Built in the open
by practitioners
GRCWorks is a community project. People who run audits, assess vendors and answer security reviews for a living build the tools they wish they'd had, and share them.
Shipped,
not promised
Every feature comes from a real GRC problem: an auditor's question, a customer's security review, a year-end evidence scramble.
- ISO/IEC 42001 AI management frameworkFrameworks
- Add any framework or privacy law after setupFrameworks
- Audit periods keep their own scope and frequenciesAudits
- Removing evidence reopens what depended on itEvidence
- Import controls and vendor questionnaires from ExcelImport
- NDA-first Trust Center with expiring customer accessTrust Center
Controls sized to the risk and the team, not copied from a 400-page template.
The platform is open source. No feature gates, no lock-in, and our own security is on our Trust Center.
People learn GRC by doing it, so the Academy gives every learner a real practice company.
Contributors
GRCWorks is built by its community. Want to help with code, frameworks, templates or lab content? Get in touch.
Run your next audit
on GRCWorks
Get early access to GRCWorks Cloud, free while in early access, or book a demo and we'll show you around with your own framework.