Hosting & processing
Ask for current hosting locations, subprocessor information and the processing scope that applies to your use case.
GRC SOFTWARE & AI GOVERNANCE
Security. Risk.
AI governance.
Connected.
Start with AI governance, free forever: register the AI systems you use and assess each one. When ISO 27001, NIS2, DORA or the EU AI Act come up, run the work in the same platform from €149/month, bought in the app.
GRC: 14-day trial · AI Governance: free forever
GRC from €149/month, excl. VAT · See pricing
Defensiq GRCAEGood morning, Alex
Here's your security posture overview for today.
2 priority risks need reviewView alerts
Total assets
124Active assetsOpen risks
122 Critical / HighActive policies
1822 in totalRisk coverage
75%36 of 48 treatedSecurity Posture Score
78/100
Based on risks, policies
and compliance status
Risk Heatmap
InherentResidual
LowModerateSignificantHighCritical
23421
Impact ↑Likelihood →
Work & Reminders
3 openReview supplier continuity riskAlex Example · 08 Oct
HighApprove access-control policyTaylor Example · 10 Oct
ReviewExample organisationSample workspace · October 2026
Selected framework content. Editions, coverage and availability vary. Professional includes one framework of your choice. See the scope of each library.
THE WHOLE PROGRAMME, IN VIEW
The work is connected.
Your platform should be, too.
From a policy revision to a recovery exercise, keep the responsible people, decisions and supporting records connected.
01
Policies and people
Draft policies, manage review and publication, and track employee acknowledgements. Give each revision a history and follow up on outstanding assignments.
From draft to acknowledgement02
Risks and improvement work
Record risks, compare assessments and document treatment or acceptance. Give actions an owner and deadline, with a link back to the reason for the work.
From assessment to action03
Frameworks, controls and evidence
Scope available requirements, record implementation and assurance, and connect the evidence. Find gaps and review work without treating every status as the same thing.
From requirement to review04
Suppliers, assets and services
Maintain the records that explain what your organisation depends on. With the supplier module, review offerings and risks and connect them to supporting assets and services.
From supplier to business context05
Incidents and resilience
Record incidents and follow-up. With continuity capabilities, document business impact, recovery plans and exercise results, then assign the improvements the exercise identifies.
From exercise to improvement06
Management and audit preparation
Use targets, reports and recorded decisions to explain progress. With the relevant reporting and audit modules, prepare scoped engagements and review the supporting records.
From recorded work to oversightSEE HOW THE WORK CONNECTS
Make security work
simpler.
Take a quick look at risks, requirement gaps and evidence, the AI systems register and the leadership view in Defensiq.
- 01Log, score and track risks through to treatment.
- 02See requirement gaps and evidence that needs review.
- 03Register AI systems with risk level and human oversight.
- 04Give leaders one view of services, risks and recovery targets.
TRY THE WORKFLOW
One supplier. The context behind the risk.
Try a simplified onboarding example: record a supplier, choose an offering, review a risk and connect the accepted records.
Supplier onboardingINTERACTIVE ILLUSTRATION
SuppliersExample Support Co
SAMPLE SUPPLIER
Example Support Co
A fictional customer-support provider. Review the offering and risks before connecting the accepted records.
Onboarding Draft review
Review ownerUnassigned
Know who you depend on.
Example Support Co provides a customer-support service. Record the supplier and give its review a responsible owner.
Sample data · runs only in this browser0/4 actions complete
Conceptual illustration with sample data. The live supplier workflow requires the supplier add-on and relevant permissions.
A DEDICATED AI GOVERNANCE WORKSPACE
Know the system.
Record the decision.
Start with AI Governance’s free-forever plan: keep an AI inventory and assess how each system is used. No GRC subscription or card required.
AI Governance Advanced · paid add-on for Business or Enterprise
SUPPORT DRAFTING ASSISTANT
- Purpose
- Draft replies for human review
- Business owner
- Alex Example
- Review decision
- Approved with conditions
Condition: review the data-use policy
Owner: Taylor Example · Due: 15 October
Conceptual illustration · Sample data · Advanced workflow
Advanced requires an eligible Business or Enterprise GRC subscription and the AI Governance add-on.
And Nova?
Nova helps with project questions and drafts inside Defensiq. It has separate access requirements.
Explore NovaTRUST STARTS WITH CLARITY
Your security platform
should welcome scrutiny.
Review the information your team needs to assess Defensiq for your organisation.
Visit the Trust CenterAccess & accountability
Discuss project roles, module permissions and the records available to support your review.
Privacy & AI data use
Review the privacy notice and processing terms, including how enabled AI services handle information.
CHOOSING YOUR GRC PLATFORM
Put the options
side by side.
Compare functionality, AI governance and pricing models across Defensiq and six alternatives. Follow the sources and check the scope that matters to your team.
Compare platformsDEFENSIQ COMPARED WITH
VantaDrataSecureframeISMS.onlineCISO Assistanteramba
Core GRC workflowsAI governance & availabilityPricing & deployment
Official sources and review methodologyCLARITY STARTS HERE
A few things, answered.
Details to help you decide where Defensiq fits.
Security leaders, compliance managers and teams coordinating policies, risks, requirements, evidence and operational work. The Platform page explains how the different workflows connect.
Yes. Sign-up is open and prices are public. Start a 14-day trial of the GRC platform or use AI Governance’s free-forever plan within its basic usage limits, and buy a plan in the app when you’re ready. Enterprise is quoted on request: email hello@defensiq.app.
No. AI Governance Free is a free-forever plan for the basic inventory, assessment and reporting scope. Usage limits apply. AI Governance Advanced is a separate paid add-on.
Framework content is available for ISO 27001, NIS2, DORA and the EU AI Act, among others. Professional includes one framework of your choice. Editions and coverage vary; you decide what applies to your organisation.
AI Governance records and reviews your organisation’s use of AI. Nova helps with project questions, drafts and supported actions inside Defensiq. They have separate access requirements.
No. Professional doesn’t include integrations, API keys, Audit Preparation, supplier management or roadmap. Supplier management, Audit Preparation, roadmap and AI Governance Advanced need Business plus an activated module. See the comparison on the pricing page.
Defensiq helps organise assessments, evidence and follow-up. Your organisation remains responsible for its scope, controls and decisions. Certification and independent assurance require the relevant external assessment.
YOUR NEXT STEP
Start with one AI system.
Use AI Governance Free to register your first AI system today, or try the GRC platform for 14 days.
Start AI Governance freeStart the 14-day trialGRC: 14-day trial · AI Governance: free foreverQuestions about Enterprise? Email hello@defensiq.app