Compeas GRC Reviews & Product Details

Compeas GRC is a European governance, risk and compliance (GRC) platform for organisations that answer to European law. It is built in Sweden by Compeas AB and hosted in the EU, and customer data stays in the European Economic Area. One platform for every framework Compeas GRC brings NIS2, ISO 27001, SOC 2 (Type 1 and Type 2), NIST CSF 2.0, GDPR and the Cyber Resilience Act (CRA) into one system. Controls are managed once and mapped across frameworks, so the same work and evidence count towards every framework they satisfy. Requirements are written in plain language, and each one says what proves it. NIS2 as each country wrote it NIS2 is one EU directive, but every country has its own law. Compeas carries the national version for Sweden, Denmark, Finland, Germany, Austria, Belgium, the Netherlands, Poland, Italy and Bulgaria, built from each country's official legal texts, with national requirements, key dates and incident reporting deadlines. A group with companies in several countries runs each company on its own country's law. Compliance automation and evidence collection 68 automated tests run every hour across Microsoft Entra ID, Microsoft Intune, Microsoft Azure, Google Workspace, GitHub, Slack and Zoom, with read-only access. Each result is linked to the controls it proves, and evidence is collected, approved and renewed in one place. Risk, policies, vendors and incidents Compeas GRC includes a risk register with inherent and residual scoring and treatment plans, a policy library with ready-to-use templates, versioning and acknowledgement tracking, vendor management, and an incident register that tracks the NIS2, GDPR and CRA reporting deadlines that apply. For manufacturers, a product register and a vulnerability register cover the Cyber Resilience Act, with report drafts that follow the fields of ENISA's single reporting platform. Audit-ready, with the auditor inside Statements of Applicability, board reports and audit exports come straight from the platform. Compeas Auditor Tool gives external auditors and group management one view of every company they follow, with evidence requests answered next to the evidence. Simple, published pricing One price per organisation, with all users, single sign-on (Microsoft Entra ID or Google Workspace), onboarding, training and CISO advice included. Platform and support are available in English and Swedish.