What we've shipped & what's next

Connect Okta, Azure AD, and other SAML identity providers for enterprise single sign-on.

Choose where your data is stored to meet regulatory requirements (EU, US, APAC).

Connect Microsoft 365, Google Workspace and AWS to collect compliance evidence automatically.

Identify, score, and prioritize risks with likelihood/impact heat maps, clear ownership, and treatment tracking.

Map critical processes, dependencies, recovery time and point objectives.

Build living BCP playbooks with incident teams, recovery strategies, and vendor contacts — linked to your risks.

Track controls with status, ownership, and evidence across nine frameworks — including AI governance (ISO 42001, NIST AI RMF, EU AI Act).

Quantify risk in financial terms and evaluate the return on security investment for proposed controls.

Get likelihood & impact recommendations with reasoning and key factors, powered by AI.

Describe a scenario, get a complete continuity playbook in seconds.

Ask questions in plain English and get answers grounded in your actual risk and compliance data.

Generate board-ready assessment reports with risk matrices, cost-benefit summaries, and executive overviews.

One-click sample data for Technology, Healthcare, Finance, Manufacturing, Retail, Education, Government, and Energy.

Set granular permissions per teammate per module — Risk, BIA, Continuity, Compliance, and Cost-Benefit.

TOTP-based two-factor authentication, available on every plan including the free Starter tier.

Google sign-in alongside email and password, available on every plan.

Define your own frameworks with fully custom controls for Enterprise workspaces.

Build reusable AI-powered workflows tailored to your organization’s processes.

Customize your workspace with your company’s branding and logo.

Bring existing risk, BIA, continuity and vendor spreadsheets in with a step-by-step wizard — upload, auto-mapped columns, preview, then import hundreds of rows at once.

Four guided steps from a spreadsheet to a branded board report: create the client, import risks, set up a framework, generate the PDF.

Send a client a secure link to upload evidence or confirm an attestation. Approved files attach to the control automatically.

Publish a compliance plan or risk register as a reusable template, and clone templates shared by other practitioners.

Vendor inventory with inherent-risk scoring, due-diligence questionnaires, and concentration-risk analysis.

KRIs with thresholds and breach forecasts, plus incident logging with severity, root cause and linked risks.

Evidence linked to controls, scheduled control-effectiveness tests, and version-controlled policies with acknowledgement tracking.

Add custom tags to any risk and filter or search your register by them for faster slicing across teams, projects, and themes.

See a weighted readiness score for each compliance framework — blending control implementation, evidence coverage, and review timeliness — right on your dashboard.

Formally accept risks with documented sign-off, rationale, and a re-review date so accepted risks never fall off the radar.

A unified monthly calendar of upcoming review dates across compliance plans, continuity plans, tasks, and risk targets — with overdue alerts.

Publish a per-workspace trust page with your own headline and security statements — off until you switch it on.

Programmatic access to your risk, compliance, and continuity data with real-time webhook notifications.