Norrsent — the GRC platform
Enterprise GRC,
engineered for audit.
One platform for risk, compliance, and governance — every action attributed, every change signed.
Risk Management
Replace the risk spreadsheet.
Identification, assessment, mitigation, and controls in one structured register — aligned to ISO 31000.
Threat Management
Threats that stay current.
A canonical threat library of 3,000+ threats by sector and geography — auto-linked to your risks, updated centrally, propagating instantly.
Controls Management
Controls you can actually test.
A reusable library linked to risks, obligations, and policies — with test scheduling and evidence built in.
Incident Reporting
Every incident, a lesson learned.
Structured capture with automated escalation, corrective workflows, and direct linkage to the risk register.
CSRD
CSRD without the chaos.
Double materiality, ESRS-mapped lineage, audit-ready evidence — engineered for the 2026 cycle.
Policy Management
Policies that don't sit in PDFs.
Author, version, distribute, and attest — every policy linked to the controls and obligations it governs. No orphaned documents.
Third-party Risk
Know the risk your suppliers carry.
Structured due diligence, tiered monitoring, and risk profiles linked to contracts — across every vendor in your portfolio.
Audit Management
Audit-ready, any day.
Plan internal audits, capture findings, track remediation — with immutable evidence trails ready for regulator submission on demand.
Norrsent Copilot · Responsible AI
AI that suggests.
Never decides.
A trusted advisor at arms length — built to make your team more effective without taking decisions out of human hands. Bounded, inspectable, and always under your control.
- Threat identification & alerts
- Control suggestions, ranked by fit
- Mitigation planning, every option scored
- Gap analysis across your register
- Draft reports — never signed by AI
Cloud infrastructure & platform security
Infrastructure that isolates and protects your data.
EU-hosted, zero-trust, encrypted end-to-end, and aligned to the frameworks your auditors expect. Your security team will assess us — we’ve published the architecture they’ll need.
Read the full security architecture →Start with Norrsent