Nineteen international frameworks. One unified platform for complete compliance coverage.
Standards
Templates
Assessment Questions
Training Modules
Ready
One platform. Nineteen frameworks. Complete governance. From information security to business continuity, from AI governance to UK certifications, GRCxAI provides unified compliance management across the standards that matter most to your organisation.
Information Security Management System (ISMS)
The global gold standard for information security. Covers 4 domains: Organizational Controls (37), People Controls (8), Physical Controls (14), and Technological Controls (34).
AI Management System (AIMS)
The world's first international AI governance standard. Covers AI risk assessment, data governance, model lifecycle management, bias & fairness, and continuous monitoring.
Business Continuity Management System (BCMS)
Ensure your organisation can continue operating through disruptions, disasters, and crises with systematic preparation and response capabilities. Includes BIA wizard, recovery strategy planning, and crisis communication templates.
Risk Management
The foundational standard for enterprise risk management applicable to any organisation, sector, or risk type. Establish a consistent, organisation-wide approach to identifying, analysing, evaluating, and treating risks.
Anti-Bribery Management System (ABMS)
The global benchmark for anti-bribery management. Demonstrate your commitment to ethical business practices with robust controls against bribery, corruption, and financial crime.
Compliance Management System (CMS)
Build a culture of compliance that goes beyond meeting minimum requirements to creating genuine organisational integrity and stakeholder trust.
Occupational Health & Safety
The world's most widely adopted OH&S standard. Create safer workplaces, reduce incidents, and demonstrate your commitment to worker wellbeing. Our most comprehensive pack with 48 templates including hazard identification, JSA, permits to work, and psychosocial hazard management.
General Data Protection Regulation
The EU's comprehensive privacy framework. All 11 chapters and 99 articles covered including data subject rights, lawful basis, breach notification, and DPIAs.
Trust Service Criteria
The de facto standard for service organizations. Covers Security (required), Availability, Processing Integrity, Confidentiality, and Privacy principles.
Payment Card Industry Data Security Standard
Protect cardholder data with the latest requirements. 12 requirements covering network security, encryption, access control, and security management.
Cybersecurity Framework Version 2.0
The six-function approach: Govern (new in 2.0), Identify, Protect, Detect, Respond, and Recover. Enhanced supply chain and implementation guidance.
Cloud Security Controls
International standard providing guidelines for information security controls applicable to cloud service provision and use. Covers shared responsibility, multi-tenancy, data isolation, and virtual machine security.
Cloud Privacy Protection
Controls for protecting personally identifiable information (PII) in public cloud computing environments. Extends ISO 27001/27002 with privacy-specific requirements for cloud service providers acting as PII processors.
Privacy Information Management System (PIMS)
Extension to ISO 27001/27002 supporting GDPR compliance. Covers requirements for both PII controllers and processors including data subject rights, consent management, and privacy by design.
UK Government Cyber Certification
UK Government-backed certification scheme protecting against common cyber attacks through five technical controls: firewalls, secure configuration, user access control, malware protection, and security updates.
Enhanced UK Cyber Certification
Builds upon Cyber Essentials with independent technical verification including vulnerability scanning, configuration review, and simulated phishing tests by an authorised assessor.
UK Governance-Based Cyber Security
Incorporates Cyber Essentials Plus with additional controls covering risk management, incident response, business continuity, and security awareness. A stepping stone towards ISO 27001 for UK organisations.
Data Compliance Certification
UK data protection certification demonstrating GDPR compliance for SMEs. Covers lawful basis, privacy notices, data subject rights, breach notification, and Records of Processing Activities (ROPA).
Managed Service Provider Assurance
Specialist certification for MSPs and IT support companies. Addresses unique security challenges of managing multiple client environments including privileged access management, multi-tenant security, and supply chain security.
Beyond our 19 compliance standards, GRCxAI includes a purpose-built module for Provision 29 of the UK Corporate Governance Code. Designed for UK-listed companies, it provides a structured approach to identifying, assessing, and reporting on principal risks and uncertainties.
Start managing all 19 standards from a single, unified platform.