Vendor Directory
Explore GRC and compliance management vendors.
Passware
Unlocking insights from encrypted data
Passware provides password recovery and decryption software for forensic teams, businesses and home users. From office documents to encrypted archives and disks, Passware offers solutions for computers, mobile devices and files, including Passware Kit Forensic and integration into third‑party apps. The product line supports decryption of WD My Passport and My Book, Transcend, Seagate, Lacie disks, Lenovo ThinkPads, BitLocker-encrypted devices with TPM, and Macs with Apple T2 Chip. Features mentioned include instant recovery of Windows user passwords from NTLM hashes, instant reset of Windows account and admin passwords, decryption of QuickBooks databases, and a Software Maintenance and Support (SMS) subscription. The company also offers a self‑paced course on evidence decryption for computer forensics.
Visualping
Stay Alert to Every Website Change
Visualping is a website change detection and monitoring service that monitors any website for changes and sends instant alerts via email, SMS, API or Slack. It provides integrations, webhooks and an API so teams can receive and process notifications in their preferred apps or build their own apps and solutions. Integrations are available in Visualping for Business plans, and customers can route alerts to Slack, Microsoft Teams, Google Chat, Discord or add rows to Google Sheets and Zapier workflows. Visualping states it is used by more than 200,000 companies across 180 countries and includes features for testing end-to-end and workspace security/admin controls.
Virtual Mgr
Digitize Audits, Validate Compliance Effortlessly
Virtual MGR (Remote Management Software) offers a suite of RegTech and remote management solutions focused on digitizing audits, inspections and task validation. Products named in the site content include HealthClean, SmartClean, SmartCheck, SmartCycle and QuickResponse. The platform digitizes departmental compliance forms and procedural checklists, providing cloud-based, time & date stamps and live, time-stamped validation of activities (for example, perioperative cleaning). It provides dashboards for tracking task progress and dispersed labor, QR-code driven reporting, instant dispatching of issues, historical reporting and trend tracking. The site describes the offering as a customizable labor and task management system that replaces paper audits and enables digital evidence collection for audits and compliance workflows.
Qpoint
Unmasking encrypted traffic with effortless clarity
Qpoint provides enterprise-grade data security and compliance solutions, specifically designed to offer visibility into encrypted traffic within backend infrastructures. Their products include QTap, which enables unmatched visibility into all encrypted traffic without requiring proxies, code changes, or certificate management. Moreover, it allows users to pass audits with push-button simplicity by generating definitive proof of data residency. Qpoint's browser-based interface facilitates live traffic inspection, allowing users to see exactly what applications send and receive in production, thus enhancing compliance readiness.
TextMine
Unlock Insights from Your Critical Documents
TextMine is described as an AI‑powered enterprise document data extraction solution for procurement, KYC, compliance and legal teams. The site states the product can "unlock structured, reviewable data from critical documents — securely, explainably, and at scale" and highlights "explainable and auditable AI models" where "users are always in control." Marketing copy says TextMine helps teams "answer questions about your critical documents" and to "transform documents into explainable, auditable insights," and mentions saving time and unlocking value from existing workflows "at a fraction of the cost." The record includes product-focused claims but provides limited technical, pricing, or deployment details.
testRigor
Transforming QA with AI-driven testing solutions
testRigor offers an AI-powered test automation tool designed to enhance the efficiency and effectiveness of software testing. By integrating natural language processing and machine learning, it enables teams to create, edit, and manage end-to-end UI tests swiftly. The tool supports various testing types including functional, security, and regression testing, while also addressing AI-specific issues such as bias and model drift. This platform is not merely a toolset but a transformative approach to QA, empowering teams to improve software quality at pace, ensuring comprehensive test coverage without cumbersome manual intervention.
Sparkco
Transforming language into actionable insights
Sparkco provides an AI Excel agent and AI spreadsheet modeling product marketed as Sparkco Sheets. The offering turns natural language into live spreadsheets, models, and dashboards and connects to data sources including Stripe, QuickBooks, PointClickCare and Epic. The site mentions HIPAA-ready workflows for healthcare and finance and describes advanced audit automation solutions to streamline debt collection, ensure FDCPA compliance, and automate payments in skilled nursing facilities. Product content also references a Patient Transfer Platform and regulatory compliance for patient transfers across acute care and post-acute settings. The description emphasizes spreadsheet automation and integrations with healthcare and financial systems rather than a pure framework audit tool.
BACKUP EAGLE
Safeguarding Backups, Securing Your Future
BACKUP EAGLE provides automated backup monitoring and reporting aimed at managed service providers. The offering includes backup monitoring, storage health checks, dashboards and reports to show the status of backup environments at a glance. It delivers complete, reliable and up-to-date backup evidence and states it helps companies meet audit and compliance requirements. The product emphasizes automation to keep organizations optimally prepared for backup audits. BACKUP EAGLE also references a Security Center for IT security and positions itself as a partner for backup resilience. The solution focuses on daily backup checks, monitoring, reporting and evidence generation to support audit readiness and compliance (mentions NIS 2 and DORA).
Alteryx
Transforming data into actionable insights swiftly
Alteryx is an AI and data analytics company offering Alteryx One, an end-to-end, unified, enterprise-grade cloud platform for data analytics. The record states Alteryx can streamline control testing, automate evidence collection, and enable continuous SOX compliance. The platform combines AI, machine learning, and generative AI analytics, and provides the Alteryx AI Data Clearinghouse to bridge enterprise data and LLMs with governance, context, and control. Capabilities described include data preparation, automated machine learning (AutoML), no-code self-service analytic apps, scheduling and executing workflows, and a FIPS 140 compatible version of Designer. These product statements position Alteryx One as a cloud-native analytics and automation platform that can be used to support Sarbanes‑Oxley testing and related evidence automation workflows.
Vodori
Your trusted partner for compliant life sciences content
Vodori provides a content compliance platform focused on life sciences. The product helps organizations manage promotional and medical content, ensure compliance, and collaborate in real time. It supports GxP, quality, and compliance requirements and positions itself as the source of truth for compliant, on‑brand materials. Features described include reviewing, annotating, and collaborating on digital content in its native format; substantiating materials with approved claims and references; preparing materials for health authority submission; and filtered access to approved, curated content. The company references a 2025 Benchmarks Report and claims to be trusted by over 100 life science companies. The site offers demos and positions the solution toward material review process KPIs and regulatory submission workflows.
KNOW
Transforming compliance into streamlined digital workflows
KNOW is a mobile productivity platform for frontline teams that digitizes checklists, forms and operational compliance. KNOW's digital forms capture pictures, videos, e-signatures, QR codes, date/time stamps and GPS locations, and the app works offline and "automatically syncs once online." The product supports recurring notifications (daily, weekly, monthly), multi-stage approvals and automated workflows. A web dashboard shows completion rates, timestamps and who forms were shared with, and users can generate reports from the dashboard. The site invites visitors to sign up for a free demo and trial. KNOW is positioned for businesses needing to replace paper workflows and manage daily operational compliance.
NetCore j.s.a. (Unimus)
Secure your network, simplify compliance audits
Unimus is a Network Configuration Management (NCM) system deployed in customer infrastructure on customer hardware. It automates network device configuration backup, change tracking and archival to build a versioned configuration history suitable for audits and troubleshooting. Unimus supports over 400 device types from more than 150 vendors, bulk-import of devices, inventory synchronization with NMS, and an automation framework for runtime data collection. The product uses application-layer encryption for sensitive data, supports standards-based AAA, RBAC and MFA, and can integrate with existing SSO and security systems. Unimus exposes a full-featured REST API, sends notifications via email, Pushover or Slack, and can integrate change alerts with SIEM or ticketing platforms.
Hypatos
Transforming transactions with intelligent automation
Hypatos provides an AI-native platform to launch an "AI agent workforce" for autonomous document and transaction processing. The platform offers end-to-end transaction processing—from ingestion to decision-making and integration with downstream systems—and supports use cases across procure-to-pay, order-to-cash and hire-to-retire. It uses LLM-powered classification, routing and normalization plus Retrieval-Augmented Generation (RAG) to extract structured and unstructured data, and supports field-level and image translation and automatic data redaction. The product automates invoice validation, approval routing, accounting integration and e-invoicing, and embeds fraud detection, duplicate prevention, automated validation checks, audit trails and risk assessments to support audit readiness and regulatory compliance.
SiteCapture
Capture Every Detail, Secure Every Moment
SiteCapture is a mobile and cloud-based SaaS platform for field operations and jobsite documentation. The platform captures photos and critical job data with tamperproof metadata to verify where, when, and how photos were taken. Users can create customizable data collection templates and organize work under Property Containers to retain full histories of surveys, inspections, estimates, work orders, and reports. Photo management tools verify timestamps, GPS locations, user device type, and other metadata. The product includes user and vendor management with roles and permissions, and can track vendor information such as services, regions, insurance details, and other compliance information. Integrations are available via a Zapier app or a RESTFUL API.
SETCCE
Secure your digital identity with confidence
SETCCE offers electronic signature and trusted digital transaction capabilities along with consulting services. The site describes electronic signature technologies that let users sign with a sign pad, tablet, smartphone or digital certificate, and to enable signing in cloud or with ledger. It also mentions real time video identification to create a customer electronic identity and an Evidence Record Solution to preserve electronic documents securely and trustworthily. SETCCE supports creation and receipt of e-invoices for B2B and B2C digital transactions. In consulting, the company lists gap assessment, gap remediation, security metrics definition, policies and standards implementation and references ISO 27001:2013 work.
Coreforcetech
Capture Evidence, Secure Justice Instantly
Coreforce provides public safety technology including body-worn cameras, wearable video, digital evidence management, and real-time communications. The record describes a secure, cloud-based integrated platform that supports capture, reliable digital evidence storage, and evidence integrity "from capture to courtroom." Coreforce positions its solutions for Corrections, Campus Security, Emergency Response, Federal Agencies, Law Enforcement, District Attorneys and Prosecutors' Offices, and other public and private security teams. The company highlights incident documentation, case preparation and collaboration between prosecutors and law enforcement, real-time response and operational oversight, and capabilities intended to enhance safety, accountability, and transparency across public safety operations.
DataSnipper
Transforming audits into seamless operations
DataSnipper describes an "Intelligent Automation Platform" aimed at audit and finance teams. The site emphasizes accelerating audit and finance productivity and references "audit automation tools" and a "Financial Statement Suite." Pricing content notes that the pricing model varies based on factors like team size, selected package, and optional add-on purchases. The site invites visitors to "Book demo" and to "Get your questions answered in a personalized demo." Content also includes an article-style item titled "What Are SOX Controls and Why They Matter?", indicating an audit and controls focus. Marketing language such as "Unlocking unbelievable efficiencies" is used on the homepage.
Rhombus
Secure your world with intelligent surveillance solutions
Rhombus provides a cloud-managed physical security platform focused on video surveillance and centralized device management. The product offers cloud commercial security cameras that connect via PoE, require no NVR/DVRs, and include onboard storage that resynchronizes with the cloud after network outages. The platform allows remote access to manage cameras, alarms, sensors, and integrations from a single, integrated interface. Rhombus cites enterprise-grade encryption and regular security audits, a 10-year warranty on cameras, a same-day RMA program, and 24/7 in-house customer support. The company offers demos and expert assistance to determine camera counts and deployment configurations for organizations of varying sizes.
Digiata
Transforming finance with tailored software solutions
Digiata is a software development firm delivering bespoke solutions and an Operational Reporting solution that connects to databases and data sources to design reports, automate execution, and track performance with built-in logging for easy auditing. The record emphasizes work for clients in the financial services sector and mentions regulatory reporting, month-end financials, and ad-hoc reports. Digiata also describes Single Sign-On for authentication to legacy online banking, management of SSL client certificates, creation of online identities, and micro-frontend and container-based backends. The company presents itself as a partner that provides software development teams, delivery practices, and solutions focused on reporting, auditability, and banking-related integrations.
Fairwinds
Focus on development, we handle Kubernetes
Fairwinds provides managed Kubernetes and related tooling for infrastructure teams. The site describes Fairwinds as a Managed Kubernetes-as-a-Service that "manages the entire underlying Kubernetes platform and third-party tooling" so infrastructure teams can focus on developer needs. The record references Fairwinds Insights and states the product "integrates with the tools and open source your team already uses." It also highlights "automated compliance evidence collection in Fairwinds" in relation to SOC 2 audit reports. Pricing notes mention custom pricing plans available and open source components. The messaging targets cloud-native infrastructure management and compliance evidence collection for audits such as SOC 2.
