Governance · Risk · Compliance
Assess POPIA, GDPR and AI governance obligations, manage findings, evidence and risk, and give your executives and Board a clear view of what matters.
Every organisation's records are separated and enforced in the database itself.
Administrators, GRC managers, assessors, reviewers and executives — with multiple roles per person.
Administrative actions and recovery events are recorded permanently.
Controls are supported by evidence, so compliance claims can be demonstrated, not asserted.
Each package bundles the frameworks and platform capabilities that suit a particular stage of compliance maturity. Packages are quoted according to your scope and requirements.
Establish the core foundations of a practical POPIA compliance programme.
Ideal for: Small and medium organisations that need a structured POPIA compliance programme.
Move beyond compliance assessment into active privacy risk governance.
Ideal for: Organisations requiring formal privacy risk management, policy governance, third-party oversight and executive reporting.
Manage POPIA and GDPR through a unified privacy governance programme.
Ideal for: Organisations operating across POPIA and GDPR requirements or managing international privacy obligations.
Build governance, risk and executive oversight around the use of artificial intelligence.
Ideal for: Organisations adopting AI that need structured governance, risk management and Board visibility.
Optional capabilities can be added to any package as part of your quotation.
| Capability | POPIA Essentials | POPIA Professional | Privacy Governance Suite | AI Governance Suite |
|---|---|---|---|---|
| POPIA assessment | Included | Included | Included | Optional |
| GDPR assessment | Not included | Not included | Included | Optional |
| AI governance | Not included | Not included | Optional | Included |
| Evidence management | Included | Included | Included | Included |
| Findings and actions | Included | Included | Included | Included |
| Advanced risk register | Not included | Included | Included | Included |
| Policy management | Not included | Included | Included | Included |
| Vendor / operator risk | Not included | Included | Included | Optional |
| Executive reporting | Not included | Included | Included | Included |
| Board reporting | Not included | Included | Included | Included |
| AI risk analysis | Not included | Optional | Included | Included |
| vCISO narrative analysis | Not included | Optional | Included | Included |
Solutions are tailored to organisation size, scope and framework requirements. Quotations may include once-off setup and activation, a recurring subscription and optional advisory or implementation support. Additional frameworks and modules can be added as your programme matures.
Every package follows the same governance workflow, scaled to the capabilities your organisation needs.
Assess
Work through a structured framework assessment with guidance on every requirement.
Identify gaps
Weak and missing controls become recorded findings, not notes in a spreadsheet.
Link evidence
Attach the documents and records that support each control.
Understand risk
Translate gaps into scored privacy, security and governance risk.
Assign remediation
Give every action an owner and a due date.
Track progress
Follow delivery across 30, 60 and 90 day horizons.
Report to executives and the Board
Produce board-ready reporting from the same underlying data.
GRC Portal was built for organisations that must demonstrate accountability under POPIA and, increasingly, international privacy and AI governance expectations. The platform structures the work of assessment, evidence, remediation and reporting so that leadership can see the real position at any time. It supports your compliance programme; it does not replace legal advice or certify compliance.
Do you publish pricing?
Our solutions are quoted based on the frameworks, features and scope required by your organisation.
Can we add more frameworks later?
Yes. Additional frameworks and platform capabilities can be enabled as your governance requirements evolve.
Is payment completed through the portal?
No. Commercial arrangements and quotations are currently handled directly with our team.
How is the platform activated?
Once commercial arrangements are confirmed, your organisation's tenant is provisioned and the selected frameworks and modules are activated.
