ISO 27001-Compliant Governance, Risk & Compliance Vendors
Governance, Risk & Compliance vendors are evaluated against ISO 27001 when they handle the workflows this framework governs. Currently, 7 vendors in our Governance, Risk & Compliance category hold ISO 27001 certification and 1 holds it partially or conditionally. Each listing below links to the vendor's full compliance profile.
Governance, Risk & Compliance vendors that hold ISO 27001 certification
Drata
9/32Continuous compliance and security automation platform.
OneTrust
8/32Privacy, security, and governance, risk, and compliance (GRC) management platform.
Secureframe
6/32Security and compliance automation platform.
Vanta
5/32Trust and compliance automation platform (SOC 2, ISO 27001, and other framework readiness).
Resolver
5/32Risk management and security operations (GRC) software, part of Kroll.
A-LIGN
4/32Cybersecurity compliance and audit services firm (SOC 2, ISO 27001, and other assessments).
LogicGate
3/32Risk Cloud governance, risk, and compliance (GRC) platform.
TrustArc
1/32Privacy management and compliance automation platform.
Offers ISO 27001 assurance programs to customers; own ISO 27001 status not clearly publicly documented
These governance, risk & compliance vendors do not currently hold ISO 27001 certification:
Know a vendor we're missing?