Governance, Risk, and Compliance (GRC) Platforms

Software that brings governance, risk management and compliance activities together: policies and controls, risk registers, audits, regulatory change, incidents and third-party risk, usually with workflows, evidence collection and reporting.

Enterprise GRC and integrated risk suites cover broad risk and audit programs across the business. Compliance automation platforms focus on continuously collecting evidence and monitoring controls for specific frameworks such as SOC 2 or ISO 27001. The categories overlap and vendors are expanding into each other's space.

This page does not summarize it, because the report reprint did not load when checked. Diligent, Optro, LogicGate and Vanta each say in their own announcements that they were named Leaders; treat those as vendor claims and read the report itself for scoring.

Companies are renamed and acquired. For example, auditboard.com redirects to Optro, logicgate.com to logicgate.ai, lockpath.com to NAVEX and tugboatlogic.com to OneTrust, as noted on their entries.

Yes. CISO Assistant has an open-source community edition, eramba offers a free community edition, and NIST OSCAL provides open schemas for machine-readable compliance data. Check licences and support options.

Links were checked in October 2026. Vendor descriptions summarize each vendor's own materials and are not independent evaluations. Products, ownership and names change, so confirm details with the vendor. Sites that block automated checks are kept and may need a manual click.