Live demoFictional sample data. Explore every screen. Nothing you click is saved.Fictional sample data. Nothing is saved.
Sign up for a real accountSign up12GRC
Maintain Northwind Robotics's vendor inventory with criticality and status. Upload a vendor's SOC 2 report (PDF) and the parser detects the auditor's opinion (Qualified vs Unqualified), the system description, and control exceptions, then derives a risk rating.
SOC 2 Type II covering infrastructure, security, availability. No exceptions noted.
Covers Enterprise Cloud. Bridge letter on file for current period.
Exception: one access-review cadence lapse noted, remediated within 30 days per management response.
Part of Salesforce Trust umbrella report.
Covers Gmail, Drive, Calendar, and Admin Console.
PCI DSS Level 1 service provider; SOC 2 Type II annually renewed.
Exceptions relate to change-management ticket documentation. Under review by security team.
HRIS system of record; scope includes PII and payroll data handling.
No SOC 2 assessment yet.
No SOC 2 assessment yet.