About GRC Eye

What GRC Eye is

GRC Eye (pronounced “GRC Eye”, and sometimes written GRC Eye or GRC-Eye) is an all-in-one governance, risk and compliance SaaS platform. It gives CISOs, compliance leads and security teams a single system for the work that is usually scattered across dozens of spreadsheets, shared drives and email threads.

The name is a compound of GRC — governance, risk and compliance — and eye, for the continuous visibility the platform is built to give you over your control environment. The company slogan is “Keep an eye on risk.”

What the platform does

• Compliance across 85+ built-in frameworks — ISO/IEC 27001, SOC 2, GDPR, PCI DSS, NIST CSF, NIS2, DORA, the EU AI Act and more, with over 5,000 pre-loaded controls, assessed in parallel with evidence mapped once and reused across every framework it satisfies. Eight Saudi regulatory frameworks (NCA ECC, CCC, DCC, CSCC, OTCC, TCC, SAMA CSF and the SDAIA PDPL) ship in their official English and Arabic wording, cross-mapped to NCA ECC.
• Risk management — a risk register scored on a configurable matrix, inherent, residual and target risk, appetite thresholds, risk scenarios linking threats, vulnerabilities, assets and controls, a heatmap and treatment plans.
• Audit management — internal and external audits end to end: auditor assignment, control checklists, findings, remediation tracking and PDF reporting, plus a dedicated portal for external auditors.
• Policy and document generation — 27 document types generated by AI against your industry, size and selected frameworks, with approval workflows and employee acknowledgement.
• Third-party risk management — vendor register, AI contract review, risk cartography, prescreening questionnaires and a vendor portal with e-signature.
• Assets and security operations — asset inventory with CIA valuation and cartography, vulnerability management with scanner connectors, a CVE knowledge base, a threat library and incident tracking.

Where the AI runs

Private AI on your terms: run GRC Eye on-premises with a local model — zero data egress — or connect your own AI endpoint (Ollama or OpenAI-compatible). For regulated customers, and for anyone whose compliance posture would be undermined by shipping audit evidence to an external provider, the Private edition keeps the application, the database and the model on infrastructure you control.

Who builds GRC Eye

GRC Eye is built and operated from Tunisia, and is developed alongside SilentWolf, a cybersecurity company working in the same market. The platform serves customers across Europe, the Middle East and North Africa, with the interface available in English, French and Arabic — including full right-to-left support.

Talk to us

Sales enquiries go to sales@grceye.com, support to support@grceye.com. You can also use the contact form, browse the frequently asked questions, or read about how we secure the platform.

If you want to see it rather than read about it, walk through how GRC Eye works or start a free trial — no credit card required.