Updated on 9th October 2026
Governance Risk Compliance Platforms
Headline metrics, grounded risk and supplier intelligence, and quick glimpses into cost, price and trade. Jump straight into the analysis below.
Buyer Power Score
+0.5
Supplier-favoured −5+5 Buyer-favoured
Negotiating position for this category, scored from supplier-favoured to buyer-favoured.
Recommended stance. Run dual-track RFP with AI-native challengers
Market size$51.4Bglobal, USD
CAGR10.3%base to forecast
Suppliers8tracked players
Signals6monitored
What to do
3Risk Exceptions
3EU Corporate Sustainability Reporting Directive (CSRD), in force from January 2023 with…RegulatoryWatchStanding obligation from the research base
EU Digital Operational Resilience Act (DORA), applicable from 17 January 2025, mandates ICT…RegulatoryWatchStanding obligation from the research base
Black number: sourced statements naming the countryRed badge: live signals (alerts) for the country
6 countries · 3 lanes from 34 sourced statementsCountries
Ranked by sourced statements.United States · 1 alert14
Netherlands · 1 alert1
United Kingdom1
China1
India1
Germany1
SupplierHQProfileStatus
ServiceNow (GRC)California, USAIntegrated Risk Management (IRM) suite within the Now Platform covering risk, policy, audit, and vendor risk management; widely regarded as an…ProfiledSAPBaden-Württemberg, GermanyOffers SAP Governance, Risk, and Compliance solutions (process control, access control, audit management) largely integrated with SAP enterprise…ProfiledMetricStreamCalifornia, USAPure-play GRC software vendor with the MetricStream Platform (GRC Cloud) for risk, compliance, audit, and cyber-risk use cases across regulated…ProfiledLogicGateIllinois, USARisk Cloud no-code platform for GRC workflows, including risk assessments, compliance, and third-party risk management.ProfiledRSA (RSA Archer)Massachusetts, USARSA Archer is a long-established enterprise GRC platform covering risk, compliance, audit, and business resilience management.Profiled