Platform Features

Module 01

Risk Management

Maintain a living risk register that captures every risk across the enterprise. Set appetite thresholds, assign owners, and track treatment plans to closure.

Quantitative and qualitative risk scoring with custom weightings
Heat map visualisation by likelihood and impact
Automated escalation when risk exceeds appetite
Linked controls and mitigation actions with due-date tracking
Risk trend analysis and trajectory forecasting

Module 02

Compliance & Frameworks

Map your controls to 100+ regulatory frameworks automatically. Track compliance posture, gather evidence, and close gaps — no spreadsheets required.

ISO 27001, SOC 2, NIST CSF, GDPR, HIPAA, PCI-DSS, and 95+ more
Cross-framework control mapping to reduce duplication
Evidence collection with version-controlled document store
Automated compliance score with drill-down detail
Gap analysis with one-click remediation roadmap export

Module 03

Vendor Risk Management

Onboard, assess, and continuously monitor every third-party vendor. Tier classification, questionnaire automation, and risk scoring built in.

Tiered vendor classification (critical, high, medium, low)
Automated questionnaire dispatch and response tracking
Dynamic risk scoring based on questionnaire responses and external signals
Contract and SLA management with renewal alerts
One-click vendor risk report for stakeholder review

Module 04

Policy Management

Author, distribute, and track acknowledgement of every policy in the business — all linked to your controls and risk register.

Author and version-control policies in-platform
Targeted distribution by role or business unit
Acknowledgement tracking with automated reminders
Linked to controls and risk register

Module 05

Incident Management

Capture, triage, and resolve incidents with a structured workflow that automatically feeds findings back into your risk register.

Structured intake form with auto-classification
Triage, severity scoring, and ownership assignment
Root cause capture and corrective action tracking
Automatic risk register update on incident closure

Module 06

Audit Management

Plan and execute internal and external audits with automated evidence requests, finding management, and one-click audit-ready reporting.

Audit planning with scope, timeline, and team assignment
Automated evidence request workflows
Finding management with management response tracking
Audit-ready report generation in one click