TheGRCoperatingsystem.
Notanotherchecklisttool.
For CISOs, compliance officers and security teams. 60 dashboard modules, 30 standards as guided programmes, 8 portals and 68 integration connectors — one platform, with data hosted in India.
What's new — October 2026
- New workspace shell and navigation, with segmented tabs and one actions cluster per page
- Consistent tables, filters, empty and error states; record pages with side sheets for create/edit
- Module and framework dashboards, plus a Home/executive view
- Plain-English naming pass across every module
- Sage side panel, command palette with keyboard shortcuts, dark appearance, and demo mode from the Help menu
- Framework record pages on the new pattern for ISO 27001 (Statement of Applicability), ISO 22301, ISO 27701, ISO 42001, ISO 27017, and HIPAA
- Hardened self-serve sign-up and password reset, a shared confirmation dialog, and security fixes recorded in the public findings register
Framework record pages on the new pattern are rolling out for:
Labelled as rolling out, not live. HITRUST CSF is available once authorised by HITRUST.
A programme, not a pile of tasks.
Three things make the platform different: standards run their own methods, evidence is reused across standards, and the AI is metered and visible.
30 standards, each with its own method
Every standard runs as a guided programme — scoping, assessment, scoring, evidence, readiness — not a generic checklist. ISO, SOC 2, PCI DSS and other licensed standards open only after you confirm in-app that you hold your own licence; the platform works alongside your licensed copy and we never redistribute standard text.
Explore the standards libraryEvidence once, everywhere
Controls, evidence and findings map across standards through thousands of curated crosswalk mappings, so evidence collected once counts everywhere it applies. A cross-framework readiness comparison is built into the platform, showing how far your current programme already covers another standard. A separate readiness quiz is also available.
Readiness quizAI that is metered and visible
Sage runs on Anthropic Claude and OpenAI embeddings. No customer data is used to train models. 18 domain agents cover evidence, policy, questionnaire, risk, control, audit, vendor, incident, regulatory, privacy, training, ESG, SOX, AI governance, CISO copilot and DPO advisor work — with every AI action metered and visible to you.
See how Sage AI worksPlatform at a glance
One platform.
Every module included.
Controls, evidence and findings map across standards through thousands of curated crosswalk mappings — so evidence collected once counts everywhere it applies.
60 dashboard modules in 11 groups.
Overview and intelligence, risk and controls, compliance and standards, audit and evidence, implementation and operations, policies and documents, IT/assets/incidents, third-party and privacy, people and training, vertical modules (ESG, SOX, AI governance), and portals and system.
8
- Vendor portal
- Questionnaire portal
- DSAR (privacy request) portal
- Auditor portal
- Trust center
- Onboarding
- Public status page
- Changelog
68
In 9 groups: cloud/infra, identity, endpoint, DevOps, monitoring, HR, security ratings, collaboration, and other.
18
Evidence, policy, questionnaire, risk, control, audit, vendor, incident, regulatory, privacy, training, ESG, SOX, AI governance, CISO copilot, DPO advisor and more.
Every AI action metered and visible. No customer data used to train models.
Learning that is measured, not assumed.
- 1,014
- learning entries
- 7,624
- flashcards
- 2,896
- quiz questions
- 2,213
- scenarios
Across 225 frameworks, plus role-based awareness training and phishing simulation.
Tenant isolation in the database, not just the UI.
Compliance AI you can actually govern.
Sage runs on disclosed models, is never trained on your data, and meters every action so you can see what it did.
Disclosed models
Anthropic Claude for generation and OpenAI for embeddings — both named and documented.
Not trained on your data
No customer data is used to train models. That commitment is part of how the platform is operated, not a hidden setting.
Metered and visible
Every AI action is metered and visible to the customer, so you can see what AI did and what it cost.
See your programme, not a checklist.
Book a demo to walk the workspace, or see pricing to compare plans. All modules are included in every plan.