ZenGRC is a governance, risk and compliance (GRC) platform. It supports compliance, risk and audit programmes, third-party risk management and customisable risk scoring. According to the vendor, you can load frameworks from the Secure Controls Framework library, such as ISO, PCI, SOC, NIST, HIPAA and COBIT, and work with dashboards, a trust centre and an integrations directory. External auditors get limited-permission access. The vendor also mentions an AI assistant, GRACI. It is a commercial product delivered as a service.
According to its own contact page, ZenGRC has an address in San Francisco in the United States. For the AI assistant, the vendor states that it uses AWS Bedrock. The vendor's pages give no information on where data is stored or on a GDPR or data processing agreement. European organisations that keep compliance and risk data in a GRC tool should clarify this before purchase, because a US provider is subject to US jurisdiction, including the CLOUD Act.