GridComply is the compliance management platform supporting ISO 27001, ISO 22301, SOC 2, HIPAA, OSHA, and other frameworks—with policy management, controls, evidence mapping, audits, risk register, and training.
What It Is
GridComply is the compliance management platform supporting ISO 27001, ISO 22301, SOC 2, HIPAA, OSHA, and other frameworks. It provides policy management, controls, evidence mapping, audits, risk register, training requirements (ties to GridLearn), incident/comms and operational evidence (GridCommand/GridAlarm), systems evidence and logs (GridVault), integrations (GridIntegrate), and automation (GridPolicy).
This pass is preview UI scaffolding and data model scaffolding. The platform will unify compliance workflows across frameworks, controls, evidence, audits, and risk.
Why It Matters
Compliance is fragmented across spreadsheets, point tools, and manual evidence collection. GridComply unifies frameworks, controls, evidence, audits, and risk into one platform—integrated with operations, incidents, and logging for automated evidence and audit readiness.
Key Capabilities
Frameworks & Control Libraries
ISO 27001, SOC 2, HIPAA, OSHA and other framework support with control libraries and mapping.
Policies & Procedures
Policy management with versioning, approvals, and linked controls.
Evidence Collection & Mapping
GridVault and GridIntegrate integration for automated evidence; manual upload; control-to-evidence mapping.
Risk Register & Exceptions
Risk tracking with likelihood/impact, mitigations, exceptions, and approval workflows.
Audit Readiness & Workflows
Audit scoping, control checklists, evidence packets, findings, and remediation plans.
Training & Attestations
GridLearn integration for training requirements; attestations for policy acknowledgement and compliance.
Operations Linkage
Incidents, alarms, work orders from GridCommand, GridAlarm, GridServ tied to evidence and controls.
How It Ties Into the Ecosystem
GridComply integrates with GridVault for evidence, GridIntegrate for connectors, GridPolicy for automation, GridLearn for training, GridCommand/GridAlarm for incident evidence, and GridServ for work evidence.
Example Workflows
- Map controls to evidence from GridVault, GridCommand incidents, and manual uploads for SOC 2 readiness.
- Create an audit, scope controls, collect evidence packets, and export for auditor review.
- Track risks, link to controls and incidents, and manage exception requests with approval workflows.
- Assign policy training via GridLearn and track attestation completion.
Intended Users
Launch Scope & Roadmap
First
- Framework libraries
- Control mapping
- Evidence catalog
- Policy management
- Basic audits
Next
- Risk register
- Exception workflows
- Training integration
- Evidence automation
Later
- AI-assisted mapping
- Predictive audit readiness
- Cross-framework correlation