GoCompliant is modular GRC software (governance, risk and compliance) from GoCompliant AG of Bern. Organisations assemble their own package from modules: information security management (ISMS) with an asset register, threats, vulnerabilities and controls; an internal control system with control plans; risk assessments; tracking of actions and audit points; document management; business continuity management; and incident recording. A connector module links peripheral systems such as SAP to control activities and risk analysis. According to the vendor the software is industry-neutral and freely configurable, with a workflow engine for assessments.
GoCompliant AG is based in Bern, Switzerland. The website names no parent company. It does not state whether the software runs as a cloud service or on your own systems, or where customer data is stored, so ask the vendor. The website itself is hosted with a provider in Zurich. Switzerland is not an EU member but an EFTA country with an EU adequacy decision. For a European organisation this matters because risk and incident data is often sensitive.