technologies · Product: GRC Vantage · Vantage Technologies; GRC VantageDocumented focus: Links compliance, risk, BCM and internal audits with a focus on Saudi requirements. Arabic and English interfaces as well as shared controls support the work.AI functions and classification: GRC Vantage describes AI-supported audit sampling: the platform recommends sample sizes, flags anomalies in evidence and produces draft observations. Conclusions remain with the auditors.[84] [85] · Specific AI functions documented
Recommendation of audit samples · Detection of anomalous evidence · Drafts of audit observations
AI evidence: [85] · Documented by the vendor; no product test.
Source check: 2026-10-14
VComplyDocumented focus: Links compliance tasks, policies and risks with owners, controls, evidence and approvals. The focus is on ongoing implementation and traceable responsibilities.AI functions and classification: PolicyOps supports AI drafts, linguistic revision, translation and change summaries. Employees receive answers from approved policies; permissions and human approvals are retained.[86] [87] [88] · Specific AI functions documented
Draft and revise policies · Translate policies · Summarise changes · Answer questions from approved policies
AI evidence: [87] · Documented by the vendor; no product test.
Source check: 2026-10-14
ViClarityDocumented focus: Modular GRC platform with risks, control testing, compliance, third parties, documents, incidents and reports.AI functions and classification: Reg Monitor uses AI to filter regulatory publications by industry and jurisdiction, summarise changes and impacts, and suggest possible next steps. Assessment and implementation remain with the team.[89] [90] [91] [92] · Specific AI functions documented
Select relevant regulatory changes · Summarise changes and impacts · Suggest next compliance steps
AI evidence: [91] · Documented by the vendor within Compliance Management; regulators and jurisdictions are selected during set-up. Not tested in practice.
Source check: 2026-10-14
VigiTrust · Product: VigiOne · Headquarters: Ireland [93] · VigiTrust; VigiOne; VigiCheck; VigiFile; VigiPlan; VigiTrackDocumented focus: VigiOne structures security and compliance programmes with modules for audits, self-assessments, risk and asset registers, and evidence. Tasks and milestones link assessments with implementation; reports and notifications make the processing status visible. The platform also supports policies, business continuity and incidents and is used, among other things, for PCI DSS programmes.AI functions and classification: For VigiOne, no specific AI function in the GRC workflow was documented in the product description checked or in the targeted vendor search. Articles about AI security and events do not replace this evidence.[94] [95] [96]Not specifically documented in the source check
Product source and relevant search result read. No statement that the product fundamentally contains no AI.
Sources checked: [94] [96] · No specific AI work step documented in the source check; no statement about the absence of AI.
Source check: 2026-10-14
Volaris (intellior / IMS PREMIUM) · Product: Aeneis; IMS PREMIUM · Headquarters: Germany [97] · Germany refers to the operating provider entity intellior in Stuttgart. IMS is a Swiss provider entity of the same Volaris Group. This does not imply a European group headquarters. · intellior; Aeneis; IMS Integrierte Managementsysteme; IMS AG; IMS PREMIUM; KW+P; Volaris GroupDocumented focus: The Volaris Group comprises intellior with Aeneis and IMS with IMS PREMIUM. Aeneis links processes with risks, controls, audits, information security and data protection. IMS PREMIUM supports risk assessments, internal controls, measures and evidence. The products should be assessed as separate offerings; group membership does not mean a common technical platform.AI functions and classification: Aeneis documents AI for producing draft BPMN processes. A specifically delimited AI function for risk, control, compliance or audit tasks is not sufficiently documented in the sources checked; nor is one for IMS PREMIUM.[98] [99] [100] [101] [102] [97] [103]Not specifically documented in the source check
General process modelling not automatically counted as AI in GRC. The AI function of one product line is not transferred to other Volaris products; targeted IMS domain search without a reliable hit.
Sources checked: [98] [103] · No specific AI availability can be derived from the sources checked.
Source check: 2026-10-14
Wathiq · Product: Wathiq GRC · Headquarters: Saudi Arabia [104] · Vendor information: development in Saudi Arabia and location in Riyadh. A full legal company name or register number is not stated on the pages checked. · Wathiq GRC; Wtheq; وثيقDocumented focus: Wathiq links governance, risk registers, controls, evidence and internal audits in a platform geared to Saudi Arabia. The software supports policy approvals, assessments, findings and action tracking. Saudi and international frameworks are mapped together. The vendor offers operation in the customer's own infrastructure or private cloud with an Arabic and English interface.AI functions and classification: Wathiq describes NLP-based control mapping, the classification and mapping of evidence, explainable risk assessments and the production of bilingual reports.[105] [106] [104] [107] · Specific AI functions documented
Map controls between frameworks · Classify evidence and map it to controls · Support risk assessments with explanatory model contributions · Produce reports in Arabic and English
AI evidence: [106] [105] · Documented by the vendor for on-premises installation or private cloud with a customer-side AI model; human confirmation for mapping. No product test.
Source check: 2026-10-14
WeKomply – Granite · Product: Granite GRC Platform · Headquarters: Finland [108] · Granite Partners Oy; Granite Partners Ltd.; WeKomply; Falcony; D4; Lexerta; Datakvalitet; PlusOffice; Mobaro; eSmileyDocumented focus: Granite offers a modular platform for enterprise-wide risks, third-party risks, audits as well as IT risks and compliance. Configurable workflows, responsibilities and reports support ongoing risk handling across multiple areas. Supplementary applications cover information security and business continuity. The Finnish software provider has been part of the WeKomply Group since September 2026 and continues to run its platform.AI functions and classification: Granite AI suggests additions and control measures for risks, requirements and incidents. Across the entire risk register, it supports the analysis of trends, weak signals and possible blind spots.[109] [108] [110] · Specific AI functions documented
Suggest risk data and control measures · Analyse trends in the risk register · Detect possible blind spots in risk data
AI evidence: [110] · Integrated assistant documented by the vendor; answers in chat, no direct changes to customer data. Not tested in practice.
Source check: 2026-10-14
Wizpresso · Product: Diligence · Headquarters: China (Hong Kong) [111] · Wizpresso Limited; Wizpresso Diligence; Diligence; Factify; AdnotoDocumented focus: Wizpresso Diligence links requirements, policies, controls and evidence in a common GRC workspace. Compliance and audit teams can track responsibilities, assess gaps and prepare reports with the associated supporting documents. The platform is aimed, among others, at financial companies, supervisory bodies and listed companies and supports operational controls as well as external reporting.AI functions and classification: Diligence describes AI agents for mapping requirements to controls and evidence, analysing missing controls or supporting documents, and producing control matrices and audit reports.[112] [111] [113] [114] · Specific AI functions documented
Link requirements with controls and evidence · Analyse control and evidence gaps · Prepare control matrices and audit reports
AI evidence: [112] · Product functions documented by the vendor; SaaS and, according to a sales announcement, private cloud and on-premises installation. No product test.
Source check: 2026-10-14
Wolters Kluwer · Product: Enablon; TeamMate; StandardFusion; OneSumX for Compliance Program Management · Headquarters: Netherlands [115] · Wolters Kluwer names its global group headquarters in Alphen aan den Rijn, Netherlands. The data record brings together the group products Enablon, TeamMate, StandardFusion and OneSumX; product locations are not equated with the group headquarters. Geography checked on 15.10.2026; no inference about hosting or owners from the registered office. · Enablon; TeamMate; StandardFusion; OneSumX for Compliance Program Management (CPM)Documented focus: Wolters Kluwer offers several product lines for governance, risk, compliance and assurance: Enablon for EHS and operational risks, TeamMate for audit, and OneSumX for Compliance Program Management. Since its acquisition in 2026, StandardFusion has added cloud-based GRC functions to the portfolio. The OneSumX products for Finance, Risk and Regulatory Reporting sold to Regnology are separate from this.AI functions and classification: Enablon EHS Companion supports the handling of incidents and measures. Permit Advisor uses historical permits, checks their completeness and suggests hazards and controls for safe work permits.[116] [117] [118] [119] [120] [121] [122] [115] · Specific AI functions documented
Support with incidents and measures · Review of work permits · Suggestions for hazards and controls
AI evidence: [120] [121] · Documented by the vendor; no product test.
Source check: 2026-10-14
Workiva · To the detailed profile Documented focus: Linked financial and sustainability reports with controls, risk and internal audit.AI functions and classification: Workiva supports the identification of control gaps and the execution of control tests with AI. Agents analyse evidence and draft root-cause-based findings and action plans, the results of which can be reviewed and amended by subject-matter experts.[123] [124] [125] · Specific AI functions documented
Control gap analysis · Control testing · Evidence analysis · Draft measures
AI evidence: [125] · Documented for the Internal Controls Management offering; the product page checked does not show a complete pricing or activation matrix. Human review, exceptions and changes to results remain part of the described process.
Source check: 2026-10-14
YICE / Kouters Van der Meer · Product: YICE GRC · Headquarters: Netherlands [126] · YICE; YICE B.V.; Kouters Van der MeerDocumented focus: YICE links company assets, risks, controls and measures in a GRC platform. For risks, gross and net assessment, owner, treatment and acceptance are recorded. Controls support recurring evidence of execution, self-assessments and reviews by internal audit. Linked control frameworks, time-stamped evidence and audit trails enable control results to be reused for multiple requirements.AI functions and classification: The YICE pages checked describe risk and control management as well as automated calculations. A specific AI work step is not documented there.[127] [126] [128] [129] [130]Not specifically documented in the source check
Feature overview, homepage and vendor news checked via a targeted AI search. Automatic control weighting is not classified as AI.
Sources checked: [127] [129] [130] · No specific available AI support documented in the source check; no product test.
Source check: 2026-10-14
Zavior · Product: Zavior Enterprise GRC · Headquarters: Singapore [131] · Contracting party Zavior Pte Ltd; address 33 Ubi Avenue, #08-13, Vertex, Singapore 408868 according to the terms of use. · Zavior Pte Ltd; Zavior AI MapperDocumented focus: GRC platform for enterprise risk, third parties, policies and audits with a shared pool of controls and evidence. Supports internal standards and multiple external frameworks.AI functions and classification: The AI Mapper maps controls to multiple frameworks and links evidence; AI layers connect the work of different specialist departments in the common control model.[132] [133] [131] · Specific AI functions documented
Map controls across frameworks · Link evidence with controls
AI evidence: [132] [133] · Enterprise offering with a scoping meeting and customer-specific configuration. The scope of the AI agents and enforcement is agreed.
Source check: 2026-10-15
ZenGRCDocumented focus: Compliance, risks, audits and supplier assessments with shared evidence, control mappings and tasks.AI functions and classification: GRACI AI assesses controls on the basis of framework objectives, control texts, test plans and evidence. The results include justifications, findings and suggestions for improvement and must be reviewed before being adopted.[134] [135] [136] [137] · Specific AI functions documented
Assess control design and effectiveness · Analyse evidence against control objectives · Prepare findings and suggestions for improvement
AI evidence: [135] [137] · Opt-in; included according to the product page, without a separate module. Assessments are started on request; planned scheduled runs not counted as available. Not tested in practice.
Source check: 2026-10-14

Sources.

The numbers in square brackets refer to this list. It is numbered consecutively for this page.

  1. SafePaaS: main source checked 14.10.2026
  2. SafePaaS: vendor source, AI evidence checked 14.10.2026
  3. SafePaaS: vendor source checked 14.10.2026
  4. Sahl: vendor source, headquarters evidence checked 14.10.2026
  5. Sahl: main source, AI evidence checked 14.10.2026
  6. Sahl: vendor source checked 14.10.2026
  7. Sahl: vendor source checked 14.10.2026
  8. Sahl: vendor source checked 14.10.2026
  9. SAI360: integrated platform for GRC SAI360 · vendor source, checked 14.10.2026
  10. SAI360: Artificial Intelligence SAI360 · vendor source, AI evidence, checked 14.10.2026
  11. SAI360: vendor source checked 14.10.2026
  12. SAP GRC: headquarters evidence checked 14.10.2026
  13. SAP: GRC and Cybersecurity SAP · vendor source, checked 14.10.2026
  14. SAP: Governance Assistant SAP · vendor source, AI evidence, checked 14.10.2026
  15. SAS: main source, AI evidence checked 14.10.2026
  16. SAS: vendor source, AI evidence checked 14.10.2026
  17. SAVISCON: main source checked 14.10.2026
  18. SAVISCON: vendor source checked 14.10.2026
  19. Schleupen R2C: headquarters evidence checked 14.10.2026
  20. Schleupen: GRC platform and R2C product family Schleupen · vendor source, checked 14.10.2026
  21. Schleupen GRC-Cloud: operating variants Schleupen · vendor source, checked 14.10.2026
  22. Schleupen R2C: vendor source, AI evidence checked 14.10.2026
  23. Sentrient: main source, AI evidence, headquarters evidence checked 15.10.2026
  24. ServiceNow: Integrated Risk Management ServiceNow · vendor source, checked 14.10.2026
  25. AI functions for ServiceNow Integrated Risk Management ServiceNow · vendor documentation · retrieved/checked 13.10.2026
  26. SimpleRisk: vendor source, headquarters evidence checked 14.10.2026
  27. SimpleRisk: main source, AI evidence checked 14.10.2026
  28. SimpleRisk: vendor source, AI evidence checked 14.10.2026
  29. SimpleRisk: vendor source checked 14.10.2026
  30. SimpleRisk: vendor source checked 14.10.2026
  31. Skylen: vendor source, headquarters evidence checked 15.10.2026
  32. Skylen: main source, AI evidence checked 15.10.2026
  33. Skylen: vendor source checked 15.10.2026
  34. Smart Global Governance: vendor source, headquarters evidence checked 14.10.2026
  35. Smart Global Governance: main source checked 14.10.2026
  36. Smart Global Governance: vendor source, AI evidence checked 14.10.2026
  37. Smart Global Governance: vendor source, AI evidence checked 14.10.2026
  38. Snap Compliance: vendor source, headquarters evidence checked 15.10.2026
  39. Snap Compliance: main source, AI evidence checked 15.10.2026
  40. Snap Compliance: vendor source checked 15.10.2026
  41. SoftExpert: Governance, Risk and Compliance SoftExpert · vendor source, checked 14.10.2026
  42. SoftExpert Suite: AI release of 16 June 2026 SoftExpert · vendor source, AI evidence, checked 14.10.2026
  43. Sorena AI: vendor source, headquarters evidence checked 15.10.2026
  44. Sorena AI: main source, AI evidence checked 15.10.2026
  45. Strategix: vendor source, headquarters evidence checked 15.10.2026
  46. Strategix: main source, AI evidence checked 15.10.2026
  47. Strategix: vendor source checked 15.10.2026
  48. Stratsys: headquarters evidence checked 14.10.2026
  49. Stratsys: main source, AI evidence checked 14.10.2026
  50. Stratsys: vendor source checked 14.10.2026
  51. SureCloud: vendor source, headquarters evidence checked 14.10.2026
  52. SureCloud: main source, AI evidence checked 14.10.2026
  53. SwissGRC Platform / GRC Toolbox: headquarters evidence checked 14.10.2026
  54. Swiss GRC: platform, GRC Toolbox and Grace AI Swiss GRC · vendor source, AI evidence, checked 14.10.2026
  55. Symbiant GRC & Audit: headquarters evidence checked 14.10.2026
  56. Symbiant: GRC and audit Symbiant · vendor source, checked 14.10.2026
  57. Symbiant: optional AI assistant Symbiant · vendor source, AI evidence, checked 14.10.2026
  58. TeamGRC: vendor source, AI evidence, headquarters evidence checked 15.10.2026
  59. TeamGRC: main source, AI evidence checked 15.10.2026
  60. TESISQUARE / Compet-e: vendor source, headquarters evidence checked 14.10.2026
  61. TESISQUARE / Compet-e: main source checked 14.10.2026
  62. TESISQUARE / Compet-e: vendor source checked 14.10.2026
  63. TESISQUARE / Compet-e: vendor source checked 14.10.2026
  64. TESISQUARE / Compet-e: vendor source checked 14.10.2026
  65. The Access Group: headquarters evidence checked 14.10.2026
  66. The Access Group: main source checked 14.10.2026
  67. The Access Group: vendor source checked 14.10.2026
  68. The Access Group: vendor source checked 14.10.2026
  69. Tickit Systems: main source checked 14.10.2026
  70. TogetherSecure: vendor source, headquarters evidence checked 14.10.2026
  71. TogetherSecure: main source, AI evidence checked 14.10.2026
  72. TogetherSecure: vendor source, AI evidence checked 14.10.2026
  73. TransVare: main source checked 14.10.2026
  74. TransVare: vendor source, AI evidence checked 14.10.2026
  75. Uno AI: vendor source, AI evidence, headquarters evidence checked 15.10.2026
  76. Uno AI: main source, AI evidence checked 15.10.2026
  77. Uno AI: third-party source checked 15.10.2026
  78. Values Associates: main source, headquarters evidence checked 14.10.2026
  79. Values Associates: vendor source checked 14.10.2026
  80. Values Associates: vendor source, AI evidence checked 14.10.2026
  81. VamiSec (Vami Group): vendor source, headquarters evidence checked 14.10.2026
  82. VamiSec (Vami Group): main source, AI evidence checked 14.10.2026
  83. VamiSec (Vami Group): vendor source checked 14.10.2026
  84. Vantage Technologies: main source checked 14.10.2026
  85. Vantage Technologies: vendor source, AI evidence checked 14.10.2026
  86. VComply: connected compliance, policy and risk processes VComply · vendor source, checked 14.10.2026
  87. VComply PolicyOps: policies and controlled AI assistance VComply · vendor source, AI evidence, checked 14.10.2026
  88. VComply RiskOps: risk management VComply · vendor source, checked 14.10.2026
  89. ViClarity: GRC solution overview ViClarity · vendor source, checked 14.10.2026
  90. ViClarity: Risk Management ViClarity · vendor source, checked 14.10.2026
  91. ViClarity: Reg Monitor ViClarity · vendor source, AI evidence, checked 14.10.2026
  92. ViClarity: merger with PolicyWorks ViClarity · vendor source, checked 14.10.2026
  93. VigiTrust: headquarters evidence checked 14.10.2026
  94. VigiTrust: main source checked 14.10.2026
  95. VigiTrust: vendor source checked 14.10.2026
  96. VigiTrust: vendor source checked 14.10.2026
  97. Volaris (intellior / IMS PREMIUM): vendor source, headquarters evidence checked 14.10.2026
  98. Volaris (intellior / IMS PREMIUM): main source checked 14.10.2026
  99. Volaris (intellior / IMS PREMIUM): vendor source checked 14.10.2026
  100. Volaris (intellior / IMS PREMIUM): vendor source checked 14.10.2026
  101. Volaris (intellior / IMS PREMIUM): vendor source checked 14.10.2026
  102. Volaris (intellior / IMS PREMIUM): vendor source checked 14.10.2026
  103. Volaris (intellior / IMS PREMIUM): vendor source checked 14.10.2026
  104. Wathiq: vendor source, headquarters evidence checked 14.10.2026
  105. Wathiq: main source, AI evidence checked 14.10.2026
  106. Wathiq: vendor source, AI evidence checked 14.10.2026
  107. Wathiq: vendor source checked 14.10.2026
  108. WeKomply – Granite: vendor source, headquarters evidence checked 14.10.2026
  109. WeKomply – Granite: main source checked 14.10.2026
  110. WeKomply – Granite: vendor source, AI evidence checked 14.10.2026
  111. Wizpresso: vendor source, headquarters evidence checked 14.10.2026
  112. Wizpresso: main source, AI evidence checked 14.10.2026
  113. Wizpresso: vendor source checked 14.10.2026
  114. Wizpresso: vendor source checked 14.10.2026
  115. Wolters Kluwer: vendor source, headquarters evidence checked 14.10.2026
  116. Enablon Vision Platform Enablon · vendor source, checked 14.10.2026
  117. Enablon: Environmental, Health & Safety Software Enablon · vendor source, checked 14.10.2026
  118. Wolters Kluwer: vendor source checked 14.10.2026
  119. Wolters Kluwer: vendor source checked 14.10.2026
  120. Wolters Kluwer: vendor source, AI evidence checked 14.10.2026
  121. Wolters Kluwer: vendor source, AI evidence checked 14.10.2026
  122. Wolters Kluwer: vendor source checked 14.10.2026
  123. Workiva Platform: data, reporting, GRC and AI Workiva · vendor source, checked 14.10.2026
  124. Workiva: Audit, Risk and Compliance Teams Workiva · vendor source, checked 14.10.2026
  125. Workiva: vendor source, AI evidence checked 14.10.2026
  126. YICE / Kouters Van der Meer: vendor source, headquarters evidence checked 14.10.2026
  127. YICE / Kouters Van der Meer: main source checked 14.10.2026
  128. YICE / Kouters Van der Meer: vendor source checked 14.10.2026
  129. YICE / Kouters Van der Meer: vendor source checked 14.10.2026
  130. YICE / Kouters Van der Meer: vendor source checked 14.10.2026
  131. Zavior: vendor source, headquarters evidence checked 15.10.2026
  132. Zavior: main source, AI evidence checked 15.10.2026
  133. Zavior: vendor source, AI evidence checked 15.10.2026
  134. ZenGRC: product functions ZenGRC · vendor source, checked 14.10.2026
  135. ZenGRC: AI control assessments ZenGRC · vendor source, AI evidence, checked 14.10.2026
  136. ZenGRC: renaming of RiskOptics ZenGRC · vendor source, checked 14.10.2026
  137. ZenGRC: vendor source, AI evidence checked 14.10.2026
Back to top