Framework mapping and statement of applicability
Products
GRC
Governance, risk, compliance and privacy in one place.
Frameworks, controls, risks, policies, management system, audits, incidents and data protection on the same base, with evidence and action plans linked together.
Who it is for
What this product solves
Small and midsize companies that need to prove compliance with data protection laws, ISO 27001 or customer requirements without building a GRC team.
Risk management with scenarios, treatment and exceptions
Data mapping, records of processing, DPIA and data subject requests
Internal audits, nonconformities and action plans
Vendor register and assessment with contracts and DPA
GRC
What each level delivers
Basic
R$890/month3 operators included
Extra operator: R$79.90/month
Unlimited collaborators at no cost (they accept policies and handle assigned tasks and approvals)
Includes:
- Risk Management
- Treatment Plans
- Risk Exceptions
- ROI Simulator
- Policy Hub
- Action Plans
- Compliance Calendar
- Management Indicators
- Control Management
- Framework Mapping
- Evidence Repository
- Statement of Applicability (SoA)
- Nonconformities & OFI
- Governance Meetings
- Management Review
- Organizational Context & Interested Parties
- Management System Scopes
- Security Objectives
- Communication & Documented Information
- Legal Requirements
- Control Assessments (CAC)
- Internal Audit Program
- Data Mapping
- Data Sharing
- RoPA
- Data Subject Rights (DSAR)
- Privacy Notices
- Privacy Incidents & Breaches
- Data Classification
- Data Retention
- International Transfers
- Processor Instructions
- DPIA / RIPD
- LIA
- Privacy by Design
- Controller / Processor
- Asset Management
- Internal Systems & Shadow IT
- Security Incident Management
- Employee Acknowledgements
- Responsibilities & RACI
- Third-Party Register & Classification
- Subprocessor Management
- Contracts & DPA
- Supplier Risk Assessments
- Whistleblowing Channel
- Security Score
Advanced
R$1,990/month10 operators included
Extra operator: R$79.90/month
Unlimited collaborators at no cost (they accept policies and handle assigned tasks and approvals)
Everything in Basic, plus:
- Sector Regulatory Packs
- AI Management
- Applicability Engine
- Continuous Assurance
- Evidence Connectors
- Audit Management
- Audit Room
- Advanced Indicators Coming soon
- Consent Management
- Regulatory Intelligence Coming soon
- Privacy Pipeline Coming soon
- PII Discovery & Classification Coming soon
- Automated Classification & Sensitive Data Review
- Retention, Disposal & Evidence Trail for Discovered Data Coming soon
- Executive Dashboard
Annual plan: 12 months for the price of 10.
GRC