Controllo makes a compelling case as a Compliance platform. The AI engine (Secura) is incredibly powerful - it automatically reviews client evidence, validates it against control requirements, and flags documentation gaps in seconds. This saves me hours during each audit cycle. The multi-framework mapping is a game-changer. It maps ISO 27001 controls to NIST CSF and other 20+ frameworks, which allows me to guide clients through multiple frameworks without redundant work. I also appreciate the risk management module - being able to quickly toggle likelihood and impact and view the risk heatmaps makes it simple to demonstrate risk maturity to clients. . And the control-level chat is brilliant. It helps direct collaboration in real time and hence removing the need for emails. Review collected by and hosted on G2.com.

There’s not much to criticize. I’d love to see native integrations with Notion or other documentation tools since some of my clients use them. A few additional visualization options for risk trend reports would also be helpful for executive presentations. Review collected by and hosted on G2.com.

Controllo uses AI to map controls across its 20+ frameworks which saves a lot of time for our internal teams as well as external auditors. The tool has an AI engine called Secura which does a Gap Assessment by analysing and validating evidence and other documents against the control requirements. Review collected by and hosted on G2.com.

So far, we have not faced any issues with Controllo. Review collected by and hosted on G2.com.

I find Controllo's solution to be incredibly detailed and comprehensive, covering the entire risk and compliance life cycle. I am impressed with its ability to keep up with new regulations and standards, such as the California AI Act and ISO 42,001. The software offers great visuals on status from a client perspective, breaking down specific status sections regarding evidence collection, which I find invaluable. It provides holistic insights into cybersecurity risks, particularly aiding organizations in SOC two, ISO certifications, and CMMC. The tool allows seamless organization and presentation of information to auditors. I appreciate that it's a managed service installed in the cloud, which means no complicated IT setup is required, making it straightforward to deploy. The dashboard and security features are particularly useful, allowing me to track the client's progress and understand the compliance lifecycle more effectively. I value its capability to organize and understand regulations, controls, and necessary evidence for compliance, which greatly supports providing the correct documentation for various standards like CIS, NIST, ISO, and certifications such as SOC two and CMMC. The risk assessment process integrated within the platform adds significant value, helping to organize, understand, and provide the necessary evidence efficiently. Review collected by and hosted on G2.com.

I wish the platform had more capabilities to pull evidence automatically from external platforms. It lacks APIs to collect evidence from cloud services like AWS, Google Cloud, Azure, or Salesforce, which would greatly enhance its functionality. Review collected by and hosted on G2.com.

Controllo has simplified Compliance and Risk Management for Companies. It has the ability to manage multiple frameworks like SOC-2, ISO27001, PCIDSS, etc from one unified platform. The AI engine (Secura) validates uploaded evidence and identifies possible control gaps saving manual review time. The Risk Management module can be used to map Risks directly to controls and toggle likelihood and impact for each risk dynamically. Review collected by and hosted on G2.com.

Reporting can be better with few more export formats for reports. Review collected by and hosted on G2.com.

I didn’t want to spend months preparing for SOC 2. Controllo made it unbelievably simple. We were up and running in a day — connected AWS, Google Workspace, and Jira — and Controllo’s AI instantly validated our evidence. The best part is, I don’t need to be a compliance expert. The tool guides you through controls and tells you what’s missing. Review collected by and hosted on G2.com.

Maybe a few more integrations with tools like ServiceNow, Confluence would be much better Review collected by and hosted on G2.com.