Best Compliance Software - Page 29
View:
-
1
Bold Matrix
Bold Matrix
Bold Matrix is a Vendor Risk Engine that helps individuals, consultants, SMEs, founders, freelancers, and business decision-makers assess vendors before buying, signing, sharing data, or depending on them. The platform supports structured vendor screening for SaaS tools, AI platforms, consultants, suppliers, digital service providers, and business partners. Users receive a 0–100 risk score, Low/Medium/High risk tier, structural risk signals, and a five-pillar vendor risk breakdown covering data access, operational dependency, financial stability, compliance posture, and exit risk. Users can start with a free vendor assessment, unlock a full executive-ready vendor risk report, or subscribe to Pro for recurring assessments and PDF upload with AI-assisted extraction.Starting Price: $29/report -
2
AccessibilityChecker.org
AccessibilityChecker.org
AccessibilityChecker.org is an accessibility testing platform. It scans entire websites against WCAG 2.2, monitors continuously, and supports VPATs, accessibility statements, and expert remediation. The platform tests against WCAG 2.2, ADA, Section 508, EAA, and EN 301 549, evaluating 100+ rules in under a minute with no installation required. Every issue is classified as Legal Risk, User Impact, or Best Practice, giving teams a clear remediation order instead of an undifferentiated violation list. Cross-page pattern detection groups recurring issues by shared component, typically cutting remediation workload by 50–70%. Automated rescans run on flexible schedules with alerts on score drops, and every scan is timestamped and archived for audit evidence. Reports export in PDF, Excel, or white-labeled PDF.Starting Price: $89 -
3
CRBN.Credit
CRBN.Credit
CRBN.Credit is an institutional terminal for the Voluntary Carbon Market. It aggregates real-time price data across traditional registries and on-chain liquidity pools on Polygon and Celo. A unified dashboard bridges EU ETS compliance markets and voluntary offsets, removing the need to track fragmented sources. The platform uses AI-filtered VWAP price feeds across centralized exchanges and decentralized pools to exclude wash trading, ensuring clean data for hedge funds, sustainability desks, and trading bots. Machine learning models generate 2030 price targets, supporting long-term institutional carbon strategy. Credits tokenized on Polygon enable T+0 atomic settlement, eliminating counterparty risk and providing cryptographic proof of retirement to solve double-counting. Direct API feeds integrate into automated trading systems and desk workflows. It also covers the shift from avoidance to removal credits like Biochar and DAC.Starting Price: $0 -
4
SkillProof
OneProof Ltd
SkillProof is training, compliance and development software for UK organisations. It replaces scattered spreadsheets, folders and inboxes with governed native Learning, a live Training Matrix, connected staff records, Document Management, policy governance, the Training Evidence Vault, renewal reminders, professional registrations, CPD, reviews, reports and Audit Packs. Managers can see what is complete, due soon, overdue, missing or waiting for review, while staff can complete Learning, see actions and upload evidence. SkillProof is not an accredited course provider or included marketplace. Customer-supplied SCORM remains controlled, and external training can stay connected to the same workforce record. Plans start at £49 a month for up to 50 staff, with a 14-day free trial and no card required. SkillProof is a product of OneProof Ltd.Starting Price: £49/month -
5
A11yNow
BarrierBreak
A11yNow helps organisations continuously monitor, manage, and improve accessibility across websites and web applications. Key Features: Automated Scanning: Scheduled scans, web crawling, scan comparisons, screenshots, and detailed reports. Issue Tracking & Remediation: Track issues with severity, screenshots, code snippets, remediation guidance, team assignments, and progress updates. Dashboards & Reporting: Live dashboards, accessibility trends, validation tracking, and downloadable reports. Human-in-the-Loop Validation: Expert support, manual testing, issue validation, and testing with native screen reader users. Standards & Governance: Supports WCAG 2.0, 2.1, 2.2, Section 508, EN 301 549, and customised enterprise rulesets. Integrations: Jira, GitHub, and A11yInspect. -
6
trueno
trueno
trueno is an AWS cloud intelligence platform that helps engineering, DevOps, FinOps, and security teams monitor cloud environments using a read-only IAM role. It continuously analyzes AWS accounts for security risks, identity issues, cloud misconfigurations, public exposure, compliance gaps, and unnecessary cloud spending without deploying agents or requiring write permissions. The platform combines security monitoring, cloud cost optimization, compliance visibility, infrastructure inventory, and operational insights into a single dashboard. Teams can prioritize findings, automate reporting, monitor multiple AWS accounts, and gain actionable recommendations to improve security posture while reducing cloud costs.Starting Price: $39/month/user -
7
CookiePal
WestPoint Software Solutions
CookiePal is a cookie compliance tool that helps businesses manage consent and meet privacy requirements such as GDPR, CCPA, and LGPD. It scans websites for cookies and tracking technologies, creates a customisable cookie banner, blocks non-essential cookies until consent is given, and records visitor preferences. CookiePal also supports Google Consent Mode v2 and helps generate a clear cookie policy. The platform is designed for small and growing businesses that need a simple way to manage cookie compliance without complex setup or enterprise-level costs.Starting Price: £2 -
8
Probo
Probo
Probo is an open source compliance management platform that helps organizations achieve and maintain compliance across frameworks including SOC 2, ISO 27001, ISO 27701, ISO 42001, GDPR, HIPAA, CCPA, FERPA, CASA, NIS2, and DORA. It combines expert support with automation so compliance programs can run end-to-end without the overhead of traditional do-it-yourself platforms. Probo’s compliance officers review the organization’s environment, complete risk and vendor assessments, identify gaps, and create a program tailored to how the team operates. It automates evidence collection, updates, and approvals, while experts prepare documents, manage policies, controls, reviews, and assessments, coordinate with auditors, and guide teams through essential calls. After certification, Probo continues monitoring controls, refreshing evidence, maintaining assessments, and keeping the program continuously audit-ready.Starting Price: Free -
9
Rhizome AI
Rhizome AI
Rhizome is an AI regulatory coworker for life sciences teams. General AI assistants are phenomenal, but there are obvious things that should be different about an AI agent helping make >$100m drug or device decisions. Our agents can only state facts pulled from primary source documents. Nothing gets substantiated from agent memory, and we benchmark them on exactly this. No hallucinations reported in 18 months. The databases that actually drive regulatory decisions (Drugs@FDA, guidances, clinicaltrials.gov, standards) aren't in formats computers can search well. A lot of it is image-only PDF. We ingest and process all of it: >75 health authority databases across >12 markets (as of August 2026, and this increases all the time). That's >45 million documents our agents can query exhaustively. A general assistant answers off 5–10 sources. Rhizome frequently looks at hundreds to thousands, because "did we miss a precedent?" is the real question.Starting Price: $0/month/user -
10
CookieFort
CookieFort
CookieFort is a GDPR-aligned Consent Management Platform (CMP) built by web marketers, for web marketers. Designed to balance strict privacy compliance with marketing performance, CookieFort installs in minutes on any CMS via a single script. It features native compatibility with Google Consent Mode v2, allowing businesses to maintain conversion modeling in GA4 and Google Ads while fully respecting user privacy. Featuring customizable banners, automatic cookie scanning, and audit-ready consent logs, CookieFort turns regulatory compliance into a competitive advantage for digital growth.Starting Price: $10/month -
11
SanctionsLookup
SanctionsLookup
SanctionsLookup is a real-time sanctions screening API for fintech companies, payment providers, money services businesses, and marketplaces. SanctionsLookup screens individuals, businesses, vessels, aircraft, and crypto wallets against OFAC, EU, UN, UK, Australian, Canadian, and Swiss sanctions lists during onboarding and payments. SanctionsLookup checks official sources for updates every 15 minutes, and average API response time is ~200 ms. SanctionsLookup's proprietary fuzzy matching identifies name variations, spelling differences, and aliases, reducing false positives. Every result includes a match score and a human-readable explanation. Every API response includes the exact sanctions list version checked, providing screening evidence for audits. Submitted names are not stored. SanctionsLookup pricing starts at $149/month for 5,000 screenings, with all lists included. New accounts get 100 free test screenings (one-time). There are no long-term contracts or mandatory sales caStarting Price: $149/month/5000 screenings -
12
Venvera
Venvera
Venvera is an AI-assisted GRC and compliance automation platform for regulated companies navigating frameworks such as DORA, NIS2, ISO 27001, SOC 2, GDPR, HIPAA, and CMMC 2.0. Cross-framework control mapping lets organisations prove a control once and count it across every active framework. Evidence Autopilot routes collection requests, tracks expiry, and closes controls on approval. Regulatory clocks auto-start DORA, NIS2, and GDPR incident timers on classification. The DORA Register of Information produces xBRL-CSV exports for one-click filing. Third-party risk management covers unlimited vendor questionnaires, sub-outsourcing mapping, and concentration analytics. An AI Virtual CISO delivers regulatory answers grounded in live data using the organisation's own API key. Further capabilities include a risk register, access reviews, policy library, security awareness training, trust center, and tamper-evident audit log.Starting Price: €399/month flat -
13
IntelloSync
IntelloSync
IntelloSync is an AI-native platform for contract lifecycle management, compliance management, vendor management, document management and litigation management, built for enterprises in India, the US and APAC. Legal teams draft from templates and negotiate in real Microsoft Word with tracked changes intact, while the Copilot add-in reviews clauses against your playbook. Approvals route by contract value, and contracts are signed with Aadhaar eSign, DSC, Zoho Sign or DocuSign, with digital e-stamping built in. IntelloComply turns statutes and contracts into a compliance calendar with owners and audit-ready evidence. IntelloVendor handles supplier onboarding and risk, IntelloVault OCRs and indexes every document for search, and IntelloCase manages litigation, hearings and outside counsel. Priced per module with unlimited users. ISO/IEC 27001:2022 certified. -
14
Guardiso
Guardiso
Guardiso is a governance, risk and compliance (GRC) platform built in Europe, covering international frameworks and national law in one place. One control catalogue spans every framework a company is subject to, among them ISO 27001, GDPR, NIS 2, DORA, TISAX, SOC 2, ISO 27701, ISO 22301, ISO 42001 and the EU AI Act. A control satisfied for one standard counts towards the others, so the same work is not repeated for every audit. We use Guardiso ourselves and we are ISO 27001 certified. The company has provided compliance consulting since 2018. The Guardiso platform launched in 2026. Data is stored in the European Union.Starting Price: EUR 199/month -
15
Auditzo
Zestminds Technologies Private Limited
Auditzo is a web platform for automated website privacy and WCAG accessibility scans, with separately scoped human-reviewed audits. Automated scans examine observable cookies, tracking technologies, third-party requests, browser storage, and related technical signals; accessibility scans identify potential WCAG barriers. Paid reports provide findings and evidence for teams investigating site behavior and planning remediation. Manual reviews can assess consent interactions, Global Privacy Control behavior, and selected user journeys, with screenshots, timestamps, network evidence, reproducible findings, and remediation guidance depending on scope. Auditzo is intended for website owners, ecommerce teams, developers, privacy and compliance practitioners, accessibility specialists, and agencies. It supports technical investigation and retesting; it does not provide legal advice, determine violations, or certify compliance.Starting Price: $19 -
16
Clone Systems PCI ASV Scanning
Clone Systems, Inc.
PCI ASV Scanning is a web-based service for merchants and service providers that need quarterly external vulnerability scans for PCI DSS. Users can create targets for IP addresses or domains, run scans immediately or schedule them, review vulnerability findings, and rescan after remediation. The portal provides PCI scan results and an Attestation of Scan Compliance for a passing scan; it also includes an online PCI self-assessment questionnaire to support related compliance work. The service is delivered through a managed scanning portal, with no software to install. Annual packages are sized by the number of external IP addresses or domains, from one asset to larger scopes. Clone Systems performs the scans as a PCI SSC Approved Scanning Vendor.Starting Price: $185 per year -
17
Concord Trust
Concord
Concord Trust is a cloud-based trust center and security questionnaire and RFP response platform for security, compliance, and GRC teams, as well as sales and solutions staff who respond to buyer due diligence. It lets organizations publish security reports, certificates, policies, and FAQs through a branded portal with controlled access, NDAs, version history, and engagement tracking. Teams can import questionnaires and RFP/RFX documents, generate draft answers from approved policies and prior responses, and review and edit answers before sharing. The product also supports policy approvals, control and evidence management, framework mapping, and scoped auditor access. A free plan provides a hosted trust center with usage limits; paid plans add features such as custom domains and questionnaire automation, while Premium adds API access and controls functionality.Starting Price: $199/month -
18
EvidentHarbour
EvidentHarbour
EvidentHarbour is a cloud-based governance, risk and compliance (GRC) platform for SMEs, consultants, managed service providers and organisations managing assurance work. It brings policy management, a risk register, controls, evidence requests, internal audits, corrective actions and reporting into one workspace. Teams can map controls and evidence across frameworks including ISO 27001, ISO 9001, ISO 42001, ISO 20000-1, SOC 2, GDPR, PCI DSS and Cyber Essentials. The platform supports certification preparation, framework maintenance, supplier and customer assurance, security-questionnaire responses, and multi-client management through separate consultant workspaces. It also provides shareable trust profiles and AI-assisted policy drafting, with users reviewing drafts before they are saved. Optional implementation and advisory services are available alongside the software.Starting Price: Free -
19
Vamoz
Vamoz AG
Vamoz is a web-based platform for managing compliance risks associated with employees working across borders, including workations and business trips. It gives employers a workflow for submitting and reviewing employee travel or remote-work requests, assessing country-specific requirements, collecting documents, and tracking cases. Compliance checks cover areas such as immigration, tax, social security, labor law, insurance, and data protection. Teams can apply mobility policies to decisions and manage A1 certificate workflows. The platform is intended for HR, global mobility, travel compliance, and payroll teams responsible for internationally mobile employees. Vamoz also describes API-based workflow integration for connecting mobility processes with an employer’s systems. Organizations can use it to assess planned cross-border work and maintain a record of requests, decisions, and supporting documentation. -
20
Dataspike
Dataspike
Dataspike is a modular identity verification, AML screening, fraud detection, and video security platform for fintech, payments, crypto, iGaming, trading, neobanks, marketplaces, and other businesses that verify users. It supports KYC and KYB checks, OCR for custom documents such as Thai bankbooks, zero-knowledge KYC for Web3, sanctions, PEP and adverse media screening, and crypto wallet checks. Its deepfake and forgery tools analyze photos, video, audio, live calls, and altered or AI-generated documents. Video security features include camera-based face recognition, object detection, video analytics, and personal-data redaction in footage. Organizations can use modules separately or combine them in onboarding and risk workflows. Dataspike's models are developed in-house. Integration options include APIs, SDKs, and white-label delivery, with cloud and on-premises deployment.Starting Price: $0.005/sec -
21
Hoken Pass
Hoken Tech
Hoken Pass is a web-based Digital Product Passport (DPP) platform for manufacturers and brands preparing product information for EU requirements. Teams create and manage passports from category templates for fashion, automotive, batteries, food and electronics, then publish branded public passport pages linked by QR codes. The platform supports drafts, version history, role-based access and section-level privacy. Depending on plan, users can add blockchain notarization and qualified eIDAS timestamps, use GS1 Digital Links, and export passport data in formats including PDF, JSON and XML for EU Registry workflows. Passports can present details such as material origin, environmental impact, durability, repairability and recyclability for customers and business partners. Hoken Pass is aimed particularly at small and midsize organizations that need to share structured product information through customer-facing digital passports.Starting Price: €120/year -
22
AbscheiderCheck
Krüger Compliance UG (haftungsbeschränkt)
AbscheiderCheck is a browser-based SaaS application for documenting the operation and compliance records of grease and light-liquid (oil) separators. It provides asset records and type-specific templates for DIN 4040-100 and DIN 1999-100 workflows, mobile inspection checklists, a calendar for recurring self-checks, maintenance and general-inspection deadlines, and email reminders. Operators can record measurements and findings, attach photos and maintenance or disposal documents, maintain a time-stamped history, and export organized operating-log records as PDF. It is intended for restaurants, commercial kitchens, hotels, automotive workshops, service providers and facility managers responsible for one or more separator systems. An in-browser demo with sample data is available without registration.Starting Price: €29/month -
23
Freistellungsmanager
Krüger Compliance UG (haftungsbeschränkt)
Freistellungsmanager is a browser-based SaaS application for construction companies, contractors, trades businesses, and property managers managing subcontractors and German tax exemption certificates (Freistellungsbescheinigungen under §48b EStG). Users upload certificate PDFs, extract details with OCR, organize records by subcontractor and project, monitor validity dates, and receive automated expiry reminders. The software documents certificate checks for audit workflows. Depending on the plan, it calculates construction withholding tax under §48 EStG, monitors applicable thresholds, and provides an ELSTER §48a XML export and DATEV creditor export. CSV import and export supports data handling. It supports administrative, accounting, and compliance workflows for subcontractor payments and tax documentation in Germany. The service is accessed through a web browser.Starting Price: €29/month -
24
Safety Team
Safety Team Technologies
Safety Team is a cloud-based toolbox talk and workplace safety training platform for small and midsize businesses with field and shift-based teams, including construction, manufacturing, warehousing, transportation, janitorial and food-processing operations. It schedules industry-specific safety talks on a monthly, every-10-days or weekly cadence, sends SMS reminders, and lets employees complete lessons through a web portal or mobile app. Lessons include short safety videos, quizzes and digital sign-offs in English or Spanish. The platform records completion details, timestamps and signatures in a cloud dashboard, with PDF exports for audit records. Managers can follow completion across employees and worksites.Starting Price: $5/employee/month -
25
HaulierScope
Luli Labs Limited
HaulierScope is a web-based operator licence lookup and monitoring service for freight forwarders, shippers, transport and compliance teams checking goods vehicle and bus/coach operators in Great Britain. Search by operator name, licence number or company number to view licence status, type, authorised vehicles and operating centres, with the date of the DVSA source file. It keeps dated source files and compares releases, alongside Companies House status, DVSA Earned Recognition and Traffic Commissioner information. Business users can maintain watchlists, check supplier lists in bulk, receive email alerts when a later file records a change, and export dated evidence. A free JSON API and MCP server provide read-only structured access to operator licence records for code and compatible AI assistants. HaulierScope is an independent service, not the official DVSA register.Starting Price: £19/month -
26
TagIntegrity
TagIntegrity
TagIntegrity is a web-based Google Consent Mode v2 scanner for marketers, agencies, ecommerce businesses, and analytics consultants. Users enter a website address to receive a report checking for Google Tag Manager, Google Analytics 4, Google Ads tags, a consent management platform, and the four Consent Mode v2 signals: ad_storage, analytics_storage, ad_user_data, and ad_personalization. Free scans provide shareable reports; the Pro plan adds PDF downloads and custom Google Tag Manager fix instructions. The scanner helps users review how consent-related tags and signals appear on a site, including sites serving EU and UK visitors. A done-for-you setup service is also available. Basic scans are free and require no account.Starting Price: $0 -
27
Veqrin
Veqrin
Veqrin is an online internal audit management platform for planning programs and managing audits across management-system standards or an organization’s own requirements. Teams distribute criteria across an audit cycle, review coverage, schedule audits in a calendar, and assign or reassign auditors. Personnel and competence records support assignment decisions. Auditors record assessments, evidence and findings, submit completed audits for management approval, and generate PDF reports. The platform tracks nonconformities and corrective actions, including owners, due dates, root causes, completion evidence and closure verification. Dashboards summarize audit progress and outstanding actions. Self-guided onboarding and Ask Eric, the platform’s help assistant, support users with setup and day-to-day questions. Veqrin is intended for internal auditors, audit managers, quality and compliance teams, and organizations coordinating audits across one or more standards.Starting Price: £149/month -
28
Qore Trade Screening
QoreNext
Trade Screening is a cloud-based compliance screening service for organizations assessing customers, suppliers, shipment parties, and other business counterparties. It checks entities against restricted-party and sanctions sources, including OFAC and BIS lists, and combines name screening with ownership and affiliate mapping to surface indirect exposure. The service can also review web and news information against configurable red-flag keywords, classify risk, and prepare a documented report with evidence links and analyst review. Users can submit an individual entity, upload a portfolio for bulk screening, or connect screening to CRM and ERP workflows through supported integrations and REST API. The reports support onboarding, procurement, trade compliance, and ongoing due-diligence decisions.Starting Price: $99/report -
29
Verifykator
GPPL
Verifykator is a web-based business verification and AML/KYB screening service for checking Polish companies by NIP, Poland’s tax identification number. It retrieves company and registration information from sources including KRS, CEIDG, REGON, the VAT White List and EU VIES, and offers a free basic check of selected registry and VAT details. Its paid AMLA report combines 18 data sources covering ownership, sanctions and PEP lists, financial filings, insolvency and regulatory notices, adverse media and other public-record signals. The report assigns a rule-based score across five risk domains, shows the source of findings, and is delivered as a PDF and online view. Teams can use it to support counterparty due diligence, supplier onboarding, AML screening and risk review for Polish entities.Starting Price: PLN 9.99/report -
30
Oxeano
Oxeano
Oxeano is a cloud-based foreign trade operations platform for customs brokers and teams managing imports and exports in Brazil. It combines customer prospecting and CRM, quotations, DUIMP import workflows, DU-E export workflows, product catalogs with NCM classification and Portal Único integration, financial management, and customer collaboration. Its financial tools cover accounts payable and receivable, cash flow, bank reconciliation, and results by process; it also supports NF-e and national NFS-e workflows. AI-assisted tools extract and cross-check information from invoices, packing lists, and bills of lading, and help classify products and organize catalog data for team review. A white-label customer portal provides quotations, process tracking, documents, invoices, and dashboards in Portuguese, Spanish, and English. Oxeano is accessed online and supports Brazilian foreign-trade workflows.Starting Price: BRL 720/month
