Compliance Software | Software Compliance Directory

Read a reviewed comparison, or select products below to compare your own shortlist.

Refine results

Location

Frameworks supported All frameworks CCPA CCPA/CPRA CIS Controls CMMC COBIT COSO DORA EU AI Act FISMA FedRAMP GDPR HIPAA HITRUST ISO 27001 ISO 31000 ISO 37301 ISO 42001 ISO/IEC 42001 NAIC NERC-CIP NIS2 NIST NIST 800-171 NIST 800-53 NIST AI RMF NIST AI Risk Management Framework NIST CSF NIST CSF 2.0 OWASP PCI DSS SIG Lite SOC 1 SOC 2 SOC 2 Type II SOX SR 11-7

Software category All types access governance Access governance Accessibility compliance Accessibility testing accessibility testing accounting compliance accreditation management ADA and global accessibility compliance ADA compliance adversarial testing AI compliance AI governance AI inventory AI lifecycle management AI monitoring AI privacy governance AI readiness AI remediation AI risk management AI security AI testing AI/data compliance Air emissions Alerts and checks Allergen management AML AML screening analytics Anti-bribery anti-bribery training Anti-corruption Anti-money laundering APQP attestation recording Audit and compliance audit compliance audit evidence Audit management audit management Audit readiness audit readiness audit trails Automotive quality management aviation compliance Behavioral Analytics BOM compliance business continuity business glossary Business Verification calibration tracking CAPA CAPA management Carbon accounting Carbon management case management Case Management Case management CDD/EDD certifications Chemical compliance chemical safety Chemical/Product Stewardship chemical/substance compliance claims management client lifecycle management Climate disclosure Climate reporting clinical data management Clinical document management Clinical informatics Clinical trial compliance cloud compliance cloud governance cloud QMS Cloud security cloud security posture code of conduct training Compliance compliance compliance automation Compliance automation Compliance case management compliance case management compliance guidance compliance hotline Compliance management compliance management Compliance monitoring Compliance reporting compliance training Compliance training compliance workflow computer system validation consent management Consent management construction safety management continuous compliance Continuous compliance continuous monitoring Continuous monitoring Contractor compliance control management Cookie compliance corporate sustainability Corrective actions crew qualification compliance Customer Onboarding Customer Risk Rating customs compliance cyber risk Cyber risk ratings data catalog data classification data controls Data discovery data discovery Data governance data governance data integrity Data integrity data lineage data mapping Data mapping data monitoring data observability data privacy data products Data protection data quality data security data sensitivity data stewardship data subject rights data unification DataOps Decarbonization Denied Party Screening design control Design controls Digital accessibility compliance Digital food safety management Digital governance Digital preservation digital product passports disclosures document control Document control Document management document management DPIA DPIA management DSAR DSAR automation Due diligence eDiscovery EHS EHS compliance EHS management EHS software Electronic quality management system Electronic records electronic signatures Electronic trial master file Email security employee compliance employee learning Employee relations employee relations Employee reporting employee risk Enterprise risk enterprise risk management environmental accounting environmental compliance Environmental compliance environmental data management environmental management eQMS equipment validation ESG ESG benchmarking ESG compliance ESG data management ESG management ESG reporting ESG Risk Management ethics Ethics and compliance ethics hotline Ethics hotlines ethics reporting Ethics training ethics training Evidence collection evidence collection Export Compliance Export Controls Export management Exposure management extended producer responsibility (EPR) financial crime Financial Crime Financial crime AML/KYC Financial crime compliance financial crime compliance Financial crime intelligence Financial Crime Investigations financial crime risk financial reporting findings management Food safety Food safety compliance Food safety compliance reporting Food safety management framework crosswalking framework management Fraud awareness Fraud Prevention fraud reporting Fraud reporting gap analysis GCP GCP documentation GDPR compliance GDPR/CCPA GFSI compliance GHG compliance GHG data management global trade management governance Governance and reporting governance management GRC GRC platform GST compliance GxP compliance GxP validation HACCP HACCP compliance HACCP planning Harassment prevention Hazard analysis health and safety health and safety management Healthcare accreditation management Healthcare and pharma regulatory Healthcare compliance healthcare compliance training Healthcare data security Healthcare quality management Healthcare risk management HIPAA HIPAA compliance hotline HR compliance HR compliance training Identity Verification Incident and risk management Incident management incident management Incident reporting incident response Indirect tax information governance Information governance Information lifecycle management Inspection readiness internal audit internal audit management internal controls investigations Investigations ISO management system jobsite inspections KYB KYC Laboratory compliance Laboratory information management Laboratory QMS Learning management learning management lease accounting Legal hold legal training legal workflow automation legislative tracking License management Life sciences compliance Life sciences QMS Life-science QMS Life-sciences compliance LIMS LMS Lot traceability mandatory training master data management Material Compliance material compliance maturity assessment medical device compliance medical device QMS medical-device compliance Medical-device eQMS Medical-device quality management Medical-device regulatory metadata management model monitoring model risk management Model risk management Net-zero management Net-zero planning Occupational and environmental compliance occupational health Occupational safety online learning online reporting Open-source GRC operational resilience operational risk operational risk management OSHA documentation packaging compliance Patient safety PCI compliance Penetration testing management Penetration testing platform PEP screening Pharmaceutical quality Pharmaceutical quality management PLM Policy and attestation management Policy and document management policy approval policy authoring policy lifecycle management Policy management policy management policy monitoring policy training PPAP Preference management Privacy and consent Privacy compliance privacy compliance privacy engineering privacy governance Privacy management privacy management Privacy operations Privacy policy management privacy risk assessment privacy risk management privacy training producer responsibility organization (PRO) management product compliance Product lifecycle traceability Product Regulatory Compliance product reporting Product Safety Product safety and compliance product traceability QMS quality and safety Quality assurance software Quality compliance software Quality control quality management Quality management records management Records management Records of processing Records retention RegTech regtech regulatory analysis regulatory change management Regulatory change management Regulatory compliance regulatory compliance regulatory horizon scanning Regulatory information management regulatory information management Regulatory intelligence Regulatory Intelligence regulatory intelligence Regulatory monitoring Regulatory quality Regulatory recordkeeping Regulatory reporting regulatory reporting Regulatory Reporting regulatory risk Regulatory submissions remediation management reporting reporting analytics responsible AI Responsible Sourcing Restricted-Party Screening Restricted-party screening retention and disposition Retention schedules reverse logistics risk and compliance risk and control management Risk and oversight Risk assessment risk assessment risk intelligence Risk management risk management Risk Management risk registers risk training risk-based audit RMIS RoPA RoPA management runtime security Safety safety management safety training Sales and use tax Sales tax sales-tax compliance Sample management Sanctions and counterparty screening Sanctions compliance sanctions screening Sanctions Screening Sanctions screening Scope 1-3 emissions screening and monitoring Secure communications security assurance Security assurance security awareness Security awareness training security compliance Security operations Security questionnaire automation security questionnaires Security reporting Security validation SOX compliance speak up speak-up and case management standards compliance Submission management supplier compliance Supplier Compliance Supplier document management Supplier Due Diligence Supplier engagement supplier management Supplier quality Supplier quality management supplier resilience Supplier Risk Management Supply chain risk supply-chain compliance supply-chain data collection Supply-Chain ESG sustainability Sustainability management Sustainability program management Sustainability Ratings sustainability reporting Sustainability reporting Tax compliance tax filing automation third-party risk third-party risk management Traceability Trade and export controls trade automation Trade Compliance Training training and certification tracking Training compliance training management Training records Transaction Monitoring transaction monitoring Transaction monitoring Trust center trust center UDI compliance Validation and qualification validation lifecycle management validation management Validation management VAT compliance vCISO platform vendor risk vendor risk management Vendor risk management Vulnerability management waste and recycling compliance waste collection Waste management water management Water quality WCAG compliance WCAG remediation web accessibility compliance Whistleblowing whistleblowing workflow approvals workflow orchestration Workforce conduct workplace conduct training workplace misconduct

Industry focus All industries 120+ global markets 160+ markets Advertising and marketing teams Aerospace Africa AI companies AI teams aircraft operators APAC financial institutions Apps Asia assemblies and components assemblies and finished products audit and advisory firms Australian businesses Automotive automotive industry aviation B2B companies B2B technology Bakeries Banks batteries Biopharmaceuticals biotechnology Biotechnology brand owners business Business associates business websites business workforce Businesses Businesses managing value-chain data Businesses needing independently verified emissions data Businesses of all sizes Businesses of every size Businesses onboarding commercial customers businesses operating across multiple markets businesses operating in 150+ countries Businesses pursuing compliance or voluntary sustainability Businesses pursuing net-zero targets Businesses subject to environmental regulations Businesses with sustainability goals Canadian CFIA and Health Canada-regulated businesses Catering CDMO Chemical operations Chemicals Clinical diagnostics Clinical laboratories Clinical research organizations Clinical trials CMO Codex-aligned food operations commercial construction companies Companies building net-zero plans Companies complying with global climate standards Companies reporting to investors and regulators Companies reporting to stakeholders and regulators companies selling products across multiple markets Companies with sustainability reporting programs Compliance teams compliance teams Connected devices Construction construction contractors Consumer goods consumer products Consumer products Content teams continuum of care Corporations corrections critical business services CRO CROs Customer journeys Data teams Digital businesses Digital estates Digital health digital services Document-heavy organizations Drug development E-commerce Ecommerce businesses EHS EHS practitioners EHS professionals electronic components electronic retail Electronics electronics industry Employees Employers EMS Energy energy and utilities Enterprise enterprise Enterprise archives enterprise operations Enterprise organizations Enterprise sustainability teams ERP and PLM users ERP teams ESG and sustainability teams EU product supply chains Europe European businesses European Union Export compliance Exporters Facilities managing hazardous and solid waste Finance Finance teams Financial crime teams Financial institutions financial institutions financial services Financial services Fintech fintech fintechs Fintechs fire flight operations Food and agriculture Food and beverage Food businesses Food businesses subject to CFIA requirements Food businesses subject to FDA requirements Food businesses subject to USDA requirements food companies Food industry Food manufacturers Food supply chain Food-to-go Forward-thinking companies GASB 87 entities GDPR and UK GDPR markets GDPR-regulated organizations Global banks global business Global businesses Global clinical operations Global enterprises global environmental regulations Global exporters global indirect-tax teams global manufacturers Global markets global organizations Global organizations Global records management Global supply chains global supply chains Global trade global workforce government Government Government agencies Growing businesses Growing enterprises GxP-regulated manufacturing health and life sciences Health technology startups Healthcare healthcare Healthcare accreditation organizations Healthcare organisations Healthcare organizations Healthcare providers Healthcare providers in 30+ countries Healthcare research High-risk industries high-risk operations highly regulated enterprises HIPAA-covered organizations Hospitality Hospitals HR Human resources IFRS 16 reporters Import and export operations importers Importers in-vitro diagnostic companies In-vitro diagnostics Independent food businesses Industrial operations industrial operations Industrial products Industrial supply chains Infrastructure Innovative companies insurance insurance brokers international operations international product markets international teams International trade Investor-facing organizations IT teams jobsite operations Laboratories law enforcement lean teams Legal Legal and compliance Legal and compliance teams legal teams Legal teams Lenders life sciences Life sciences Life-sciences organizations Litigation and investigations Logistics logistics providers Managers Manufacturers manufacturers manufacturing Manufacturing manufacturing industry Manufacturing supply chains Marketing teams Medical device medical devices Medical devices medical diagnostics Medical laboratories Medical technology medical-device companies Medical-device manufacturers medical-device manufacturers Medical-device startups MedTech MedTech manufacturers Mental-health services Merchants Microsoft 365 organizations mid-sized import/export enterprises Middle East Mobile apps Mobile workforces multi-country European markets Multi-site food operators Multi-site healthcare systems multi-site organizations Multi-state workforces Multi-tier supply chains multinational corporations Multinationals municipalities national and EU EPR programs Nonprofit organizations Online communications Online marketplaces operational teams Operational workplaces organizations Organizations Organizations engaging suppliers Organizations making products Organizations managing misconduct organizations managing privacy compliance Organizations managing suppliers and climate targets Organizations managing sustainability programs Organizations of varying sizes Organizations reporting to ESG frameworks organizations reporting under ASC 842 organizations requiring privacy compliance organizations subject to GDPR Organizations subject to GDPR Organizations with digital assets Organizations with environmental compliance tasks Organizations with operational risk programs organizations with public websites Organizations with regulated employees Organizations with staff compliance programs Packaged-spice producers packaging Patient communications Patient-safety and quality programs Payment card businesses Payment companies Payment providers Payments People teams Pharmaceutical pharmaceutical manufacturing pharmaceuticals Pharmaceuticals Privacy Privacy teams Private sector Procurement producer responsibility organizations producers product and supply-chain teams product manufacturers Public health laboratories Public sector public sector Purchasing operations quality teams Records management regulated businesses Regulated businesses regulated enterprises Regulated entities regulated financial institutions regulated industries Regulated institutions Regulated manufacturers Regulated manufacturing regulated organizations Regulated organizations regulated product manufacturing Regulated products regulated sector regulators Regulators Research laboratories Restaurants and hospitality operators Retail retail Retail and grocery retailers SaaS SaaS companies safety teams Sales Sales operations Sauce producers Security SFFAS 54 and FRS 102 reporters small and medium businesses Small beverage manufacturers small business small businesses Small food manufacturers SMBs SMEs Software as a medical device Sponsors Stakeholders Supply chain Supply chains sustainability teams Sustainability teams Tax teams Technology Testing laboratories textiles third-party risk Tier 1 banks tobacco companies Trade-risk teams UK food businesses United States United States FDA-regulated businesses water utilities Websites WEEE/electrical products Workforce safety Workplace safety Workplaces workplaces

Company size served All sizes Enterprise Large enterprises Small businesses early-stage enterprise mid-market small business

Certifications All credentials FedRAMP ISO 27001 SOC 2 SOC 2 Type 2 SOC 2 Type II

Deployment model All deployments 100% cloud software-as-a-service (SaaS) Cloud Cloud (noted as an online platform; exact hosting model not specified) Cloud platform (digital validation platform; exact hosting details not specified Cloud software (platform page presents web software; hosting details not specifi Cloud, Salesforce-native Cloud-native LMS software Not stated on cited product page Not stated on source page SaaS SaaS platform SaaS; on-premises Web-based platform cloud cloud healthcare compliance platform cloud learning platform cloud platform cloud platform and hotline service cloud platform or customer LMS cloud service cloud software cloud software and hotline service cloud software and mobile app cloud software platform cloud/SaaS hosted reporting portal and hotline service online platform online training platform platform secure software platform software platform solutions platform web-based platform

Pricing model All pricing Free and paid editions Free up to 10 users; paid plans available Not stated; contact sales Not stated; contact/demo-led Subscription custom quote paid plans

Integration Any integration AICC AWS Azure GCP GitHub Google Drive Google Tag Manager HRIS HubSpot Jira Microsoft 365 Microsoft Purview OneTrust SAML SAP SCIM SCORM SCORM-compatible LMS SSO SSO (OAuth 2.0) Salesforce ServiceNow Slack Snowflake Splunk cloud continuous monitoring data providers databases third-party services xAPI

Compliance workflow Any workflow 314(a) compliance AI governance AI inventory AML case management AML compliance AML monitoring AML risk management Attestation recording Audit management CAPA CAPA management CSPM Change control Complaint management Compliance program management Compliance reporting Compliance tracking Compliance training Contractor compliance management Contractor prequalification DPIA DPIAs DSAR automation Deviation management Document and policy storage Document control ESG reporting FDA readiness Food safety compliance GDPR data mapping HIPAA training ISO compliance Incident reporting Internal and external audits KYB KYC KYC/CDD/EDD PCI compliance validation PCI training PIA Policy management Quality control RFP responses Regulatory change management Regulatory compliance management Regulatory horizon scanning Regulatory mapping RoPA automation RoPA management RoPA/process register SOC 2 readiness Speak Up reporting Supplier risk management Title V air permits Webpage integrity monitoring access compliance guidance access control access governance add company policies and procedures air, water and waste accounting analytical instrument validation analytics anonymous intake anonymous reporting assessment management assessment score monitoring assessments assign and deliver training assign mandatory training assign training by role, location and mandate assurance audit lifecycle management audit management audit preparation audit procedures audit readiness audit records audit templates audit trail audit trails audit-ready records audit-ready reporting audit-ready sustainability data audits and inspections auto-remediation automated compliance checks automated controls automated risk assessments awareness business continuity case documentation case intake case management case records case resolution case tracking certification tracking chemical approvals cleaning validation client data management client onboarding cloud governance collaboration complaint management complete compliance automation completion tracking and reporting compliance and audits compliance and risk management compliance management compliance mapping compliance monitoring compliance reviews compliant data access computerized system validation confidential case handling confidential intake confidential reporting consent enforcement consent management continuous monitoring contractor management contractor safety management control management control monitoring counterparty risk assessment course completion monitoring course delivery cover anti-bribery and conflicts of interest cover inclusion and anti-discrimination cover privacy and data security create and deliver learning paths cross-jurisdictional reporting customer and third-party risk management customer assurance customer screening customer trust reviews customize code-of-conduct course cyber risk quantification data breach management data governance data mapping data subject rights requests data-room access control deliver online learning deliver role-specific training deliver state-specific training design and development design control management design controls disclosure management document control document management drift detection due diligence ePrivacy compliance employee compliance training employee reporting and case management engagement management environment and sustainability management environmental compliance reporting environmental data management environmental management equipment validation ethics training evidence collection evidence management evidence sharing exposure management financial crime detection financial crime monitoring finding aggregation finding management finding prioritization findings management follow-up framework crosswalking gap analysis governance management hazardous waste management health and safety management healthcare risk hotline intake incident and near-miss management incident management incident reduction incident response incidents and near misses industrial hygiene management inspection readiness intake internal audit internal controls investigation investigation case management investigations issue management link analysis maintain learning for evolving regulations maintain state-specific training plans manage policies and procedures manage regulations mandatory training measure risk exposure and program impact misconduct reporting model documentation model inventory model monitoring monitor compliance alerts and to-dos monitor training campaigns monitoring onboarding online reporting perpetual KYC/KYB phishing simulations policy creation, review, approval, publication and attestation policy lifecycle management policy management privacy assessments privacy controls privacy enforcement privacy governance privacy operations privacy requests privacy requirements management privacy risk management process control process validation quality management quality records questionnaire automation questionnaire-based triage receive policy recommendations refrigerant GWP tracking regulatory compliance regulatory monitoring regulatory reporting remediation remediation orchestration report compliance report generation report management reporting reporting analytics resolution risk assessment risk assessments risk dashboards risk detection risk intelligence risk management risk monitoring risk prioritization risk reporting risk scoring role-based learning rules and filtering safe reporting safety management safety program management sanctions and watchlist screening screening and monitoring secure reporting channel security awareness training security questionnaires security validation standards compliance supplier management supplier quality sustainability management sustainability reporting third-party identification third-party monitoring third-party risk assessment train on anti-harassment train on ethics and code of conduct train on privacy and data protection training training management training records training reporting transaction monitoring trust center two-way communication two-way follow-up two-way whistleblower communication upskilling vendor assessments vendor due diligence vendor lifecycle management vendor onboarding vendor risk whistleblowing hotline whistleblowing intake workflow automation

Software

PolicyCo