Top GRC Software for Policy Management

Between them, the 6 GRC software on this page cover auditing (5), reputational risk management (4) and risk management (4). 6 of them have written a profile you can read before you get in touch.

1. –

   

   ReadiNow

   Corrective and Preventive Actions (CAPA) · IT Risk Management · Internal Controls Management

   ReadiNow runs on what the vendor calls its next-generation DX Platform, a digital transformation platform on which applications are assembled from workflows with no coding.

   Write a review
2. –

   

   Ballast

   Corrective and Preventive Actions (CAPA) · IT Risk Management · Internal Controls Management

   Ballast, a cloud-based tool for security risk assessment, comes from a team of security specialists and follows NIST methodologies.

   Write a review
3. –

   

   OneTrust

   IT Risk Management · Internal Controls Management · Operational Risk Management

   Privacy, governance and risk are the focus of OneTrust's software.

   Write a review
4. –

   

   InfoSaaS

   IT Risk Management · Internal Controls Management · Operational Risk Management

   Compliance management platform that supports ISO certification and helps organisations control information security and data protection

   Write a review
5. –

   

   ESM

   IT Risk Management · Internal Controls Management · Operational Risk Management

   ESM is a digital management system for information security and compliance. It brings security, privacy, business continuity and risk assessment together in one visual tool.

   Write a review
6. –

   

   Oxial sGRC

   Corrective and Preventive Actions (CAPA) · IT Risk Management · Internal Controls Management

   The field usually shortened to GRC covers governance, risk and compliance, and Oxial sGRC offers it as software as a service.

   Write a review

Articles

Latest insights

The newest guides and analysis from TrustList Insights.

All articles

Cybersecurity

14 Nov 2026 · TrustList Editorial

UnrealIRCd flaw that hands users IRCOp powers is now exploited

CISA added CVE-2026-114713 to its exploited list on 13 November. UnrealIRCd 6.2.7.1 of 7 November fixes it with eight other bugs, and a…

Kenya

14 Nov 2026 · TrustList Editorial

Kenya gives multinational groups until 30 November to notify top-up tax

The Minimum Top-Up Tax took effect through the Tax Laws (Amendment) Act 2024, and its regulations came as Legal Notice No. 189 on 18…

Japan

14 Nov 2026 · TrustList Editorial

NTT Mobility to test a map-free self-driving bus in Tokyo from February

The bus, built by eVersum and driven by Imagry's camera-only system without HD maps, arrives on 7 December; public-road driving starts at…