Vendor Directory
Explore GRC platform and regulatory change management vendors.

Circadian Risk Inc.
Proactive solutions for real-world security challenges
Circadian Risk is an enterprise risk management platform designed for assessing, analyzing, and monitoring physical security risks. It helps organizations meet compliance standards such as OSHA and ISO by identifying vulnerabilities and potential threats, from natural disasters to security breaches. The platform includes modules for risk assessment and management across various scenarios, enabling security professionals to act swiftly and effectively. By analyzing incidents and determining critical functions, Circadian Risk assists organizations in preparing for and recovering from potential threats, ultimately strengthening their security and compliance posture.

easyReg
Navigate Compliance with Confidence and Clarity
easyReg offers e-Reg, a RegTech solution designed to simplify compliance work for users in the Swiss financial regulation sector. With e-Reg's features, stakeholders can efficiently navigate through financial regulations, access collaborative spaces for notes, and utilize contextual links during regulatory searches. The platform helps organizations manage regulatory changes transparently and document critical knowledge. e-Reg supports the integration of internal policies and provides tools for effective regulatory compliance management, making it a valuable resource for financial institutions and consulting firms.

MSBC Group
Transforming compliance through intelligent automation
MSBC specializes in developing AI and automation solutions tailored to various industries, including RegTech for the financial sector. Their platform offers innovative technologies designed to simplify compliance with regulatory requirements. Some of their use cases include intelligent systems for managing customer interactions, data processing for mortgage applications, and real-time analytics for customer sentiment. MSBC's offerings also include AI-driven insights for optimizing business operations while ensuring secure and scalable workflows that adapt to customer needs.

Quantate
Navigating Compliance Challenges with Confidence
Quantate provides software products and advisory services for governance, risk and compliance (GRC) activities throughout New Zealand, Australia, and other regions. Their offerings include a secure platform designed to support operational activities and manage business objectives effectively. Developed using the latest technology, all applications are maintained in-house and supported by a team of skilled professionals. Quantate's expertise in GRC positions them well to assist organizations in navigating compliance challenges.

iON
Securing Your Digital Future, Affordably
iON United Inc. is a Canadian cybersecurity firm specializing in IT, OT, and cloud cybersecurity. They provide tailored governance, risk, and compliance (GRC) services that help organizations establish clear policies, reduce operational risks, and meet regulatory obligations. With partnerships with top cybersecurity brands and platforms like AWS and Azure, iON offers exceptional solutions designed for small and medium-sized businesses, focusing on affordable and comprehensive data security strategies to protect organizations from potential threats.

Risk Crew
Navigating threats with tailored security insights
Risk Crew provides comprehensive information security risk assessments to identify, minimize, and manage threats to business information assets. Utilizing a cost-effective 6-step methodology aligned with industry best practices such as ISO 27001 and GDPR, their security consultants leverage over 30 years of expertise. The service delivers essential insights into a business's risk appetite and includes a detailed report with findings and recommendations. They adhere to established practices and guarantee satisfaction with their services, making them a reliable resource for organizations seeking to enhance their risk management framework.

AnalytiX Boutique
Transforming risk insights into strategic decisions
Analytix Boutique provides smarter risk management solutions tailored for both financial and non-financial institutions. Offering cutting-edge software for operational risk management, credit risk management, and enterprise risk management, their tools support capital modeling, stress testing, and decision-making processes. The platform integrates analytics into comprehensive risk evaluations, facilitating accurate loan pricing and ratings. Their web-based solutions include OpRisk capital modeling and time-series modeling of operational losses, allowing for effective planning and assessment of risks. The emphasis on operational resilience and risk scenario analysis empowers organizations to enhance their risk management frameworks.

AQMetrics
Navigate Compliance with Confidence and Precision
AQMetrics is a regulatory technology provider focused on investment compliance monitoring. The site describes the company as delivering regulatory technology that helps firms navigate compliance and regulatory challenges. Public-facing text highlights "Investment Compliance Monitoring Software" and specifically references MiFID compliance, including "MiFIDII transaction reporting and reconciliation." AQMetrics positions itself as a vendor with award-winning regulatory technology and resources for partners and customers. The content points to product-led regulatory reporting and reconciliation capabilities for firms subject to MiFID rules, and to client case evidence on the site; no detailed product spec or pricing is present in the provided record.

Qwist
Navigate Open Finance with Seamless API Solutions
Qwist is described as an Open Finance RegTech platform positioned for PSD2/PSD3 compliance and API-based financial services. The record lists solutions such as SwitchKit Suite, ndgit Open Banking Suite and nrich Financial Data Suite and calls Qwist "Europe's Top B2B2X Open Finance Platform." The site copy highlights a "Platform for the complete API lifecycle" and the "Secure exposition of Open Finance APIs," and names Account Information Service & Payment Submission Service. Compliance statements include "Reliable compliance with PSD2 and RTS/SCA regulations" and "Reliable compliance with PSD3, PSR & IPR regulations." Marketing copy also references "Efficient and quick transfer of transactions" and "Portfolio transfer in about minutes."

Auxilion
Aligning IT with your compliance goals
Digital Thinking offers tailored IT solutions and services in Ireland, focusing on Governance, Risk Management, and Compliance (GRC). Their strategic GRC implementation helps organizations align their operations with compliance requirements. By enhancing business processes and providing managed IT expertise, they empower clients to achieve their objectives. Digital Thinking is committed to improving and personalizing the user experience through efficient IT services. Their approach ensures that organizations are not only compliant but also optimized for success in a rapidly changing landscape.

e-InnoSec Advisory and Consulting
Navigating Compliance with Precision and Insight
Einnosec provides Governance, Risk & Compliance (GRC) services, focusing on GRC software selection, implementation support for platforms like Archer and ServiceNow, and strategic consulting. Their offerings also include Privacy Management and Data Protection, along with Cybersecurity Protection Services. By assessing clients' GRC needs and integrating relevant solutions, Einnosec aims to enhance organizational compliance posture. Their expertise in managing risk and aligning compliance with business objectives positions them as a critical partner for enterprises navigating complex regulatory landscapes.

ComplianceBridge
Navigate Compliance with Confidence and Precision
ComplianceBridge offers a comprehensive GRC Management Suite designed for governance, risk, and compliance needs. This all-in-one solution automates workflows, tracks risk, and streamlines governance processes. Key features include a robust policy management system, dynamic workflows for incident reporting, and risk assessment tools that facilitate detailed identification of risk levels. Their products support customized solutions tailored to organizational needs, ensuring efficient management of policies and procedures. ComplianceBridge is ideal for smart compliance teams seeking to expedite risk mitigation and achieve audit-ready documentation.

Granite Partners Ltd.
Simplifying Risk Management with Tailored Solutions
Granite offers a unified GRC platform that simplifies risk management and compliance via customizable software tools. Their approach combines risk insights, threats, and opportunities to enhance workflows and reporting. Automated risk management, continuity management, and compliance functionalities are accessible across all organizational levels. Granite's ready-made solutions and custom software suites facilitate operational efficiency, real-time reporting, and effective information sharing. The company's focus on information security and data protection is integral to its operations, ensuring comprehensive service delivery and personnel safety.

FAIR Institute
Quantifying Cyber Risk for Informed Decisions
The FAIR Institute is dedicated to sharing and advancing standards and practices for measuring, monitoring, managing, and mitigating cyber risk. They focus on risk quantification and provide resources around the FAIR (Factor Analysis of Information Risk) framework. The institute aims to enhance the discipline of cyber and operational risk management through education, research, and collaboration, promoting a systematic approach to understand and communicate risk in a business context. They also provide metrics and analytics to improve organizational risk posture.

GLYM-CSIT
Navigating Compliance with Precision and Insight
GLYM-CSIT offers IT-GRC consulting and cybersecurity advisory services with a focus on enhancing risk management and compliance processes. Leveraging a balanced approach, the company provides tailored expert advice and specific guidance to improve IT infrastructure and systems. Their services synchronize governance, risk management, and compliance methodologies to support business objectives. Additionally, they offer comprehensive IT solutions to help organizations remain competitive and secure. The goal is to help businesses identify opportunities for improvement through innovative digital technologies while ensuring best performance across IT initiatives.

NovaSync
Compliance made simple, performance guaranteed
NovaSync is an enterprise NERC CIP GRC platform designed to centrally manage NERC CIP compliance programs. Built by former enterprise ERO staff, NovaSync is described as a modular, on‑premises NERC CIP compliance platform that automates evidence collection, assigns tasks, integrates with enterprise tools, and enables personalized reporting and custom workflows. The product emphasizes organizing key compliance workflows, continuous evidence collection/monitoring, and tooling across the NERC CIP framework (including vendor management and CIP-013 related tracking). NovaSync positions itself as a specialized GRC solution for entities needing to track and streamline NERC CIP compliance tasks and evidence.

ACA Group
Navigating Compliance with Confidence and Precision
ACA Group is the only end-to-end governance, risk, and compliance (GRC) partner for financial institutions, offering scalable compliance, risk, and technology solutions. Their services are designed to empower financial services firms to operate with confidence by combining expert advisory with powerful technology. ACA provides web-based modules for regulatory compliance training, including anti-money laundering (AML) training. Their solutions help firms reduce risk, fuel growth, and ensure clarity in operations, with a focus on meeting GIPS standards for independently verified performance returns.

BCT DIGITAL
Transforming Risk into Strategic Advantage
BCT Digital offers the rt360 risk management product suite, positioned as an AI-based set of solutions for Credit Risk, Model Risk, GRC, and ESG monitoring. The rt360 Model Risk Management (MRM) product is described as helping to manage the lifecycle of models used in a bank. The company presents rt360 as drawing on AI/ML models, data-driven algorithms, and predictive analytics. BCT Digital positions its products for banking and energy verticals and describes the suite as a next-generation risk management offering for large enterprises. The site emphasizes experience in fintech and a focus on risk management product development and deployment.

Govenda
Smart governance, simplified for your board
Govenda is the leading provider of board management software, designed for governance teams including board professionals, administrators, directors, and CEOs. It offers features such as Gabii, the first AI for board governance, and robust security, making board processes more efficient. Govenda streamlines meeting preparation with tools integrated with Microsoft 365 and provides a comprehensive D&O suite. The platform is user-friendly, enhances decision-making, and is committed to customer success. Govenda also offers an interactive buyer's guide to assist teams in selecting the right vendor.

Allvue Systems
Revolutionizing Alternative Investments with AI Precision
Allvue (Allvue Systems) offers AI-powered alternative investment software designed for the full fund lifecycle. The platform automates accounting, investor relations, and portfolios and positions itself for private capital use cases. Product messaging highlights pre- and post-trade investment compliance capabilities, including investment compliance monitoring during hypothetical testing. Allvue targets private equity and venture capital managers, private debt, CLOs, public credit teams, and fund administrators serving private capital. Site copy describes the solution as engineered to meet regulatory standards and promotes AI partnerships and product innovations relevant to alternative investment operations.
