Skip to main content

SolveGRC documentation

SolveGRC is one connected system for running your compliance program — evidence, controls, frameworks, third-party risk, cloud posture, risk, reports, and audits, all feeding each other. These docs cover how to set each part up, run it day to day, and get value out of it.

Start here​

  • Getting started — your first insight, fast: pick a goal, follow a journey, and understand how much data it takes before the numbers mean something.
  • How SolveGRC fits together — the one-page map of what feeds what across the platform.
  • Workflows — end-to-end paths that cross several modules, starting with taking a new workspace to audit-ready.
  • How SolveGRC thinks — the ideas underneath: how AI answers are grounded, how evidence quality and freshness work, how crosswalks satisfy many frameworks, and what runs automatically.

Module guides​

  • Questionnaires — answer the security questionnaires your customers send you.
  • Third-Party Risk (TPRM) — onboard vendors, assess risk, and monitor continuously.
  • Frameworks — activate frameworks, scope them, assess controls, and crosswalk.
  • Evidence — add, classify, quality-check, link, and seal evidence.
  • Risks — raise, treat, promote from signals, and quantify risk in dollars.
  • Cloud Posture — connect a cloud account and turn findings into framework coverage.
  • Reports — build and deliver generated compliance reports.
  • Audits — plan, run, and close out audit engagements with an auditor portal.
  • Network Diagrams — turn architecture diagrams into structured, control-linked evidence.
  • Knowledge Graph — see your frameworks, controls, evidence, and attack techniques as one map.
  • Insurance Exchange — agree control obligations with a cyber-insurance carrier and send it scored reports.
  • MSP Portal — run compliance for many client organizations from one place.
New here?

Read Getting started first — it's built around getting you to a meaningful result with the least setup.