I like the predictability and maturity Compyl has brought to our compliance program. We first focused on automating tasks that bogged us down month over month. Now that this is up and running, our current focus is to align with the NIST CSF framework. Our dedicated information security manager has provided incredible guidance for us. This is a platform I would highly recommend. Review collected by and hosted on G2.com.

So far, I don't have anything specific that I don't like. We had a unique need with contracts that needed to be uploaded, but they could ingest these as flat files, which solved the issue. Review collected by and hosted on G2.com.

I have seen quite a few GRC tools as my entire career has been in risk management. While other tools have some of the capabilities of Compyl, I am blown away by how quickly we were able to get our environment stood up. Other clunky GRC tools require a lengthy implementation, and you need a dedicated resource to manage the workflows. With Compyl, they took all the functionality necessary for an enterprise-level risk management program. Review collected by and hosted on G2.com.

I brought Compyl on for risk management but understand they have far more capabilities than just that. I haven't worked with the complete tool, but the UI/UX could use some improvements so far. Review collected by and hosted on G2.com.

One main focus of our engagement with Compyl was to map our ISO 27001 accreditation with SOC 2. We as an organization needed help understanding the best way to achieve this, and Compyl's expertise was incredible during the entire process. The compyl team very quickly got our ISMS built out to show all the tasks we needed to do in order to achieve a SOC 2. So far, I am very impressed with the functionality of this platform.

The onboarding process was very smooth and uncovered a far amount of security gaps we as an organization were unaware of. It's been a pleasure working with the Compyl team, and I've already recommended their services to many friends in my network Review collected by and hosted on G2.com.

So far, I don't have any major issues with the service. I will say we are in the early stages, and I know there is much more functionality that we will be leveraging this Q4. Review collected by and hosted on G2.com.

Having dealt with many security vendors over my tenure it was like a breath of fresh air talking to Stas and the Compyl team. They have an excellent offering, well thought out but most importantly flexible to support our business needs. This is reflected in the engagement of the Compyl team. If you need to be compliant for regulatory or financial purposes this tool will support you in ensuring your user JML process and associated audit trails are managed coherently. The integration capabilities set this product apart along with an intuitive front end that is not only powerful but supports the various audit and compliance reporting required. Review collected by and hosted on G2.com.

Not much really - lots of excellent functionality still to be used to its fullest Review collected by and hosted on G2.com.

Compyl models all of our controls, and uses its built-in integrations with many third-party systems to ensure we are continuously in compliance, whatever the control happens to be - from user permission changes to BCP/DR testing to the security of our hosted services. The complete audit trail that Compyl stores of our compliance has become an essential part of the evidence we provide during our SOC 2 audit, avoiding weeks of work responding to requests for samples and collecting screenshots. Notifications are sent as soon as changes are detected, which has allowed us to replace other systems for monitoring and alerting.

We previously found that many tools start bottom-up, with noisy integrations that alert on activity that just doesn't matter. Compyl starts top-down from the controls we actually care about. Review collected by and hosted on G2.com.

With so much functionality and flexible querying of all the data that Compyl stores, the UI can be hard to navigate. However, I know this is an area that is being invested in. Review collected by and hosted on G2.com.

The dashboard provides an informative display of relevant information on assets, risks & controls in our environment. The vendor assessments provide our team risk rating on the 3rd parties we engage with against our own security scorecard. We then use this to manage our risk with these vendors. I like the API function & although only used it for Active Directory, SCCM for asset management & Have i been pwned, there are several other APIs I'd like to investigate.

The risk register and the data linkages make it easy to engage everyone within the business for risk management & accountability. I have used the ISMS component to collect & consolidate artifacts prior to auditing. It tells me when to complete tasks before they are due & completes a portion of those tasks automatically. Review collected by and hosted on G2.com.

Having only touching the surface of what the tool is capable of there is a lot of hidden functionality that I'm yet to explore, overall there isnt much to dislike as the team are constantly improving the app and adding functionality. Review collected by and hosted on G2.com.

Compliance has been an challenge for us for many years. Responsibilities were shared througout many departments and as we approach an audit stress ran throughout our organization. Review collected by and hosted on G2.com.

We are working on mapping multiple frameworks right now. It's been a challenge understanding the process but our customer success manager has been incredible explaining to us each step. Review collected by and hosted on G2.com.

We had a massive issue with system misconfiguration before Compyl. This was due to us never configuring these systems correctly, to begin with, but Compyl was able to identify and uncover the gaps we needed to address. We now have much more confidence in our infrastructure and the guidance from Compyl's information security experts to help shape our security program.

Another huge win was centralizing our compliance program. It was challenging managing the workload across multiple departments, but now, with Compyl, a huge portion of this work is automated, and it is much easier to track the progress till completion. Review collected by and hosted on G2.com.

There is a lot of functionality. The recent release had significant UI improvements, and we have been told they will continue to improve the usability. I would like to see improvements with UI and UX. Review collected by and hosted on G2.com.

We needed to implement a security solution. We immediately realized once speaking with Stas and the Comply team that we were in the right place. We had very little in place and Compyl is now our solution to solve compliance and security. Review collected by and hosted on G2.com.

I have no issue with Compyl. The software has been really user friendly and the customer support team has been great. They have guided us through all security and compliance needs. Review collected by and hosted on G2.com.

Compyl provides many things but the automation of tedious repetitive tasks is one of the best. Security accreditation is critical, Compyl really understands what Security means to businesses and are able to help both in initial accreditations and also ongoing compliance. Review collected by and hosted on G2.com.

There is nothing I dislike, I guess you are taking some control away from the IT department but this is very minimal. Review collected by and hosted on G2.com.