# fullCircle GRC Reviews **Vendor:** Risk3sixty **Category:** [Enterprise Risk Management (ERM) Software](https://www.g2.com/categories/enterprise-risk-management-erm) **Average Rating:** 4.7/5.0 **Total Reviews:** 16 ## About fullCircle GRC The fullCircle GRC platform provides organizations with all the necessary tools to assess, build, and manage their security and compliance programs. It is backed by the experts at risk3sixty who can help organizations achieve their goals quickly. This includes access to customer success resources who will help you on your journey through the application and service offerings from risk3sixty consultants who can help prepare and support your organization through remediation and audit cycles. ## fullCircle GRC Pros & Cons **What users like:** - Users praise the **user-friendly interface** of fullCircle GRC, simplifying compliance management with real-time dashboards and workflows. (11 reviews) - Users appreciate the **user-friendly interface** of fullCircle GRC, enhancing efficiency and simplifying compliance management significantly. (9 reviews) - Users appreciate the **user-friendly interface** of fullCircle GRC, enhancing efficiency in risk management and compliance tasks. (9 reviews) - Users praise fullCircle GRC for its **intuitive interface** , making compliance management and risk assessment effortless and efficient. (7 reviews) - Users highlight the **exceptional customer support** of fullCircle GRC, promptly resolving issues and enhancing overall user experience. (6 reviews) - User Interface (6 reviews) - Automation (5 reviews) - Users value the **intuitive interface and real-time dashboards** of FullCircle GRC, making compliance management effortless and efficient. (5 reviews) - Efficiency (5 reviews) - Implementation Ease (5 reviews) **What users dislike:** - Users find **limited features** in FullCircle GRC, particularly in customization and basic functionality, affecting usability. (3 reviews) - Users find **limited functionality** in Full Circle GRC, particularly regarding customization and essential features like risk management. (3 reviews) - Users face **software bugs** during implementation, which can complicate integration and overall user experience with fullCircle GRC. (3 reviews) - Users face **quirky bugs** during implementation, particularly with the Compliance Calendar, complicating their experience. (2 reviews) - Users find the **complex setup** of fullCircle GRC time-consuming, especially without IT support for smaller teams. (2 reviews) - Users find the **feature overload** in fullCircle GRC can complicate understanding processes and hinder functionality. (2 reviews) - Limited Customization (2 reviews) - Manual Processes (2 reviews) - Technical Issues (2 reviews) - Complexity (1 reviews) ## fullCircle GRC Reviews ### 1. Evolution of a GRC Game-Changer **Rating:** 4.5/5.0 stars **Reviewed by:** Anne T. | Security Compliance Program Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** November 13, 2025 **What do you like best about fullCircle GRC?** I've witnessed fullCircle GRC evolve from a modest platform into a robust GRC solution that has transformed our security and compliance program. The standout feature is its user-friendly interface that displays controls on a single scrollable page rather than segregating them into separate modules - this is invaluable for daily GRC operations and sets it apart from competitors who prioritize modular coding over practical usability. The risk register has been instrumental in keeping us organized through numerous internal audits. As a company certified in ISO 27001, 27701, 27017, 27018, and 42001, we've found the ability for risk3sixty to immediately pull evidence for internal audits to be a game-changer. The Jira integration is particularly impressive, allowing our developers and SMEs to submit evidence through a tool they're already comfortable using. Additionally, the ability to duplicate projects year-over-year for external audits has us excited about future efficiency gains. **What do you dislike about fullCircle GRC?** While implementing the Jira integration, we encountered some bugs that required troubleshooting. The initial implementation process took some time, though this was largely due to our complex compliance landscape with nine frameworks and specialized requirements rather than a shortcoming of the platform itself. **What problems is fullCircle GRC solving and how is that benefiting you?** FullCircle GRC has centralized our management of nine different compliance frameworks and our main product within a single platform - no small feat considering the complexity of our requirements. The tool has streamlined our internal audit processes, especially for our ISO certifications, and significantly improved our evidence collection workflow through the Jira integration. The risk3sixty team provides exceptional support whenever issues arise, demonstrating their commitment to customer success. While initial implementation took some time given our complex compliance landscape, the platform has delivered tremendous value by providing a unified view of our security and compliance posture that's accessible and actionable. **Official Response from Kendall Morris:** > Hi Anne, we appreciate the partnership over the years! We're so excited to hear how pivotal fullCircle has been in the optimization of your compliance program and have enjoyed working with you on this. Your feedback has played a key role in making fullCircle the tool that it is today. Thank you! ### 2. fullCircle GRC Review **Rating:** 5.0/5.0 stars **Reviewed by:** Michael C. | Sr. Manager, Compliance, Mid-Market (51-1000 emp.) **Reviewed Date:** February 07, 2023 **What do you like best about fullCircle GRC?** 1: Ease of use of the platform: fullCircle is extremely intuitive to use, so it's very easy to get individuals up to speed on how to operate within the platform. This results in significantly less training time / resources allocated toward maintaining the GRC program. 2: fullCircle has many features that allow us to streamline our processes. For instance, we are very easily to link findings from our assessments and vendor reviews into our risk register and track them through completion. This is extremely useful for external audits as we are easily able to demonstrate the source of a risk and how we tracked that risk throughout the entire lifecycle. **What do you dislike about fullCircle GRC?** N/A - Our team has found fullCircle to be very simple to use and it's been extremely beneficial to our organization. **What problems is fullCircle GRC solving and how is that benefiting you?** fullCircle is primarily helping us in the following ways: 1) We are able to use the "Assessments" and "Controls" modules to routinely conduct internal audits. 2) We are maintaining our risk register and overall risk management process within fullCircle. 3) We are conducting our vendor security reviews within fullCircle. 4) We initially created our policy set within fullCirlce. Using fullCirlce and the various templates built into the tool has significantly increased the efficiency at which we can complete these tasks. For instance, rather than manually maintaining a risk register in Excel, fullCircle has tools where we can easily assign a risk ranking and it includes definitions that we can use to categorize different risks (e.g., "What criteria differeniaties an Impact Level of 3 from a Level 2). **Official Response from Kendall Morris:** > Appreciate the review, Mike! I know that getting you into the Controls module has been a huge boost for your GRC program and managing your many compliance frameworks. Looking forward to growing the product more with your feedback! ### 3. Great GRC Platform for Tracking Assessments, Risk, and Projects **Rating:** 5.0/5.0 stars **Reviewed by:** Scott B. | IT Security Analyst, Legal Services, Enterprise (> 1000 emp.) **Reviewed Date:** August 01, 2023 **What do you like best about fullCircle GRC?** Full Circle is a well-built platform with all the functionality many GRC programs need. We can create and track various projects, including vulnerability management and risk remediation. Calendars keep our compliance tasks on track. Policy management functions streamline the drafting and approval process. Vendor management and penetration testing modules are available. We also use the platform to track assessment (e.g. SOC 2) controls and evidence. Automated follow-ups help keep evidence updated throughout the year. **What do you dislike about fullCircle GRC?** At the moment, only the automations for AWS are built out. However, automations for Azure and other platforms have already begun beta testing, so this functionality should be available soon. **What problems is fullCircle GRC solving and how is that benefiting you?** Much of our GRC program management is now run through Full Circle. SOC2 Assessments, risk registry and risk remediation tracking, vulnerability remediation tracking, policy management, compliance activity scheduling, etc. are all handled through Full Circle. The platform is very easy to use and fits our budget. **Official Response from Kendall Morris:** > Thank you for the review Scott! We have really enjoyed working with you as you build out your GRC program in Phalanx and are very excited to begin working on the compliance automations with you as well. ### 4. Easy to use and great value for money **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Mid-Market (51-1000 emp.) **Reviewed Date:** February 04, 2025 **What do you like best about fullCircle GRC?** fullCircle GRC is easy to use. It has a simplified interface and offers great value for money. With different modules available for managing policies, vendor risk assessments, enterprise risk assessments and internal audits, it projects itself as a solution for all your GRC requirements. Additionally, it offers an out-of-the-box customizable inventories module that can be used for multiple purposes. The team at Risk3sixty offered implementation support and promptly responds to any queries. **What do you dislike about fullCircle GRC?** I have not disliked anything about fullCircle GRC since I started using it **What problems is fullCircle GRC solving and how is that benefiting you?** We used to perform our GRC activities manually on Excel. This resulted in some problems such as lack of complete and accurate visibility into the security posture of the organization. fullCircle GRC allowed us to streamline our processes and consequently achieve efficiency, accuracy and visibility into key areas and organizational risk posture. **Official Response from Kendall Morris:** > Thank you for your review! We're glad to hear our implementation support has been helpful. And nothing makes us happier than hearing you've been able to move your GRC program out of spreadsheets and into fullCircle! ### 5. Straightforward and Efficient GRC Solution **Rating:** 5.0/5.0 stars **Reviewed by:** Michael G. | Senior Director, Information Security, Mid-Market (51-1000 emp.) **Reviewed Date:** October 08, 2024 **What do you like best about fullCircle GRC?** I was one of the original users of FullCircle, when it was still called Phalanx. The platform went from a very basic platform, to a reliable GRC solution that allows for tracking all elements of your ISMS, GRC, TPRM, and more. It provides the ability to customize as much as you'd like, but the out of the box solution has very much all you'll need. Having used a variety of other GRC tools, FullCircle is surely the easiest to implement, which as an Information Security professional, not having to spend a lot of time to implement a new tool is always a positive. **What do you dislike about fullCircle GRC?** There's nothing that I dislike. There are surely some feature requests we've made, and the FullCircle team is always receptive to that feedback, but those are more nice to have requests, rather than a must have. **What problems is fullCircle GRC solving and how is that benefiting you?** FullCircle helps us centralize management of our Risk Management, Audit Management, ISMS, and TPRM. **Official Response from Kendall Morris:** > Thank you for the review Michael! We appreciate you using the tool for so long and are so pleased that it's had such a positive impact on your GRC program. Your feedback over the years has definitely helped shape the product. ### 6. the apple of GRC tools **Rating:** 4.5/5.0 stars **Reviewed by:** Belinda H. | Vice President of Information Security & Compliance, Mid-Market (51-1000 emp.) **Reviewed Date:** March 04, 2025 **What do you like best about fullCircle GRC?** excellent usability and customer interface. Robust Risk Register and Personalized customer service. We were able to have the tool up and running in a day. Building the backend processes to support took longer than launching the tool. **What do you dislike about fullCircle GRC?** some quirky bugs that we've experienced during implementation, mostly around the Compliance Calendar. **What problems is fullCircle GRC solving and how is that benefiting you?** affordable, centralized GRC that is relatively easy to use. Helps us to automate and centralize a very fragmented process. We have most of our compliance /risk initiatives under one pane of glass and can use reporting to generate Compliance KPI's. **Official Response from Kendall Morris:** > Thank you Belinda! We appreciate you being a fullCircle customer and contributing your ideas to the platform. ### 7. FullCircle organized our control evidence library **Rating:** 4.0/5.0 stars **Reviewed by:** Carlos S. | Director, GRC, Mid-Market (51-1000 emp.) **Reviewed Date:** February 19, 2025 **What do you like best about fullCircle GRC?** We are in the process of using fullCircle to organize our evidence gathering and sharing process and We are in the process of using Full Circle to organize our evidence gathering and sharing process and have found it easy to use. **What do you dislike about fullCircle GRC?** Sometimes the features did not work the way we wanted them to. But risk3sixty is very good at finding ways to work with us and explain the features further. **What problems is fullCircle GRC solving and how is that benefiting you?** fullCircle is helping us get our hands around multiple audits asking for the same evidence. ### 8. This is one great Audit Management tool for banking risk management **Rating:** 4.0/5.0 stars **Reviewed by:** Gaurav K. | Relationship Officer, Enterprise (> 1000 emp.) **Reviewed Date:** January 19, 2025 **What do you like best about fullCircle GRC?** It's dynamic and robust interface dashboard helps get real time insights of risk and audit issues, it also helps to keep track of ongoing compliance, tickets resolution and policies changes **What do you dislike about fullCircle GRC?** It's dashboard has so many features that makes it sometimes complex to understand the ongoing process. **What problems is fullCircle GRC solving and how is that benefiting you?** Fullcircle GRC is helping to manage audit, compliance and risk assessments for our bank. It is also helping to design and assess policies ### 9. Comprehensive and User-Friendly GRC Solution with Room for Growth **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Accounting | Mid-Market (51-1000 emp.) **Reviewed Date:** October 16, 2024 **What do you like best about fullCircle GRC?** Full Circle GRC’s intuitive interface makes managing compliance easy, with real-time dashboards and customizable workflows. I also value the automated reminders that keep tasks on track and the smooth integration with tools like Microsoft 365. I love how good the customer service is, you guys make sure to go to any length to resolve any issue.Moreover, I use Full Circle GRC frequently, and its real-time dashboards and automated reminders make managing risks and compliance effortless. **What do you dislike about fullCircle GRC?** One downside of Full Circle GRC is that some features, like reporting templates, feel limited and could offer more customization. Additionally, initial setup can be a bit time-consuming, especially for smaller teams without dedicated IT support **What problems is fullCircle GRC solving and how is that benefiting you?** Full Circle GRC helps me streamline risk management, track compliance tasks, and monitor audits in one place, saving time and reducing manual effort. **Official Response from Kendall Morris:** > Thank you for your review! I'm glad that the dashboards, workflows, and integrations have helped in managing your GRC program. We also appreciate your feedback on reporting, and we've heard you! In our four releases since September 5th, 2024, we have added a revamped reporting module, distribution groups for sending reports, report history & management, and added a brand new dashboard to the Risk Register. We are also working on a new dashboard for the Project Management module that I hope you'll check out soon once it's complete! ### 10. A sensible and straightforward GRC tool requiring minimal implementation lift **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** June 27, 2024 **What do you like best about fullCircle GRC?** FC is a pretty straightforward GRC package with everything you need to create and implement, or support, your GRC program. I particularly enjoy the ability to link individual items in their corresponding modules (e.g. project task to risk to related control) to show a clear path of the why and how we are doing somehting. While there is room to improve and refine FC (as with evrything), what you get out of the box is pretty awesome. The Risk3sixty team also has a good wiki, excellent support team, and are able to help with your integration. After we implemened FC, we use it regulalrly (daily) for risk management, control reviews, project managegement. The only module we have not dived into is their vendor module. **What do you dislike about fullCircle GRC?** Some basic functionality that I would expect in a GRC tool is missing: - Risk policies cannot be centrally managed and updated across your risk registers. - Tables cannot be created in rich text boxes. - I'd like to see an approval/signing function for risk items (not just assinged risk owners) for business stakeholders to use. **What problems is fullCircle GRC solving and how is that benefiting you?** FC is providing the tools to run and automate portions of our GRC program. **Official Response from Kendall Morris:** > Thank you for your review! I am glad that fullCircle has proven to be a valuable part of your everyday GRC management. We appreciate the feedback and are looking forward to continuously improving fullCircle to better meet your needs! ### 11. Minimizes errors **Rating:** 5.0/5.0 stars **Reviewed by:** Dominic B. | Executive, Consumer Goods, Small-Business (50 or fewer emp.) **Reviewed Date:** October 04, 2023 **What do you like best about fullCircle GRC?** The vulnerability management module is absolutely fantastic. Combining frameworks is a bit difficult. With some customization, it becomes much easier. The customer support team is always available to assist. **What do you dislike about fullCircle GRC?** The platform lacks reporting features making it difficult to generate customizable reports that are essential for management and auditors. **What problems is fullCircle GRC solving and how is that benefiting you?** Phalanx provides a solution, for managing governance, risk, and compliance (GRC) processes. Phalanx is designed to make things easier by smoothing workflows and bringing all data together. It provides reporting features that help us meet regulations and make decisions. **Official Response from Kendall Morris:** > Thank you for your review Dominic! I'm glad to hear that Phalanx has helped with your vulnerability management program. We're excited to share some more information soon on combining frameworks in Phalanx - stay tuned! ### 12. One Stop Shop. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** August 01, 2023 **What do you like best about fullCircle GRC?** Everything is in one place, pick and choose what tools (modules) you want to use. Account teams and customer service are always availbale and quick to respond. **What do you dislike about fullCircle GRC?** Navigation isn't always intuitive but, you learn where things are located. The vulnerability Management module is a great tool, with the addition of the ability to ingest more diverse tools would make it even better. **What problems is fullCircle GRC solving and how is that benefiting you?** Phalanx is the central location for most if not all of our Audit, Compliance, Information Security, Vendor Management, and Vunlnerability Management work. Makes it easier to see how things are related and ideal for demonstrating to auditors not only evidence review but, a convenient place for team members to update and store critical information. ### 13. Phalanx Up and Coming GRC Tool **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Legal Services | Enterprise (> 1000 emp.) **Reviewed Date:** August 01, 2023 **What do you like best about fullCircle GRC?** The realtime collaboration in Phalanx while undergoing an audit is what I like best about Phalanx. Having all team members and auditors in one space is so beneficial. **What do you dislike about fullCircle GRC?** There aren't many things not to like about Phalanx. It is a new product and there have been a couple of bugs, but nothing that the product team couldn't resolve quickly. **What problems is fullCircle GRC solving and how is that benefiting you?** Centralized space for tracking all things GRC. Policies, audits, findings, remediations, and any other project you could think of. ### 14. Great Program for the Risk and Compliance space **Rating:** 5.0/5.0 stars **Reviewed by:** Zach B. | Business Strategy & Support Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** February 07, 2023 **What do you like best about fullCircle GRC?** I believe the UI/UX is super intuitive. I never have questions about where I have to go to complete my task at hand. Everything is straightforward and properly labeled. **What do you dislike about fullCircle GRC?** It is not super easy to export data. It is possible, but I wish I had more control over what I could and could not export. The exports occasionally do not work, and I need to reach out to Customer Support, which quickly fixes my problem. **What problems is fullCircle GRC solving and how is that benefiting you?** It helps create a policy repository for our company and allows us to track and manage our risk projects easily. The risk register is a great feature, and it is a wonderful platform to make our SOC audits much more accessible. ### 15. An ideal solution for building and implementing a new program **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Legal Services | Mid-Market (51-1000 emp.) **Reviewed Date:** March 30, 2023 **What do you like best about fullCircle GRC?** Phalanx is a great platform for Governance, Risk and Compliance. The modules are user intuitive, and are helping us build and improve our processes. Everything is easy to find, from Risk Management, to Vendor Management, to Assessments and Inventories. In my short time using the solution, we have moved ahead quickly and efficiently **What do you dislike about fullCircle GRC?** There are some licensing issues but those were resolved quickly with no impact to operations **What problems is fullCircle GRC solving and how is that benefiting you?** Phalanx is helping tremendously in getting this built out and implemented. We have just begun implementing a Risk Management program, and Phalanx is critical to this. It is also helping us build out processes for Vendor Management, various inventories, and Risk Registers. ### 16. Everyday GRC Tool **Rating:** 5.0/5.0 stars **Reviewed by:** Alex E. | Mid-Market (51-1000 emp.) **Reviewed Date:** February 07, 2023 **What do you like best about fullCircle GRC?** The flexibility to configure it to your needs. **What do you dislike about fullCircle GRC?** The lack of available templates for self-assessments. **What problems is fullCircle GRC solving and how is that benefiting you?** Phalanx allows me to track compliance internally and also enables a seamless evidence collection method for external audits. - [View fullCircle GRC pricing details and edition comparison](https://www.g2.com/products/fullcircle-grc/reviews?section=pricing&secure%5Bexpires_at%5D=2026-05-18+12%3A51%3A29+-0500&secure%5Bsession_id%5D=19a3ddd0-fc69-4746-b06a-cea3c29f7322&secure%5Btoken%5D=699afac8a2ef149c44b1101e09505f67a988d47ece274626be26a82570302ca8&format=llm_user) ## fullCircle GRC Integrations - [Jira](https://www.g2.com/products/jira/reviews) ## fullCircle GRC Features **Workflows - Audit Management** - Audit Trail - Recommendations - Collaboration Tools - Integrations - Planning & Scheduling **Generative AI - Security Compliance** - Predictive Risk - Automated Documentation **Monitoring - IT Risk Management** - AI Monitoring **Platform AI Features - Policy Management** - Reports - Workflow Management **Agentic AI - Regulatory Change Management** - Autonomous Task Execution - Multi-step Planning - Cross-system Integration - Natural Language Interaction - Proactive Assistance **Risk Management** - Risk Identification - Risk Classification - Risk Methodology - Goals Monitoring **Documentation - Audit Management** - Templates & Forms - Checklists **Agentic AI - IT Risk Management** - Autonomous Task Execution - Multi-step Planning **Reporting & Analytics - Audit Management** - Dashboard - Audit Performance - Industry Compliance **Business Continuity Management** - Recovery Plans - Procedure Templates - Crisis Management **Platform** - Integration - Security & Privacy - Flexibility **Services** - Implementation - Training & Learning - Customer Support - Professional Services ## Top fullCircle GRC Alternatives - [Vanta](https://www.g2.com/products/vanta/reviews) - 4.6/5.0 (2,410 reviews) - [Optro](https://www.g2.com/products/optro/reviews) - 4.6/5.0 (1,584 reviews) - [Sprinto](https://www.g2.com/products/sprinto-inc/reviews) - 4.8/5.0 (1,621 reviews)