Directory
All 127 GRC and compliance tools
Every funded platform in the category, sorted into 12 groups you can compare. Search by vendor name or by what a tool does, then narrow to the kind of compliance work you actually have. Free to browse, and nobody pays to appear.
Showing 127 of 127 vendors
Enterprise GRC platform
6clicks
GRC Platform
Enterprise GRC platform
AccessOwl
Access Governance / SOC2
Industry-specific
Affil.ai
Marketing Compliance Automation
Compliance training
Affinity (compliance training)
Compliance Training
Financial services compliance
Alloy
AI-powered risk management for identity, KYC, fraud, and compliance at banks and fintechs
Enterprise GRC platform
Anecdotes
Enterprise GRC Platform
Industry-specific
Archon
FedRAMP Compliance Automation
Financial services compliance
Arva AI
AML/KYC Compliance
Tax and e-invoicing
Avalara
Automated sales tax and tax compliance software
Privacy and data governance
BigID
Data security, DSPM, and AI governance discovery-and-classification platform
Privacy and data governance
Borneo
Data Security & Privacy Compliance
Financial services compliance
Bretton AI
Financial Compliance (AML/BSA)
Enterprise GRC platform
Cardamon
RegTech / Compliance Mapping
Third-party risk
Censinet
Healthcare Vendor Risk Management
Third-party risk
Certa
Third-Party Risk & Onboarding Compliance
Supply chain and ESG
Certivo
Supply Chain Compliance Automation
Industry-specific
Cinder
Trust & Safety / AI Safety Compliance
Enterprise GRC platform
CloudSphere
Cloud Governance & Compliance
SOC 2 and ISO 27001 automation
Comp AI (Bubba AI)
Open-Source SOC2 Compliance Automation
Industry-specific
ComplianceQuest
Quality & Compliance Management (EQMS)
Financial services compliance
ComplyAdvantage
AML and KYC compliance automation
Enterprise GRC platform
Complyance
Enterprise GRC Platform
Enterprise GRC platform
ComplyDo
Enterprise Compliance Engine
Enterprise GRC platform
Compuvi (Confinaid)
Preventive Legal & Compliance Risk Intelligence
Enterprise GRC platform
Compyl
Enterprise GRC Platform
SOC 2 and ISO 27001 automation
ControlMap
MSP Compliance-as-a-Service
Questionnaires and trust centers
Conveyor
Security Questionnaire Automation
SOC 2 and ISO 27001 automation
Copla
SOC2 Compliance Automation
SOC 2 and ISO 27001 automation
Cotool
Security Compliance Automation
Industry-specific
CRACI
EU Cyber Resilience Act Compliance
AI governance
Credo AI
AI Governance & Compliance
SOC 2 and ISO 27001 automation
CyberSmart
Cyber Compliance Automation (UK SME)
Privacy and data governance
DataGrail
Privacy Compliance Automation
Privacy and data governance
DataGuard
EU Compliance & Privacy Automation
SOC 2 and ISO 27001 automation
Delve
AI-Native Compliance Automation
Enterprise GRC platform
Denki
Internal Audit / SOX Automation
Industry-specific
dili
Labor Compliance Automation
Healthcare compliance
Disclo
HR/HIPAA Compliance
SOC 2 and ISO 27001 automation
Drata
SOC2/ISO27001 Compliance Automation
Supply chain and ESG
EcoVadis
Universal sustainability ratings and intelligence for supply-chain risk and compliance
Compliance training
Ethena
Compliance Training
AI governance
FairNow
AI Governance & Compliance
Enterprise GRC platform
Flosum
Salesforce SOX/GRC Compliance
AI governance
Galini
AI Guardrails / Compliance
Financial services compliance
Greenboard
Financial Services Compliance
Industry-specific
Haast
AI Compliance/Legal Review Automation
Financial services compliance
Hadrius
RIA/Broker-Dealer Compliance
AI governance
Holistic AI
AI Governance & Compliance
Enterprise GRC platform
Hyperproof
Compliance Operations
Industry-specific
IntelliGRC
Cyber GRC (CMMC/DIB)
Privacy and data governance
Inth
Privacy/Code-Level Compliance
Tax and e-invoicing
Invopop
E-Invoicing Compliance
AI governance
Iridius
AI Regulatory Compliance (Regulated Industries)
SOC 2 and ISO 27001 automation
ISMS.online
ISO27001 Compliance Platform
Enterprise GRC platform
Isora GRC
Security Assessment / GRC
Privacy and data governance
Kertos
Privacy Compliance Automation (EU)
Privacy and data governance
Ketch
Data Privacy & Governance Platform
Healthcare compliance
Ketryx
Regulated Product Compliance (MedTech/Life Sciences)
SOC 2 and ISO 27001 automation
Klaay
SOC2 Compliance Automation (Startups)
AI governance
Klaimee
AI Agent Compliance/Insurance
Compliance training
KnowBe4
Security awareness and human-risk management training platform
Third-party risk
Kollate-it
GRC + Due Diligence
Third-party risk
Lema
Compliance + TPRM
Enterprise GRC platform
LogicGate
Governance, Risk, and Compliance (GRC) software
Enterprise GRC platform
LogicManager
Enterprise Risk Management / GRC
Privacy and data governance
LogosGuard
AI Data Leakage Compliance
Privacy and data governance
Lokker
Privacy Compliance Platform
Industry-specific
Luthor
Marketing Compliance Automation
Healthcare compliance
MedStack
Healthcare Compliance Platform
Compliance training
MedTrainer
Healthcare Compliance & Credentialing
Enterprise GRC platform
Mitratech
Legal, GRC, and HR software
Healthcare compliance
Modicus Prime
GxP/Pharma AI Compliance & Audit Readiness
AI governance
Modulos
AI Governance & Compliance (EU AI Act)
SOC 2 and ISO 27001 automation
Naq
Cyber Compliance Automation (SME)
Industry-specific
Ncontracts
Governance, risk, and compliance management software built exclusively for banks and credit unions
AI governance
Norm AI
AI Regulatory Compliance Agents
Tax and e-invoicing
Numeral
Sales Tax/VAT Compliance
SOC 2 and ISO 27001 automation
Oneleet
Security Compliance Automation
Enterprise GRC platform
OneTrust
Privacy, consent, and AI governance automation platform
Enterprise GRC platform
Onspring
GRC Workflow Automation
Enterprise GRC platform
Optro (formerly AuditBoard)
Enterprise Audit/Risk/Compliance GRC Platform
SOC 2 and ISO 27001 automation
Orbiq
SOC2/ISO27001 Compliance Automation
Privacy and data governance
Osano
Privacy compliance program management
Supply chain and ESG
osapiens
Supply Chain & ESG/Compliance Automation
Third-party risk
Panorays
Third-party cyber risk management platform
Enterprise GRC platform
Pathlock
Application Access Governance / SOX Controls
Compliance training
Praxis Labs
Compliance & Workplace Training
SOC 2 and ISO 27001 automation
Probo
Compliance Automation
AI governance
Qadi
AI Regulatory Compliance Platform (Middle East)
Healthcare compliance
Readily
Healthcare Compliance Automation
Enterprise GRC platform
Regbase
Legal/Compliance SaaS
Enterprise GRC platform
Regcheq
Regulatory Compliance Management
Enterprise GRC platform
RegScale
Cyber GRC Automation
Privacy and data governance
Relyance AI
Privacy & Data Governance
Enterprise GRC platform
Resolver
Risk intelligence platform for compliance, audit, incidents, and threats
Enterprise GRC platform
RiskSmart
GRC / Risk Management Platform (UK)
Healthcare compliance
Ritivel
Regulatory Writing (Life Sciences)
SOC 2 and ISO 27001 automation
Rulebase
AI Compliance Automation
Questionnaires and trust centers
SafeBase
Trust Center / Security Questionnaire Automation
Industry-specific
SafetyKit
Trust & Safety Compliance
SOC 2 and ISO 27001 automation
Scrut Automation
SOC2/ISO27001 Compliance Automation
SOC 2 and ISO 27001 automation
Scytale
SOC2/ISO27001 Compliance Automation
SOC 2 and ISO 27001 automation
Secfix
ISO27001/NIS2/TISAX Compliance (EU SME)
SOC 2 and ISO 27001 automation
Secureframe
SOC2/ISO27001 Compliance Automation
Privacy and data governance
Securiti
Data, privacy, governance, and AI compliance platform
Enterprise GRC platform
Snap Compliance
GRC Platform (LatAm)
Tax and e-invoicing
Sovos
Global tax compliance and e-invoicing software
SOC 2 and ISO 27001 automation
Sprinto
SOC2/ISO27001 Compliance Automation
Enterprise GRC platform
StandardFusion
GRC Platform
Financial services compliance
SteelEye
Financial Compliance Recordkeeping & Surveillance
Privacy and data governance
Strac
SOC2 Compliance + Active Data Security
SOC 2 and ISO 27001 automation
Strike Graph
Security Compliance Automation
Enterprise GRC platform
Tentacle
Cybersecurity Compliance Documentation
SOC 2 and ISO 27001 automation
Thoropass
SOC2/ISO27001 Compliance Automation
Privacy and data governance
Transcend
Privacy & Data Governance
Supply chain and ESG
Trava
Trade/Customs Compliance
SOC 2 and ISO 27001 automation
Trio
AI Compliance Automation
Enterprise GRC platform
TrustCloud
Security Assurance / GRC
AI governance
Trustible
AI Governance & Compliance
Financial services compliance
Unit21
Agentic AI platform for fraud and financial-crime operations
Third-party risk
UpGuard
Cyber risk and attack-surface management across vendor supply chain, attack surface, and workforce
SOC 2 and ISO 27001 automation
Vanta
SOC2/ISO27001 Compliance Automation
Questionnaires and trust centers
Vendict
AI-Led GRC / Security Questionnaire Automation
Questionnaires and trust centers
Whistic
Vendor security assessment and trust-center exchange for third-party risk
SOC 2 and ISO 27001 automation
Xorabyte
SOC2/ISO27001 Compliance Automation
SOC 2 and ISO 27001 automation
Zania
AI Security & Compliance Automation
AI governance
ZeroDrift
AI Model Compliance & Governance