Detailed provider profiles:
focus areas and questions for the demonstration.
The following profiles examine 31 further offerings in more depth, with different approaches to risk, controls, regulatory change and management. The selection complements the T-NEX Banking Platform explained in the main article with various platform and specialist approaches. It does not represent a ranking; the comparison profiles are sorted alphabetically.
Three questions are at the forefront: What work does the solution connect? What specifically does AI help with? Which transition should become visible in the demonstration? The answers are based on the vendor sources linked in each case. Licence, version, region and configuration determine the actual scope of delivery.
All 682 GRC providers in the market overview · 379 European GRC providers
Publisher: T-NEX GmbH. Andreas Unruh and Christoph Gembruch are managing directors of T-NEX. This editorial market overview is based on vendor sources and specialist primary sources. It contains no ranking and is not based on a joint product test. The market overview covers 682 providers from GRC and adjacent specialist areas. Acquired brands and former product names are not counted separately. Methodology and sources
The 31 profiles.
Cross-functional GRC platforms and suites
360factors Predict360
Predict360 links risk assessment, control work, key figures and actions with compliance testing, regulatory change and audit findings. The specialist modules and optional Ask Kaia agents use a shared data basis.
AI in the workflow. Ask Kaia supports evidenced answers, policy drafts and specialised reviews. Users check the results and retain approvals. Lending Intelligence and Third-Party Intelligence are still announced for Q4 2026 on the page checked. The regulatory content is geared towards the USA.
Subject-matter relevance. An offering close to banking, whose regulatory reach must be assessed separately for German institutions.
Clarify in the demonstration: Which German and European sources and audit requirements are contractually included, and which agents are already available in production?
Risk analysis & internal controls
antares RiMIS
antares RiMIS links qualitative and quantitative risk assessment with simulation, actions and approval status. ICS, ISMS and compliance can be connected modularly. Reporting periods, responsible persons and scenarios remain traceable within the shared risk process.
AI in the workflow. Documented are a help chatbot, context-related suggestions for risk identification, and wording and translation aids.
Subject-matter relevance. Suitable for companies that anchor risk-bearing capacity and periodic reporting methodically. Models, modules and input data must suit the organisation.
Clarify in the demonstration: How is an AI risk alert, after review, carried over into the approved assessment and the overall risk simulation?
Third-party risk
Aravo Intelligence First Platform
Aravo takes third parties from the request through onboarding and due diligence to monitoring, actions and offboarding. Configurable risk domains and workflows draw on shared supplier information. Interfaces add external risk data and enterprise systems.
AI in the workflow. Aravo AI supports queries on programme data, pre-filled assessments and suggested actions. Workflow agents and configurable models are described within the platform.
Subject-matter relevance. Relevant for extensive third-party programmes with multiple risk types. The domains and data sources required by the institution determine the scope.
Clarify in the demonstration: How does a new supplier signal trigger a reassessment and a traceably approved action?
Cross-functional GRC platforms and suites
Archer
Archer links risk registers, controls, compliance and audit trails with configurable workflows. Evolv builds on the existing Archer environment and uses its permissions and data relationships.
AI in the workflow. The Evolv Risk FAQ names Regulatory Intelligence, regulatory change management, AI risks and decision support as in production. Further AI domains are described there as expansion. Source references and handovers to reviewers are part of the approach.
Subject-matter relevance. A profile for organisations with extensive GRC structures or an existing Archer installation that want to process regulatory changes in a more targeted way.
Clarify in the demonstration: Which Evolv functions are available today within the scope offered, and how does the transition from regulatory finding to approved risk assessment remain traceable?
Cross-functional GRC platforms and suites
Bizzdesign Hopex
Hopex links a shared risk register, compliance requirements, gap remediation and cyber resilience with enterprise architecture and portfolio data. Critical functions and dependencies support the assessment of business impacts.
AI in the workflow. Documented are AI-supported application mapping and generative AI/ML in building the repository. The GRC page mentions AI-prepared key figures, but no specific generative control check. The benefit therefore lies initially in linked enterprise and IT data.
Subject-matter relevance. To be considered when GRC is to be linked with architecture, applications, processes and change planning.
Clarify in the demonstration: Which functions are in Hopex itself, which in other Bizzdesign products, and how do risks, controls and dependencies remain consistent?
Regulatory Intelligence
Bloomberg Regology
Bloomberg Regology starts from regulatory sources and their changes. The Smart Law Library and the Regulatory Change Agent support monitoring, subject-matter classification and mapping to risks and controls. The platform addresses multiple industries and jurisdictions.
AI in the workflow. Reggi allows questions in natural language and, according to the vendor, delivers answers with citable references. Research and change agents support the preparation of regulatory information. Source coverage and interpretation still need to be checked in the specific use case.
Subject-matter relevance. For German institutions, this approach is particularly worth considering for cross-border regulatory monitoring. The demonstration must show whether German supervisory publications, circulars and institution-specific obligations are covered to the required depth.
Clarify in the demonstration: How does a specific change to a German supervisory source lead to a traceable impact assessment and to an assigned implementation task?
Data protection & AI governance
caralegal Data Responsibility Platform
caralegal links data protection documentation with risk, audit and service provider processes as well as AI governance. Processing activities and associated risks are recorded in a structured way. The functional overview separates these specialist tasks from the shared platform functions.
AI in the workflow. The assistant converts process descriptions into suggestions for the record of processing activities and supports risks, measures and wording. The documentation names human review and approval. The assistant does not independently detect existing processing operations through a system scan.
Subject-matter relevance. The entry point lies with data protection officers and the specialist departments that supply information. For institutions, the connection to the information network, outsourcing and central risk processing is an important checkpoint.
Clarify in the demonstration: How does a specialist department's description become reviewed RoPA entries, associated risks and approved measures, including a correction of the AI suggestion?
Cross-functional GRC platforms and suites
Corporater
Corporater links governance, performance, risk and compliance in a configurable organisational model. Strategy, key figures, processes, risks and controls are managed as interrelated objects. Individual specialist solutions can be expanded into a more comprehensive GPRC system.
AI in the workflow. The assistant TIVA supports queries, risk capture and workflow actions in natural language. AI works in the organisational context; selected functions require Corporater UnifAI.
Subject-matter relevance. Characteristic is the linking of GRC with strategic objectives and performance management via the same subject-matter structure.
Clarify in the demonstration: How are a strategic objective, the associated risk and a specific action linked to one another, and which configuration and AI licences are required?
Cross-functional GRC platforms and suites
CRISAM GRC
CRISAM links methodical risk management with compliance, information security, ICS, BCM and audit. Multi-compliance mapping links requirements of different regulatory frameworks, while updated Knowledge Packs supply the subject-matter content. Risks, actions and controls feed into shared evaluations.
AI in the workflow. AI Risk Assistance adds suggestions for risks, actions and controls as well as regulatory notes and supplier analyses.
Subject-matter relevance. Of interest to organisations building reusable assessments across multiple standards and GRC disciplines. The Knowledge Packs, assessment methods and AI models used must fit the organisation's own regulatory framework.
Clarify in the demonstration: How is an existing control mapped to multiple requirements, and how is an AI recommendation reviewed by subject-matter experts before being adopted?
Regulatory Intelligence
CUBE RegPlatform
CUBE RegPlatform links regulatory monitoring, applicability assessment, obligations, controls and implementation evidence. RegConnect delivers structured regulatory information into existing systems via a versioned API. Tasks, responsible persons and approvals accompany the change process.
AI in the workflow. Agentic Coworkers highlight relevant developments and draft next work steps with traceable evidence.
Subject-matter relevance. Relevant for institutions with many jurisdictions and ongoing regulatory changes. The specific source coverage and the handovers to existing GRC processes belong in the selection review.
Clarify in the demonstration: How can an amended regulation be traced through to the affected control and the approved implementation evidence?
Vendor sources: [20]
Information security & cyber compliance
Cypago
Cypago starts from the controls in the existing IT landscape. The platform links continuous control monitoring, evidence collection, risk processing and the review of user access. Connected systems supply the data for recurring tests and for preparing audits. Consolidating multiple frameworks and business units is intended to reduce the effort for repeated evidence. The subject-matter starting point remains cyber GRC; banking-specific controlling or project portfolio management are not automatically covered by it.
AI in the workflow. ChatGRC answers questions about policies, controls, risks, findings and evidence with references to underlying documents. The product description also names agentic workflows for evidence collection, control tests and control and risk mapping. What counts for the assessment is which tests and actions work with the systems actually connected and how results are reviewed by subject-matter experts.
Subject-matter relevance. The focus is on ongoing cyber controls and technical evidence in connected IT environments.
Clarify in the demonstration: Which controls are actually checked from connected systems, and which evidence still has to be provided manually?
Cross-functional GRC platforms and suites
Diligent One
Diligent One links GRC applications with the work of the management board, supervisory board and committees. Risk, audit and compliance information can be brought together and prepared as reports or dashboards for management. Data connections supplement this view with existing company information.
AI in the workflow. Diligent AI supports, among other things, the preparation of meeting documents, summaries and follow-up. Further functions address risk management and GRC workflows within the respective applications.
Subject-matter relevance. The profile links operational GRC work with governance and the targeted provision of information to management and supervisory bodies.
Clarify in the demonstration: How does a reviewed risk matter get from the specialist application into the committee documents with appropriate level of detail and with permissions preserved?
Cross-functional GRC platforms and suites
F24 TopEase
TopEase from F24 links GRC with an object-oriented model of processes, assets, risks and controls. The specialist areas offered modularly include ICS, ISMS, BCM, third parties and contract management, among others. The product description names shared data storage as well as REST API and XPDL interfaces.
AI in the workflow. The TopEase pages checked document rule-based workflows and automation. A specific generative AI function is not sufficiently described there. AI information on other F24 products therefore does not automatically apply to TopEase.
Subject-matter relevance. The linking with processes and IT architecture is relevant for institutions with extensive dependency models. F24 names on-premises, cloud and own hosting, among others, as operating variants.
Clarify in the demonstration: How are changes to a critical IT service carried forward to risk, control, contingency plan and the responsible third party?
Compliance programmes & policies
GAN Integrity
GAN Integrity links the day-to-day work of ethics and compliance teams with third-party due diligence and reporting. Disclosures of conflicts of interest and gifts, incidents, policies and training are handled via specialised applications.
AI in the workflow. AI Analytics answers questions on compliance and third-party data in natural language and creates charts and summaries. Dashboards and role-based views are documented.
Subject-matter relevance. The subject-matter starting point is the integrity and compliance programmes of international companies. This is also relevant for institutions, but is not evidence of complete German banking-supervisory GRC coverage.
Clarify in the demonstration: Which data from the compliance programme is available for AI evaluations, and how do permissions and evidence remain traceable in the generated report?
Risk analysis & internal controls
GOAT Risk
GOAT Risk concentrates on collaboration on risks and controls. Responsible persons, actions and deadlines are linked with risk profiles and key figures. A control library and additional control reviews depend on the package booked.
AI in the workflow. No specific generative AI function is documented on the product pages checked. Automatic reminders and reports are classified as workflow automation.
Subject-matter relevance. A focused approach for organisations that want to systematise their risk registers and control work. Banking-supervisory content, permissions and the required reporting depth must be checked on the basis of the specific use case.
Clarify in the demonstration: Which control reviews, reports, roles and profile limits are included in the package offered?
Information security & cyber compliance
HiScout GRC Suite
HiScout brings IT-Grundschutz, information security, data protection and BCM together on a shared data basis. Assets, processes, protection requirements and measures are used across topics. Configurable workflows, client rights and the XML interface DataExchange support decentralised organisations.
AI in the workflow. The product sources checked do not document any specific AI assistance; the automation described is based on configurable workflows.
Subject-matter relevance. Of interest to public authorities, KRITIS operators and complex organisations with their own security methods. Required extension licences and configuration must be determined separately.
Clarify in the demonstration: How does a change to an asset update protection requirements, data protection relevance and contingency planning across multiple clients?
Cross-functional GRC platforms and suites
IBM OpenPages
IBM OpenPages bundles risk, compliance and internal audit in a modular environment. The spectrum includes model risk, third parties, data protection and business continuity. Configurable workflows and open interfaces link GRC work with existing data platforms.
AI in the workflow. Embedded AI supports classification and case creation. watsonx.ai and other models can be connected via APIs; an MCP server supports AI agents' access to GRC objects.
Subject-matter relevance. The profile combines broad GRC coverage with model risk management and the choice between cloud and on-premises operation.
Clarify in the demonstration: Which modules and AI functions are available in your operating variant, and how are model access, permissions and logging set up?
Information security & cyber compliance
Intuitem CISO Assistant
CISO Assistant from Intuitem organises cyber risks, controls and evidence across multiple frameworks. Documented features include risk analyses, treatment steps, audit campaigns and third-party assessments, among others. A community edition and commercial variants offer different operating options.
AI in the workflow. The vendor describes an integrated chat and MCP connection with own models. Tasks named are suggestions for risk assessment, control mapping and gap analysis. For actual operation, model connection, permissions and activated edition must be specified.
Subject-matter relevance. The open product core and the public repository are relevant for security teams with their own integration or operating requirements. Open code, however, replaces neither the subject-matter set-up nor the ongoing maintenance of evidence.
Clarify in the demonstration: Which functions are included in the selected edition, and how does an AI-supported control mapping remain traceable from evidence to human decision?
Information security & cyber compliance
Kertos
Kertos links information security, data protection and AI governance with expert support. The platform offers ISMS, risk and asset management, policy work, supplier management and data protection processes, among other things. The provider aligns its offering with European requirements and the ongoing preparation for audits. For organisations with limited internal compliance resources, the combination of software and expert services is a selection aspect in its own right; the scope and responsibility of both components must be clear in the offer.
AI in the workflow. The AI functions support the completion of compliance documents, suggest policies and work steps and provide context-related recommendations. The AI Management System for governing the organisation's own AI applications must be distinguished from this. It extends the subject-matter scope, but documents neither autonomous subject-matter approvals nor the automatic fulfilment of all regulatory requirements.
Subject-matter relevance. European-oriented organisations building information security and data protection together with external expert support.
Clarify in the demonstration: Which specialist processes are automated, which require expert work, and which modules are included in the offer?
Cross-functional GRC platforms and suites
LogicGate Risk Cloud
Risk Cloud links GRC applications via a configurable graph database and workflows without custom programming. Risks, controls and evidence can be linked; integrations incorporate existing tools and their data.
AI in the workflow. According to the documentation, basic AI functions are included in the subscription. Paid GRC Agents currently support third-party risk, AI governance, enterprise risk and business continuity. Agent results go through a review step.
Subject-matter relevance. The focus is on customisable GRC processes and connected data for teams that want to develop their workflows further themselves.
Clarify in the demonstration: Which steps does an agent take over in the selected module, which does your team review, and what data does the model provider process?
Cross-functional GRC platforms and suites
MetricStream
MetricStream links risk, compliance, internal audit, cyber and third-party risks via a shared data model. Relationships between organisation, processes, rules and controls are mapped centrally. AppStudio and APIs enable customisations and integrations.
AI in the workflow. Domain-specific assistants and agents support document evaluation, evidence capture and risk processing. The provider describes source references, audit trails and human control as well as the option of integrating own models.
Subject-matter relevance. The profile suits broad GRC programmes that link multiple disciplines and organisational areas with shared data and workflows.
Clarify in the demonstration: Which assistants are enabled for your modules, and how do data permissions, corrections and approvals work across the specialist departments?
Data protection & AI governance
OneTrust
OneTrust links data protection, data use, AI governance, technology risks and third parties on a shared data model. The focus is on relationships between data, models, suppliers and systems as well as shared access rules.
AI in the workflow. Documented are AI-supported data discovery and classification as well as assisted assessments and workflow automation. These AI functions must be distinguished from the governance of the AI systems used in the company.
Subject-matter relevance. Relevant for organisations that want to bring together data protection, AI and technology risks. For a selection, the required solutions and integrations need to be delimited more precisely.
Clarify in the demonstration: How does a change in data use flow into risk analysis, approval, technical control and ongoing monitoring?
Vendor sources: [46]
Cross-functional GRC platforms and suites
Optro (formerly AuditBoard)
Optro connects internal audit, controls, enterprise risk, information security and compliance. Shared reports, APIs and analyses support collaboration between audit and risk teams. Its scope therefore extends well beyond the collection of security evidence.
AI in the workflow. Optro AI supports control mappings, the assessment of regulatory changes, supplier questionnaires and risk-based audit planning. Configurable oversight and logged actions are part of the platform as described.
Subject-matter relevance. One focus is on audit and control organisations that handle risks across several functions. The connection to operational bank management needs to be checked for the specific scope.
Clarify in the demonstration: How is an audit finding tracked through to the action, control adjustment and re-audit?
Resilience & BCM
Premier Continuum ParaSolution
ParaSolution connects BIA, risk assessment, plan creation, activation and exercises. Supplementary modules support crisis communication, IT recovery and supplier risks. System dependencies, tests and recovery status can be considered together.
AI in the workflow. Automated threat monitoring evaluates external cyber, climate and geopolitical risk signals and prioritises their relevance for operations.
Subject-matter relevance. Suitable for BCM and resilience programmes involving several teams. During implementation, the module scope, communication integrations and your own escalation thresholds need to be specifically defined.
Clarify in the demonstration: How is an external threat notification assigned to a critical process and transferred into an approved response procedure?
Vendor sources: [49]
Cross-functional GRC platforms and suites
Protecht ERM
Protecht connects risk registers, controls and compliance with incidents, resilience and reports. Forms, assessment scales and notifications can be configured. Prepared registers and dashboards support getting started; the data relationships serve the overarching risk view.
AI in the workflow. Cognita guides users through forms, supports the handling of incidents and summarises reports. Results remain reviewable and editable. Agentic workflows for supplier risk and BCM as well as further regulatory tasks are on the published roadmap and are not counted here as an already available standard function.
Subject-matter relevance. The starting point is enterprise-wide risk management. For institutions, the connection between decentralised recording, control work and communication with management is particularly relevant.
Clarify in the demonstration: Which Cognita functions are enabled in the version offered, and how does an incident become reviewed actions and traceable reports?
Cross-functional GRC platforms and suites
Riskonnect
Riskonnect connects GRC with insurable risks, claims management and resilience. The GRC offering includes, among other things, enterprise risks, controls, compliance, internal audit and project risks. Shared data make relationships between risks, owners and evidence visible.
AI in the workflow. Intelligent Risk describes risk suggestions, control recommendations and agents for regulatory mapping and audit coordination. The AI works in the context of the platform data; functions are deployed per area of application.
Subject-matter relevance. The profile is particularly broad if a company wants to bring together both GRC and claims and insurance risks.
Clarify in the demonstration: Which data and workflows do the selected products share, and how does your team take AI-generated mappings into binding processing?
Cross-functional GRC platforms and suites
SAP GRC
SAP GRC comprises several interconnected solutions for risks, controls, authorisations, screening and security. The link to SAP business processes and S/4HANA shapes the offering. Which applications are used depends on the desired control and operating model.
AI in the workflow. The Governance Assistant describes support for control monitoring, evidence analysis and risk handling with human review. Specialised agents address individual tasks; their specific availability needs to be checked in the product offering.
Subject-matter relevance. The focus is on embedding GRC in operational applications, access rules and transaction-level controls.
Clarify in the demonstration: Which SAP GRC products and additional licences do your processes require, and which agents are available in the intended operating variant?
Cross-functional GRC platforms and suites
ServiceNow Integrated Risk Management
ServiceNow IRM links risk and compliance with IT, cybersecurity and operational processes. Controls, evidence and actions are integrated into shared workflows; existing ServiceNow processes provide an obvious point of connection.
AI in the workflow. ServiceNow Otto for IRM supports case summaries, risk alerts and control reviews. Agents can perform further tasks. The documentation restricts availability by licence, region and operating environment.
Subject-matter relevance. The connection with a ServiceNow platform already in use shapes this profile, particularly for cross-departmental case handling and technology risk management.
Clarify in the demonstration: Which IRM and AI functions can be used in your offering and your operating environment, and which adjacent products need to be added?
Third-party risk
UpGuard Vendor Risk
UpGuard Vendor Risk combines external security information with documents, questionnaires and the handling of supplier risks. Missing evidence can be specifically requested. Ongoing monitoring complements the point-in-time assessment of a third party.
AI in the workflow. The AI maps uploaded evidence to control questions and, building on this, creates questionnaires for remaining gaps as well as assessment reports. Analysts can comment on or correct results; references to evidence and the review history support traceability.
Subject-matter relevance. The focus is the cyber risk view of suppliers. Institutions need to clarify how these results are brought together with outsourcing management, contract data and their own GRC system.
Clarify in the demonstration: How is contradictory security evidence identified, corrected on a subject-matter basis and documented through to the renewed supplier assessment?
Cross-functional GRC platforms and suites
Workiva
Workiva combines financial reporting, sustainability and GRC on a shared platform. Data points and texts remain linked to their sources; changes can be carried through to connected documents. Risk, audit and control information complements the reporting work.
AI in the workflow. The platform describes agents for data preparation and report drafts as well as support for GRC tasks. AI access inherits existing permissions; human review and traceable data provenance accompany the work.
Subject-matter relevance. A defining feature is the connection between controlled data collection, collaboration and the consistent publication of financial and non-financial information.
Clarify in the demonstration: How is a changed key figure traced through its source, control review and approval into all affected reports?
Sources.
The numbers in square brackets refer to this list. It is numbered consecutively for this page.
- 360factors: Predict360 platform 360factors · vendor source, checked 14.10.2026
- 360factors: Ask Kaia, available scope and roadmap 360factors · vendor source, AI evidence, checked 14.10.2026
- antares RiMIS: risk management software and AI functions antares · vendor source, AI evidence, checked 14.10.2026
- antares Informations-Systeme: company antares · vendor source, checked 14.10.2026
- Aravo: Intelligence First Platform Aravo · vendor source, checked 14.10.2026
- Aravo: Artificial Intelligence for TPRM Aravo · vendor source, AI evidence, checked 14.10.2026
- Archer: platform and Evolv Archer · vendor source, checked 14.10.2026
- Archer Evolv Risk: scope and availability Archer · vendor source, AI evidence, checked 14.10.2026
- Bizzdesign: GRC functions Bizzdesign Hopex · vendor source, checked 14.10.2026
- Bizzdesign Hopex: platform and AI Bizzdesign Hopex · vendor source, checked 14.10.2026
- Bizzdesign: MEGA and Alfabet acquisitions Bizzdesign Hopex · vendor source, checked 14.10.2026
- Bloomberg Regology: platform and corporate affiliation Bloomberg Regology · vendor source, checked 14.10.2026
- Bloomberg Regology: Regulatory Change Agent Bloomberg Regology · vendor source, AI evidence, checked 14.10.2026
- caralegal: overview of functions caralegal · vendor source, checked 14.10.2026
- caralegal: AI assistant for data protection documentation caralegal · vendor source, AI evidence, checked 14.10.2026
- Corporater: Business Management Platform Corporater · vendor source, checked 14.10.2026
- Corporater AI Corporater · vendor description · retrieved/checked 13.10.2026
- CRISAM: risk management and integrated GRC platform CRISAM · vendor source, checked 14.10.2026
- CRISAM AI Risk Assistance CRISAM · vendor source, AI evidence, checked 14.10.2026
- CUBE RegPlatform CUBE · vendor source, AI evidence, checked 14.10.2026
- Cypago: cyber GRC and control monitoring Cypago · vendor source, checked 14.10.2026
- Cypago ChatGRC: queries with document references Cypago · vendor source, AI evidence, checked 14.10.2026
- Diligent One Platform Diligent · vendor source, checked 14.10.2026
- Diligent AI Diligent · vendor source, AI evidence, checked 14.10.2026
- F24 TopEase: GRC platform and operating models F24 TopEase · vendor source, checked 14.10.2026
- TopEase: modules, shared database and interfaces F24 TopEase · vendor source, checked 14.10.2026
- GAN Integrity: product overview GAN Integrity · vendor source, checked 14.10.2026
- GAN Integrity: AI Analytics and Dashboards GAN Integrity · vendor source, AI evidence, checked 14.10.2026
- GOAT Risk: functions and packages GOAT Risk · vendor source, checked 14.10.2026
- GOAT Risk: FAQ GOAT Risk · vendor source, checked 14.10.2026
- HiScout: platform technology and shared database HiScout · vendor source, checked 14.10.2026
- About HiScout: company and target groups HiScout · vendor source, checked 14.10.2026
- IBM OpenPages IBM · vendor description · retrieved/checked 13.10.2026
- IBM OpenPages: Model Risk Governance IBM · vendor source, checked 14.10.2026
- Intuitem: CISO Assistant and AI functions Intuitem · vendor source, checked 14.10.2026
- CISO Assistant: official community repository Intuitem · vendor source, checked 14.10.2026
- Kertos: platform for continuous compliance Kertos · vendor source, checked 14.10.2026
- Kertos: AI functions within the platform Kertos · vendor source, AI evidence, checked 14.10.2026
- Kertos: AI Management System Kertos · vendor source, checked 14.10.2026
- LogicGate: Risk Cloud Platform LogicGate · vendor source, checked 14.10.2026
- LogicGate: GRC Agents FAQ, updated 1 September 2026 LogicGate · vendor source, AI evidence, checked 14.10.2026
- MetricStream: platform and shared data model MetricStream · vendor source, checked 14.10.2026
- MetricStream AI for GRC MetricStream · vendor description · retrieved/checked 13.10.2026
- OneTrust: AI-Ready Governance Platform OneTrust · vendor source, AI evidence, checked 14.10.2026
- Optro: Modern GRC Intelligence Platform Optro · vendor source, checked 14.10.2026
- Optro AI: AI for GRC Optro · vendor source, AI evidence, checked 14.10.2026
- ParaSolution Business Continuity Management Software Premier Continuum · vendor source, AI evidence, checked 14.10.2026
- Protecht: GRC platform Protecht · vendor source, checked 14.10.2026
- Protecht Cognita: available functions and roadmap Protecht · vendor source, AI evidence, checked 14.10.2026
- Protecht: acquisition of VISO TRUST Protecht · vendor source, checked 14.10.2026
- Riskonnect: GRC Software Riskonnect · vendor source, checked 14.10.2026
- Riskonnect: Intelligent Risk Riskonnect · vendor source, AI evidence, checked 14.10.2026
- SAP: GRC and Cybersecurity SAP · vendor source, checked 14.10.2026
- SAP: Governance Assistant SAP · vendor source, AI evidence, checked 14.10.2026
- ServiceNow: Integrated Risk Management ServiceNow · vendor source, checked 14.10.2026
- AI functions for ServiceNow Integrated Risk Management ServiceNow · vendor documentation · retrieved/checked 13.10.2026
- UpGuard: Vendor Risk UpGuard · vendor source, checked 14.10.2026
- UpGuard: AI in third-party risk management UpGuard · vendor source, AI evidence, checked 14.10.2026
- Workiva Platform: data, reporting, GRC and AI Workiva · vendor source, checked 14.10.2026
- Workiva: Audit, Risk and Compliance Teams Workiva · vendor source, checked 14.10.2026