GRC Oversight

Live demoFictional sample data. Nothing is saved.

Sign up

17Compliance

Reviews Due

A unified recurring-review queue across risks, policies, controls, vendors, access reviews, exceptions, and assets — so nothing with a review cadence silently goes stale.

  • Risk

    Vendor SOC 2 bridge letter missing

    Overdue

    Cadence: quarterly · Next due: 2026-06-15 · Last reviewed: 2026-03-15

  • Policy

    Acceptable Use Policy

    Cadence: annual · Next due: 2026-09-01 · Last reviewed: 2025-09-01

  • Vendor

    Stripe (payments)

    Cadence: annual · Next due: 2026-07-20 · Last reviewed: 2025-07-20

  • Access review

    Production database access

    Overdue

    Cadence: quarterly · Next due: 2026-07-01 · Last reviewed: 2026-04-01

  • Control

    CC7.2 — Security events monitored

    Cadence: quarterly · Next due: 2026-08-10 · Last reviewed: 2026-05-10

  • Exception

    MFA waiver for legacy build server

    Overdue

    Cadence: monthly · Next due: 2026-07-05 · Last reviewed: 2026-06-05

  • Asset

    Customer data warehouse (Snowflake)

    Cadence: annual · Next due: 2026-11-12 · Last reviewed: 2025-11-12