Total Products under this Category: 463
Last updated: October 15, 2026
Why You Can Trust G2's Software Rankings:
G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.
Highlighted products: Vanta, Workiva, TeamMate, Optro, Mitti (by SafetyCulture), FloQast, Qualio, and SAI360.
Underlying data: [Grid® JSON](https://www.g2.com/categories/audit-management/grids.json?focus%5B%5D=vanta&focus%5B%5D=workiva-workiva&focus%5B%5D=teammate&focus%5B%5D=optro&focus%5B%5D=safetyculturehq&focus%5B%5D=floqast&focus%5B%5D=qualio&focus%5B%5D=sai360)
AI-powered compliance analysis for SOX, ISO 27001, SOC 2 and HIPAA. Automates control mapping, gap analysis, and audit-ready reporting for enterprise compliance teams.
Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.
Compliance Colleague is an AI research assistant for GRC professionals, auditors and vCISOs. Ask a question or upload a document (a policy, risk register, incident response plan or network diagram) and get an answer grounded in the standard itself, with the clause or article cited. It covers 30+ frameworks and laws: PCI DSS 4.0.1, ISO 27001, 27701 and 42001, SOC 2, NIST CSF, SP 800-53 and AI RMF, CMMC, FedRAMP, HIPAA, GDPR, the EU AI Act, NIS2, DORA, CCPA, India's DPDPA, Australia's Privacy Act, and the data laws of Saudi Arabia, the UAE, Qatar, Bahrain, Oman and Kuwait. Built by a former PCI QSA (14+ years). Uploads: PDF, Word, Excel, Visio, draw.io and screenshots. Plans from $30 a month, no rollout, no integration work. Free trial, no card.
AI document auditing against configurable scorecards: regulatory codes, internal standards or clinical frameworks, with human review.
comuneinregola is a web accessibility auditing platform helping Italian municipal websites meet AgID standards and WCAG 2.1 requirements. It scans entire domains, analyzing accessibility declarations and generating compliance reports. Using automated WCAG 2.1 verification engines, it identifies non-conforming elements with annotated screenshots, evaluating all pages and documents. The platform simulates real-world scenarios like keyboard navigation, zoom, viewport testing, text spacing, and form error handling. Accessibility trees assess screen reader compatibility, with human reviewers validating results. Deliverables include AgID self-assessment models, photographic evidence, prioritized intervention lists, and ready-to-submit declarations. Weekly monitoring tracks HTTPS certification, broken links, and platform versions. Public records display compliance details, supporting adherence to Italian accessibility laws.
AI-native trust that closes deals. Concord Trust turns security and privacy into a sales asset: auto-answer security questionnaires, fill RFPs, and share your security posture from a modern, branded trust center. Public Trust Center: Publish SOC 2, ISO 27001, pen tests, and policies behind permissioned access, each as a versioned release. Buyers self-serve under 1-click NDAs, and engagement analytics show every view and download. Theming and a custom domain make it look like your product. Documents and Policies: One source of truth for every policy, report, certificate, NDA, and FAQ. Write policies from an auditor-ready template library, publish with versioning, diffs, and multi-approver workflows, and use the same source in your trust center, questionnaires, and audits. Security Questionnaires: Drop in a spreadsheet, PDF, or other document, and Concord identifies the questions and drafts answers from your knowledge base. Answer one-off questions in chat, and every approved answer improves the next draft. RFPs and RFXs: Autofill RFP and RFX documents with drafts pulled from your knowledge base, review and edit before sharing, and feed accepted answers back into an approved answer library. AI Agents: Chat agents answer from current documents, and auto-fill agents complete questionnaires and RFPs end to end for your review. Concord ingests your policies, posture, and prior answers automatically, with no prompt engineering or manual indexing. Controls and Frameworks: Back every answer with a real controls program. Adopt controls from a template library, attach evidence, map them to SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS, and more, and give your auditor scoped, time-boxed access. Risks and Vendors: Track risks in a register with likelihood and impact scoring, treatment plans, owners, and linked controls. Manage vendors with risk tiers, data sensitivity, and scheduled reviews. Controls, risks, and vendors come with Premium and Enterprise; frameworks are added as packs. Concord Trust runs on Concord's AI-native action and data engine, alongside Concord Privacy. Start free with a hosted trust center, and add Concord Privacy when you need consent, privacy requests, and data mapping.
Best for product compliance managers shipping physical products into the EU, UK and US. Paste your product list. Get, per product and market, the regulations that apply, the documents each expects and the after-sale duties on you, quoted from the source. Free to try with no account. Solo USD 29 a month, Team USD 99 a month. Built by The Art of Service, publishing compliance and governance material since 2000.
Conformo is an AI-assisted review platform for Notified Bodies assessing medical device technical documentation under EU MDR, IVDR and ISO 13485. It checks technical files against applicable requirements and flags missing or partial evidence with source references. Reviewers can search documentation in natural language and get inconsistencies highlighted. It also drafts non-conformities traceable to requirement clauses, along with assessment reports, and reviewers approve or edit every output.
O controlador.ia é um software de controladoria jurídica para escritórios de advocacia. Captura as publicações e intimações da OAB no DJEN e as movimentações dos processos pelo DataJud, sugere os prazos com base legal e memória de cálculo para o advogado confirmar, distribui responsáveis no Kanban, envia alertas antes do vencimento e conecta clientes, honorários, timesheet e cobrança (integração com Asaas incluída) ao financeiro do escritório. A cobrança é feita exclusivamente por OAB monitorada, sem cobrança por processos ou por usuários. Implantação e acompanhamento com grupo de acesso direto à equipe. Desenvolvido pela NEVOA AI TECNOLOGIA LTDA, em Brasília (DF), Brasil.
Cordant is the command center for modern financial infrastructure. The industry spent a decade making money move faster. Cordant is building the part that sees what happened. It sits above the processors, banks, ledgers, and compliance systems an institution already runs and compares what they actually did against what its contracts and policies said should happen. Where the two diverge, it hands the cause and the action to a person, a queue, or an agent, so the decisions keep up with the money.
