Compare the Top GRC Software in China as of February 2026 - Page 4

GRC China Clear Filters
  • 1
    otris compliance

    otris compliance

    otri software

    Structure and overview are basic requirements for the implementation of a legally compliant compliance organization. Communicating the growing number of procedures and guidelines, monitoring compliance, detecting violations and organizing appropriate measures quickly becomes a complex undertaking in medium-sized and large companies. otris compliance helps you to manage your company-wide compliance organization. Extensive document control functions enable you to manage the creation, release and distribution of all guidelines in a targeted and company-wide manner. Employees thus receive exactly the documents that are relevant to them. This is a fundamental prerequisite for policy-compliant work and thus for the prevention of violations. Ease of use through a software interface that has been thought through down to the last detail is a top priority in all otris developments. With little effort, the user learns how to work quickly and efficiently with otris compliance.
  • 2
    DocTract

    DocTract

    DocTract

    DocTract revolutionizes how organizations leverage key documents through a dedicated cloud solution with advanced collaboration capabilities . Policy Management, Procedure Management and Contract Management transform into true value added processes that directly enable organizations to collaborate, deploy and secure key documents . DocTract understands the special requirements needed to process Policies, Procedures, SOPs and Contracts. Built-in capabilities assist throughout the process from collaborating on revisions to approval levels and electronic signatures.
  • 3
    Digital Agent
    Veriday Inc. is committed to helping our clients create engaging digital experiences for their users through the effective use of emerging technology. Digital transformation is critical for every kind of business. To make this a reality, we work alongside you through each phase of the journey. Through our collaboration and research, we identify opportunities in emerging technologies and processes like Digital Experience Platforms, Micro Services & Kubernetes, Machine Learning (AI), Design Thinking, Internet of Things (IoT), and Cloud Platforms to help improve your business efficiency and maximize your investment. Rethink how you enable a seamless experience for employees without any limitations. Put employees first with our digital workspace solutions that delivers secure and enhanced experiences while reducing costs and operational overhead.
  • 4
    Soterion

    Soterion

    Soterion

    A powerful, size-sensible GRC application for companies that require on-premise solutions. Ideal for smaller companies that have internal GRC resources. Reasons to believe. A complete On-Premise GRC solution that's a pleasure to use. Powerful, Size-Sensible Features. All the GRC features your business actually needs without complex, unnecessary functionality. Risk-rule-set@2x Intuitive and Easy to Use. We've completely re-imagined the GRC user experience from the ground up, making Soterion a pleasure to use. Our business-friendly reporting tools allow focused reports by business area. audit-surprise@2x. Insights as You Need Them. Avoid external audit surprises by viewing easy-to-understand access risk reports as and when you need to. Pay-as-you-go@2x Cost-Effective GRC Alternative. Get excellent value on all the on-premise GRC functionality your business actually needs, without paying a premium for enterprise features typically only required by the largest global companies
  • 5
    Modulo Risk Manager

    Modulo Risk Manager

    Modulo Security Solutions

    Solution for automation of Governance, Risks and Compliance. GRC - Governance, Risks and Compliance is already a reality in organizations. Its adoption, however, implies the development and maintenance of a framework that enables integration and collaboration between areas, avoiding silos and ensuring greater transparency and consistency in corporate processes. The Risk Manager Module Software implements an effective process for automating and integrating Governance, Risk and Compliance processes, eliminating silos and reducing costs. Based on the GRC Metaframework, a proprietary methodology developed based on international norms and standards for risk management (Risk Management) and Information Security, fully aligned with ISO 31000, the Risk Manager Module allows the measurement and control of risks, compliance with standards and regulations required for your business and IT governance.
  • 6
    Compliance Manager GRC

    Compliance Manager GRC

    RapidFire Tools, a Kaseya Company

    Compliance Manager GRC is the first and only purpose-built, role-based Compliance Process Automation platform. It combines a wizard-driven workflow engine, automated network and computer data discovery, a web-based management portal, and built-in compliance document generation and archiving. Almost every client you serve is subject to at least one set of security or privacy rules… and sometimes more. For most organizations, compliance with these rules is tedious, confusing, and downright frustrating. This presents a huge opportunity for MSPs to step in and offer to manage the compliance process. Your clients will breathe a huge sigh of relief, and you will boost your recurring revenue with a profitable add-on service. There are many check-list products on the market that provide you with a laundry list of tasks you must perform, and information you need to gather, process, analyze, and validate to be compliant with a number of regulations and laws.
  • 7
    Drata

    Drata

    Drata

    Drata is the world’s most advanced security and compliance automation platform with the mission to help companies earn and keep the trust of their users, customers, partners, and prospects. Drata helps hundreds of companies streamline their SOC 2 compliance through continuous, automated control monitoring and evidence collection, resulting in lower costs and less time spent preparing for annual audits. The company is backed by Cowboy Ventures, Leaders Fund, SV Angel, and many key industry leaders. Drata is based in San Diego, CA.
    Starting Price: $10,000/year
  • 8
    Vault Platform

    Vault Platform

    Vault Platform

    Designed to support a culture of trust and safety, Vault is revolutionising the way that misconduct is reported and resolved. Using advanced technology, Vault overcomes the main challenges companies face when trying have a meaningful impact on unacceptable behaviour in the workplace empowering individuals to speak up and report the misconduct and providing organisations with the tools internally to resolve the issues, before they have a chance to spread. The most advanced incident reporting tool you can give your workforce. The Vault App is a trusted and highly accessible way of capturing all relevant details of an incident, creating a frictionless experience encouraging people to come forward internally. A web-based interface that extends the reach of the Vault speak up platform to your entire business ecosystem including customers, supply chain partners, and members of the public.
  • 9
    ShieldRisk

    ShieldRisk

    ShieldRisk AI

    ShieldRisk is an Artificial Intelligent powered platform for third-party vendor risk assessment with speed and accuracy. The platform is a single, unified platform, executing vendor audits on global security & regulatory framework including GDPR, ISO 27001, NIST, HIPAA, COPPA, CCPA, SOC 1, SOC 2. ShieldRisk AI enables the analysis of auditing and advisory functions, involving time savings, faster data analysis, increased levels of accuracy, more in-depth insight into vendor security posture. ShieldRisk, in consistence with global compliance standards, helps the organizations transform cybersecurity programs to enable and provide risk free digital business strategies. We help organizations measure their vendors’ digital resilience, maximize recoveries, and lower their total cost of risk, while providing cybersecurity build-or-buy decisions. Our family of single and dual view platforms are easy to use and provide the clearest, most accurate screening and security analysis.
  • 10
    ACA ComplianceAlpha
    Build a scalable and resilient compliance program with ComplianceAlpha, our regulatory technology software platform supported by managed services. Achieve better outcomes and economies of scale with integrated technology and managed services. A comprehensive compliance program is critical not just to protecting your business – but to growing your business. See how ComplianceAlpha is helping over 800 leading financial services firms around the world build better GRC programs. Build a more resilient and comprehensive compliance program. ComplianceAlpha integrates risk and compliance activities, surveillance and monitoring, testing, and analytics in one platform to provide you with a unified view of risks and behavior across your firm. We pool our collective expertise across regulatory compliance, cybersecurity, performance, ESG, and technology to design, develop, and deliver valuable and timely solutions to your most pressing challenges.
  • 11
    PwC Enterprise Insights
    PwC Enterprise Insights uses powerful automation and analytics to identify risk, errors, issues, and opportunities across multiple platforms. Enterprise Insights helps you identify the blind spots and shed light on the risks within your enterprise system so you can quickly take action early in the process. Eliminate the need for manual monitoring and testing of controls (configurations, security, transactional) with increased precision and reduced costs. Powerful, multi-ERP analytics that identify trends, errors, control failures, and issues early in the process, saving you time and money. Creates accountability by linking analytic outputs to a workflow and routes to appropriate personnel for action. Powerful automation creating a single source of truth for managing business processes and compliance documentation, analytic and manual assessment outputs, and issue management resolution.
  • 12
    Caveonix

    Caveonix

    Caveonix

    Traditional enterprise security and compliance solutions tend to be unscalable within hybrid and multi-cloud environments. As other “cloud-native” solutions frequently leave existing data centers behind, it can be difficult for teams to secure their enterprise’s hybrid computing operating environments. From infrastructure and services to applications and workloads, your teams can confidently protect all your cloud environments. Created by industry veterans that know digital risk and compliance inside and out, Caveonix RiskForesight is a platform trusted by our customers and partners that provides proactive workload protection. Detect, Predict and Act on threats that occur in your technology stack and hybrid cloud environments. Automate your digital risk and compliance processes, and proactively protect your hybrid and multi-cloud environments. Implement cloud security posture management and cloud workload protection, as defined by Gartner's standards.
  • 13
    RUBiQ

    RUBiQ

    RUBiQ

    RUBIQ is a cloud-based platform utilizing the latest technologies to deliver a truly unique, comprehensive and dynamic Governance, Risk and Compliance (“GRC”) management system for any size organization, anywhere in the world. RUBIQ is quickly implemented, efficient to use, and affordable to organizations of all sizes. Easy establishment of customer maturity against standards, regulations and best practice. Benchmark against peers in sector or country (coming soon). Quicker to implement, resource light and more affordable than the competition (i.e. High Return on Investment). Combined gap assessments, intuitive workflows, on-demand advisory, policy and risk libraries and high configurability results in an easy to use and friendly platform. Connect with subject matter experts in an instant. Identify probable cause of incidents and the risks they relate to. Determine the probability of achieving objectives. Constantly evolving AI does the hard work.
  • 14
    ibi systems iris

    ibi systems iris

    ibi systems

    Our services and products lie on the one hand in the individually configured provision of the ISMS and GRC software “ibi systems iris” and on the other hand in the associated professional consulting services. These range from needs analysis to implementation support and training to complete process optimization (e.g. your ICS) or the establishment of an appropriate and certifiable management system (e.g. ISMS according to ISO 27001, sustainability management according to ISO 26000). The intuitive user interface makes it easy to get started with ibi systems iris. All areas of the software follow an analogue structure. This allows the user a quick orientation in the tool, even in the for him unknown areas. The user acceptance is very high right from the start and does not represent a hurdle to the software introduction. In ibi systems iris, a large number of different data records can be created and mapped to each other (assets, processes, assessments, risks, findings, etc.).
  • 15
    AlphaBricks Total Compliance
    Total compliance services by Alphabricks allows you to manage all your compliances needs in one place. Total compliance, a SaaS based application for tracking and monitoring all kinds of compliance, is fully configurable for any country and has features like tracking, reviews (Maker-Checker), escalations, notifications & alerts, document upload, access control, checklists, document management, etc., with a complete dashboard to monitor compliance across your organization. AlphaBricks provides services for developing SaaS based applications and specializes in applications for XBRL, financial & non-financial reporting and GST. Special services are provided to connect ERP's to GSTN (GST Network) for filing of returns and reconciliation. Effective compliance management is the driving force behind the reliable, truthful and accurate governance and monitoring of the organization as a whole.
  • 16
    ServiceNow Integrated Risk Management
    ServiceNow Integrated Risk Management allows you to manage risk and compliance enterprise-wide through change and disruption created by evolving global regulations including privacy and ESG, human error, cyberattacks, digital transformation, and more. By seamlessly embedding risk management and compliance into your daily workflows and familiar user experiences you can enable a common language to improve risk-informed decisions, reduce costs, gain real-time visibility into risk, and effectively communicate with stakeholders at all levels. Only ServiceNow can connect the business, security, and IT with an integrated risk framework that transforms manual, siloed, and unfamiliar processes into a user-friendly, unified program built on a single platform.
  • 17
    PwC Risk Detect
    You could be more agile, more adept at identifying opportunities and better able to anticipate change. All powerful drivers of competitive advantage and growth. Risk Command is a suite of PwC Products that identify and monitor potential threats, helping you respond and remediate with speed and confidence. Identify potential high-risk third parties and movements before they impact your business. Address regulatory requirements and save your business from potential financial or reputational damage. Incorporate Integrity Due Diligence, providing the ability to request due diligence reports and conduct focused risk-based monitoring. Bring your data and operations to a single view, helping you capitalize on areas of convergence across compliance and fraud programs and aligning operational data with corporate strategies.
  • 18
    1Exiger

    1Exiger

    Exiger

    Exiger's 1Exiger platform is a purpose-built, AI-powered solution designed to optimize third-party and supply chain risk management. With features like entity risk scoring, supply chain mapping, and deep risk analysis, it helps organizations uncover vulnerabilities, validate data, and make faster, data-driven decisions. Leveraging the world’s largest corporate and supply chain dataset, the platform empowers businesses to stay compliant and resilient in real-time, improving supply chain visibility and enabling proactive intelligence to address crises before they escalate.
  • 19
    La Meer GRACE
    Work from Home (WFH) has become the new reality with the COVID Pandemic. Ability for staff to work from where ever they are, has become critical for organizations to continue operations, service clients and monitor risks. GRACE is here to help. La Meer’s cloud web based GRACE (governance, risk and compliance for the enterprise) platform comprises of industry specific solutions built by financial market experts for financial market regulations in banks, broker-dealers, wealth advisory, alternate investments and asset management firms. The comprehensive cloud based GRACE suite helps organizations and staff to offer seamless client service with comprehensive oversight, compliance, risk management and assurance for clients from where ever they are. The modular nature of the GRACE platform allows our clients to implement (and pay for) only the modules or functionality they need.
  • 20
    myComplianceManager

    myComplianceManager

    myComplianceManager

    Our Audit Management system is much more than a great tool to optimize your audit life-cycle because we've combined it with our Enterprise Risk Management, Issue Management and IT Systems Inventory applications. It not only enhances the way you perform audits, but it also allows the Audit Committee and senior management to evaluate how your audit results impact the organization's risk profile, and to determine what post-audit actions need to be prioritized. We've also included our Issue Management system, so that process owners have a convenient tool to track and act upon issues or enhancement opportunities identified in your audits. Our Enterprise Risk Management (ERM) system provides a centralized location to assess, monitor and update your company's risk profile at an enterprise, regional and process level. Automated surveys are periodically completed by risk owners to score risks and identify changes in your risk environment.
  • 21
    Sign In Compliance

    Sign In Compliance

    Sign In Solutions

    Sign In Compliance makes it easier to comply with strict security regulations by radically simplifying and automating high volume, data-intensive, and administrative tasks. Drive efficiency throughout your organization with a system tailored to your specific needs. Save time by consolidating your record-keeping, workflow management, and risk mitigation in one place. Real-time analytics arm your security compliance team with the data they need to make smarter decisions. Increase organizational efficiency by using automatic workflows that save time – from the top down. Create your own processes from scratch to perfectly meet your organization's needs. Create white-labeled forms to be signed by employees with legally binding digital signatures. Sign In Compliance takes employees through foreign travel reporting, briefs, and debriefs with automatic reminders and email notifications.
  • 22
    Imperium

    Imperium

    Imperium

    The Imperium platform is an integrated risk platform designed for operational risk and compliance functions. Organize different types of risk and control assessments on a single platform to remove duplication in effort, thereby improving business engagement. Manual processes and complex system stacks are expensive. A streamlined operational risk platform can remove much of the inefficiency and therefore significantly reduce cost. Operational risk has a ‘tick box’ brand problem. Designing highly engaging/initiative tools can change this mindset. Simplify the data model to drive efficient insightful reporting across all three lines of defense. Data is a critical issue for operational risk functions. Due to the broad nature of the risks involved: data capture, data maintenance, data governance and data analysis are extremely complex to manage efficiently. Imperium uses best-in-class tools to manage this data in the implementation of the platform.
  • 23
    Holocentric

    Holocentric

    Holocentric

    Organizations are the sum of their parts; people, process and technology, all working together in concert. Our software provides organizations with the tools to model these relationships and capture them in a secure and organized digital repository. Maintaining the integrity, currency, and accessibility of corporate knowledge is an ongoing struggle for all organizations. Holocentric offers an intuitive user experience where content can be easily captured and displayed in multiple ways. It's no secret that organizations often suffer the pitfalls of siloed work environments. Holocentric enables users to access both role-based content and enterprise information from all corners of an organization for end-to-end visibility. Transforming your organization requires an established level of business maturity. Holocentric provides decision-makers with the business blueprints to improve the way you work, support optimization, and ongoing reform activities.
  • 24
    Infor GRC
    The next-generation Infor ® GRC helps chief finance officers, business process owners, risk officers, and auditors monitor business processes and risks across all users, roles, and events. By removing everyday obstacles that can frustrate and distract, governance, risk, and compliance through Infor OS provides a foundation for continuous improvement—built with advanced technology that’s accessible to all employees and is ready to evolve as industries evolve. Drive accountability with the process owners to review and coordinate the audit status. Improve performance, boost ease of use, and give teams access to the latest capabilities. Enable holistic business insights and planning, aggregate enterprise-wide data, and break down silos. Provide reports on controls and compliance.
  • 25
    Sealit

    Sealit

    Sealit Technologies

    When implementing a Zero Trust security model you shouldn’t question if your accounts or devices will get get compromised - assume they will. With Sealit, the sensitive data in your emails and files will remain fully protected even in that scenario. It takes one click from your existing inbox to encrypt your sensitive emails. It takes one click to encrypt any file format on your desktop. We made sure your workflow isn’t disrupted as we add a strong layer of protection to your sensitive data. Human error accounts for over 90 percent of cyber attacks on businesses, so you need to have a system in place to minimize the risk. Our patent-pending end-to-end encryption ensures each facet of your business is protected. Our app uses biometrics as authentication which provides you a seamless protection experience. Unlike passwords, biometrics cannot be taken away from you, there’s nothing you need to remember, and you always have it with you.
  • 26
    Strunk

    Strunk

    Strunk

    We offer great tools to automate and streamline compliance and risk management for banks, credit unions, financial advisors, broker-dealers, collection agencies, etc. If you provide online services, your clients are likely to want a SOC2 review or the like, and even if they don’t, your team/board will sleep better knowing you have a well-organized, well-documented compliance program in place. Our tools can help healthcare firms assess existing compliance with HIPAA requirements, manage policies to ensure compliance, and periodically test for adherence. Our family of risk assessment tools automates the complex task of documenting your organization’s current risk profile against relevant risk frameworks like SOC2, HIPAA, or regulatory requirements. In addition to our consulting services, our hosted ODP software is packed with even more features than ever to ensure the success of your program.
  • 27
    Trustero

    Trustero

    Trustero

    Many organizations are familiar with the complicated and tiresome SOC 2 Type 1 or Type 2 audit process that has become a prerequisite to closing most business deals. Using the power of artificial intelligence (AI) and other modern technologies, Trustero Compliance as a Service helps customers discover their source of truth with policies and controls mapped to a specific security framework. As a result, you will save hundreds of hours by automating hundreds of tasks, easing and speeding your path toward credible, sustainable compliance and trustworthiness. Simplify the path to audit readiness and continue to stay in compliance. When it’s time for an initial or annual SOC 2 audit, no one wants the headache of preparing for that audit from scratch. Our easy-to-manage dashboard gives you an up-to-date view of your audit readiness across your company. With these insights, you’ll know what’s working and what’s not, so you can keep on track and remain in compliance.
  • 28
    ClearOPS

    ClearOPS

    ClearOPS

    ClearOPS helps buyers and sellers manage their vendors and satisfy due diligence requirements. ClearOPS is a full-circle third-party risk platform. With ClearOPS you can track and monitor all of your vendors, send assessments and upload evidence, and respond to their customer's vendor management processes. Vendor security questionnaires are like a hot potato, no one wants to do them. So our A.I. takes the first pass saving massive amounts of time. As a system of record, you never have to watch the information about your own business walk out the door. You won the customer, now what? Well, you have to retain them, and maintaining that healthy trust is what we are all about. ClearOPS manages privacy and security operations information so that it is easily accessible and up to date. Simple third-party risk management software solution. Inspire your colleagues with empowerment and assess your vendors on your schedule.
    Starting Price: $500 per month
  • 29
    DataGuard

    DataGuard

    DataGuard

    Achieve your security and compliance goals with DataGuard’s all-in-one platform, designed to simplify compliance with frameworks like ISO 27001, TISAX®, NIS2, SOC 2, GDPR, and the EU Whistleblowing Directive. DataGuard’s iterative risk management enables you to capture all relevant risks, assets and controls to reduce risk exposure from day one. Automated evidence collection and control monitoring ensure ongoing governance to safeguard your organization as it scales. The platform combines AI-powered automation with expert support, reducing manual effort by 40% and fast-tracking certification by 75%. Join 4,000+ companies driving their security and compliance objectives with DataGuard. Disclaimer: TISAX® is a registered trademark of the ENX Association. DataGuard is not affiliated with the ENX Association. We provide Software-as-a-Service and support for the assessment on TISAX® only. The ENX Association does not take any responsibility for any content shown on DataGuard's website
  • 30
    Todyl Security Platform
    The Todyl Security Platform eliminates the complexity, cost, and challenges of ever-growing security stacks. Manage your security and networking through our cloud-first, single-agent platform. In minutes, you'll be connected and protected, with unmatched visibility and control across your environments. Stop managing products and start building a comprehensive security program. The Todyl Security Platform spans prevention, detection, and response by unifying SASE, Endpoint Security (EDR + NGAV), SIEM, MXDR, and GRC in a cloud-first platform. Todyl streamlines operations simplify architectures and empower your team to deliver highly effective security while simplifying compliance management. Thanks to the global scale and power of the Secure Global Network™ (SGN) Cloud Platform, users can securely connect to company networks, clouds, SaaS apps, and the Internet from everywhere in the world.