Oneplatform.
Thewholeprogramme.
Compliance Enablers is a multi-tenant GRC platform at app.complianceenablers.com for CISOs, compliance officers and security teams. Run standards as guided programmes, manage risk and evidence, and bring vendors, auditors and the rest of the programme into one workspace — with data hosted in India.
Walk the platform. No login required.
Click through the areas your team will live in every day — from the dashboard to AI-assisted audits.
See your programme at a glance
A Home/executive view of posture, open risks and pending tasks in one place.
Sage AI runs on Anthropic Claude for generation and OpenAI for embeddings. No customer data is used to train models, and every AI action is metered and visible.
60 dashboard modules. 11 groups.
The workspace is organised around the programme, not around a product catalogue. Each group below is a working area in the platform.
Overview & intelligence
A workspace area for overview and intelligence.
Risk & controls
A workspace area for risk and controls.
Compliance & standards
Standards run as guided programmes with their own scoping, assessment, scoring and evidence.
Audit & evidence
A workspace area for audit and evidence.
Implementation & operations
A workspace area for implementation and operations.
Policies & documents
A workspace area for policies and documents.
IT/assets/incidents
A workspace area for IT, assets and incidents.
Third-party & privacy
A workspace area for third-party and privacy work.
People & training
Role-based awareness, phishing simulation and Sage Certified learning.
Vertical modules
Vertical modules (ESG, SOX, AI governance).
Portals & system
The portals for people outside the organisation, plus workspace administration.
8 portals for the people who need to take part.
Vendors, questionnaire recipients, data subjects, auditors, prospects and new users get a portal surface.
Vendor portal
Questionnaire portal
DSAR (privacy request) portal
Auditor portal
Trust center
Onboarding
Public status page
Changelog
Evidence once. Reused across standards.
Controls, evidence and findings map across standards through thousands of curated crosswalk mappings. Evidence collected once counts everywhere it applies, and a free readiness comparison shows how far an existing programme already covers another standard.
Standards to controls
Each standard keeps its own method, with controls and evidence mapped through curated crosswalk mappings.
Evidence to audit
Evidence collected once can be reused wherever the crosswalk mappings apply.
People to programme
The eight portals give people outside the organisation a surface to take part.
18 domain agents. Not a chatbot.
Sage runs on Anthropic Claude for generation and OpenAI for embeddings. No customer data is used to train models. Every AI action is metered and visible to the customer, so you can see what AI did and what it cost.
Learning with numbers you can point at.
Role-based awareness training and phishing simulation sit on a measured learning library.
68 integration connectors in 9 groups.
Connect the systems that produce evidence.
Cloud/infra
AWS, Azure, GCP, Kubernetes, Terraform
Identity
Okta, Entra/Azure AD, Auth0, JumpCloud
Endpoint
Intune, Jamf, CrowdStrike, SentinelOne
DevOps
GitHub, GitLab, Jira, Snyk, SonarQube
Monitoring
Datadog, Splunk, PagerDuty
HR
BambooHR, Workday, Rippling
Security ratings
Qualys, Tenable, BitSight, Wiz
Collaboration
Slack, Teams, Google Workspace, SharePoint
Other
ServiceNow, DocuSign, KnowBe4, webhooks
Built into the platform, not bolted on.
The controls a CISO would ask about first, described plainly. Data is hosted in India.
Tenant isolation
- Per-tenant isolation enforced in the database with row-level security
- Isolation is a platform boundary, not a UI setting
- Auditor-portal redaction keeps shared evidence scoped
Authentication
- MFA
- SSO via OIDC/SAML
- SCIM provisioning
- LDAP
Audit and visibility
- Audit logs record actions in the workspace
- AI actions are metered and visible to the customer
- A published security findings register is kept by the engineering team
- A public status page communicates availability
Data protection
- Encrypted sensitive fields
- Data hosted in India
- No customer data is used to train AI models
Useful before the onboarding call.
Starter packs that prepare the workspace for your chosen standard
A framework readiness score as the single headline number
Honest "not yet available" states rather than empty screens
What comes next.
Planned work, no dates. We would rather label it than pretend it shipped.
Program-centric workspaces
Each standard becomes a complete programme with its own tabs, and the common modules work inside that programme context.
Migration coach
Bulk upload existing policies, spreadsheets, evidence and screenshots; AI files them into the right modules and shows what is still missing.
Programme completeness scoring
See what is complete, what is missing, and which remediation tasks are assigned to which owner.
More standards on request
Additional standards on request, with HITRUST available once authorised by HITRUST.
Frequently Asked Questions
Ready to see
the platform?
Book a demo to see how 60 dashboard modules,30 standards, 8 portals and 68 integration connectors work as one programme.