GRC-OKSign in

ISO 27001 · GDPR · NIS2 · NIST · SOC 2

Security, privacy, and AI governance, without the spreadsheets

GRC-OK replaces your legacy desktop GRC database with a secure hosted workspace for assets, internal controls, compliance requirements, and risks — mapped to global frameworks such as ISO 27001, GDPR, NIS2, NIST CSF and SOC 2.

Asset register

Know what you protect: information, applications, infrastructure and endpoints.

Internal controls

Owners, frequencies, review dates and effectiveness in one place.

Compliance requirements

ISO 27001, GDPR, NIS2, EU AI Act, NIST CSF, SOC 2 and other global requirements, all in one place.

Risk register

Likelihood, impact, scoring and treatment for every risk.