Business IT, Compliance & Services
Governance, Risk and Compliance software
Platforms that manage risks, controls, audits and compliance frameworks such as ISO 27001, SOC 2 and NIST.
- Vendors to know
- 10
- Reviews
- 0
- Comparisons
- 0
- Guides and articles
- 0
Governance, Risk and Compliance vendors to know
Established leaders, challengers, newer entrants and the tools practitioners recommend to each other. Being listed is not a ranking or an endorsement, and no vendor paid to appear.
- Established leader
OneTrust GRC & Integrated Risk Management
Platform spanning AI governance, privacy automation, data protection, tech risk and compliance, and third-party risk management.
- Established leader
Archer
Archer Technologies (formerly RSA Archer)
Recognized as an Assurance Leader in the Gartner Magic Quadrant for GRC Tools and a Leader in the Forrester Wave for Third-Party Risk Management Platforms, Q1 2026; used by 38 of the top 50 banks.
- Established leader
Optro (formerly AuditBoard)
AI-powered GRC platform rebranded from AuditBoard in 2026; named a Leader in the Forrester Wave for GRC Platforms Q2 2026 and the Gartner Magic Quadrant for GRC Tools 2025, used by over half the Fortune 500.
- Established leader
Vanta
Agentic Trust Platform automating compliance across 35-plus frameworks; named a Leader in the Forrester Wave for Governance, Risk and Compliance Platforms Q2 2026, with 16,000-plus customers.
- Challenger
LogicGate Risk Cloud
No-code GRC platform with AI agents for workflow orchestration; named a Leader in the Gartner Magic Quadrant for GRC Tools and the Forrester Wave for Third-Party Risk Management Q1 2026.
- Challenger
MetricStream Connected GRC
AI-first connected GRC platform ranked number one in Enterprise GRC by Chartis Research and named a Leader in the IDC MarketScape 2025.
- Challenger
Drata
Agentic Trust Management platform using autonomous AI agents for continuous compliance monitoring and third-party risk, serving 8,500-plus customers with a 4.8/5 G2 rating.
- Community favourite
Secureframe
AI-driven compliance automation platform backed by 30-plus in-house compliance experts, popular with startups pursuing SOC 2, ISO 27001 and HIPAA certification quickly.
- Emerging
Hyperproof
Seattle-based GRC automation platform supporting 160-plus frameworks, a G2 Leader in both enterprise and mid-market segments, used by Reddit, Nutanix and Fortinet.
- Emerging
Sprinto
Autonomous Trust Platform streamlining compliance, risk and GRC operations for fast-growing companies pursuing multi-framework certification.
Reviews for this category are in progress.