Self-hosted GRC software for NIS2 and ISO 27001
GRCompliance is for teams who install the product themselves. Core is free and open source. Premium is self-hosted at $1,990 a year. demo.grcompliance.com is a public demo, not a managed service.
Everything you need. Nothing you don't.
Policy Library
Pre-built, customizable policy templates mapped to every framework. Edit, version, publish.
Gap Analysis
Instant posture assessment. Know exactly where you stand against any framework. Visual heatmaps.
Evidence Collection
Premium only. GitHub and AWS evidence collectors, plus open-source scanner add-ons (Prowler, Trivy).
Risk Register
Identify, assess, and track risks. Quantified scoring. Remediation workflows. Board-ready reports.
Vendor Risk
Manage third-party risk. Vendor inventory, DPA tracking, continuous monitoring.
AI Assistant
Policy drafting can use a model provider you configure. A draft is not approved evidence.
Integrations
The public repository confirms the GitHub and AWS collectors and the Prowler and Trivy add-ons in Evidence Collection. A connector is named here only when that code is public.
Reporting
Auditor-ready reports in one click. Compliance posture, risk summaries, evidence packages. See a sample pack from the fictional Latore LTD demo.
Self-Hosted
Docker one-liner deploy. Your data, your cloud, no vendor lock-in. Core is free, open source, and self-hosted.
Built for builders.
One Control, Many Frameworks
Map a control once, satisfy SOC 2 + ISO 27001 + GDPR simultaneously. Stop duplicating work across frameworks.
Self-hosted on your infrastructure
Customers install GRCompliance themselves. Core is free and open source at GitHub. Premium is a self-hosted licence at $1,990 a year. The only public hosted instance is the demo at demo.grcompliance.com.
You choose the model provider
Drafting can use a model provider you configure. GRCompliance does not publish a cost comparison, and a model does not approve evidence or issue an attestation.
Audit Ready Sprint
Want help getting audit-ready? We run a 45-day sprint for one framework (SOC 2, ISO 27001 or HIPAA): gap analysis, policies, evidence mapped in GRCompliance, an internal audit dry run and remediation. $12,900 service fee, plus a GRCompliance licence.
The independent audit is billed separately by your auditor.
Or just get the software.
No free trial. Try the live demo or install free from GitHub (self-hosted). No per-seat pricing.
Free, open source, self-hosted. Core GRC modules.
Complete platform. Unlimited users and workspaces, for internal teams or client portfolios.
Pay once. Lifetime updates, 1 year of support (renewal $790/yr).
Air-gapped deployments, named support contact, board reporting.
Don't want to DIY?
Get audit-ready with the Audit Ready Sprint: $12,900 service fee plus a GRCompliance licence.
Gap Assessment
Lite $2,500 / €2,500 or Full $4,500 / €4,500. 100% credited to the Audit Ready Sprint if you sign within 30 days.
Audit Ready Sprint
We do it with you. 45 days, one framework. $12,900 plus a licence ($14,890 with Premium, $17,890 with Lifetime). Premium renews at $1,990/yr. FOUNDING20 is 20% off the first licence payment, entered at checkout.
Frequently asked questions.
Is there a free trial?
No. Try the live demo, or install free from GitHub (self-hosted). The community edition is free, open source, and self-hosted.
Can I self-host?
Absolutely. Docker one-liner. Your data stays on your infrastructure. The core runtime is free, open source, and self-hosted.
Is GRCompliance hosted for me?
GRCompliance is self-hosted. You install it on your own infrastructure. The hosted site is only a public demo. Try the live demo, then install it yourself or add Standard install ($499) on a Premium purchase.
What if I need help setting up?
Standard install is an optional paid extra at $499 on every Premium purchase, yearly and Lifetime. It covers Docker deploy, domain and TLS, and automated backups. It is not included with the licence. Or check out the Audit Ready Sprint if you want us to do the compliance work.
Premium monthly is $199 per month. Cancel any time. No minimum term. Standard install is the same optional $499 add-on on Premium monthly, separate from the subscription. The monthly subscription is separate from the yearly licence.
Own your compliance.
There is no free trial. Try the live demo, or install free from GitHub (self-hosted).