Prove compliance. Get certified.
Frameworks, risks, audits and evidence in one Mitral module.
Some of the organizations that we had the pleasure to work with
One control. Every framework.
Map a control once and reuse it across all your certifications.
Your whole GRC program, one module
From first risk assessment to certification day.
Multi-framework compliance
150+ built-in frameworks, plus your own.
Risk management
ISO 27005, EBIOS RM, quantification and BIA.
Audit & evidence
Always-fresh evidence, with automatic reminders.
Third-party risk
Assess, monitor and report on suppliers.
GRC at scale
Many teams, many projects, one view.
AI-augmented GRC
Smart suggestions. Your data stays yours.
Your posture, at a glance
The hub of the Mitral stack
Assets, alerts and pentest findings become evidence automatically.
Secure by design
Get audit-ready, then stay there
See Mitral GRC on your own frameworks.
Frequently asked questions
What is the support model?
The standard support plan covers business hours over a business week. Pro subscriptions include priority support. For critical systems that need more, reach out to our team to discuss the options.
I need custom features.
Custom features are available on the Pro plan, based on quotation. Any customization is covered by the Pro support plan.
I need help setting up GRC practices.
Beyond the Mitral GRC module, you can request a quotation for our GRC acceleration package, which includes coaching sessions and interviews to set up GRC practices for your organization.
How is the platform itself secured?
Our security program is aligned with NIST CSF and OWASP ASVS, and we rely on ISO 27001 certified hosting providers.
Which frameworks are supported?
Over 150 built-in frameworks, including ISO 27001, SOC 2, NIS2, DORA and GDPR. You can also create your own custom frameworks.
Can I reuse work across frameworks?
Yes. Controls are mapped automatically across frameworks, so you assess once and reuse the result everywhere.
Is my data used to train AI models?
No. AI features work with your own models, and your GRC data is never used to train external models.
