One Platform. Clear Responsibilities.
Connect the people, records and decisions behind your GRC programme.
Accountable workFollow the Work. Keep the Context.
A shared context, with access defined by each person’s role and assignment.
Different Responsibilities. Purposeful Starting Views.
Switch perspectives to see the work each role can focus on. Open a role story for its next action and access boundaries.
People, access and operations
Start with the tenant operations and access signals.
Make the Organisation Part of the Context.
Use organisational units, accountable owners and project scope to place work with the right people. A reporting relationship does not automatically grant access to every record.
Explore access governanceUse the Connections You Actually Need.
Declared imports and reviewed records keep their source context. Availability depends on the enabled module and configuration; a file import is not a continuous connection to an external system.
The Capabilities Behind the Work.
Assign controls, understand reporting, trace recorded changes and govern access within the same platform.
Controls
Control owners update assigned work and submit evidence. Authorised reviewers assess it independently.
Reports
GRC leads and tenant admins release official reports. Other permitted participants review role-relevant previews.
Audit trail
Permitted reviewers inspect the events within their tenant and granted scope; platform administration is separate.
Access governance
An eligible independent approver decides the request. Project reviewers govern only their permitted projects.
Add guidance to your GRC workflow.
AI Advisor works in the same PlanGRC project. Guided delivery helps with planning, discovery, evidence-linked drafts, roadmaps and deliverables. Your team retains review and approval. Guided delivery is an add-on; standard AI assistance depends on your plan.
See how AI Advisor worksBring Suppliers Into Their Part of the Work.
An invited supplier responds to the assessment and sections assigned to them. Your internal team reviews the responses, evidence and findings before recording a decision.
External participation does not expose your internal tenant workspace.
Explore third-party riskBring Your Team’s Workflow Into View.
Start with your roles, review responsibilities and the work you need to make accountable.