StandardFusion
5.0 out of 5 starsAverage Ratings 0 Ratings
Average Ratings 4 Ratings
Description
RaptorGRC serves as a self-hosted platform focused on governance, risk, and compliance (GRC) for organizations that handle their own compliance-related data. Its no-cost Community Edition provides a variety of features, including policies and frameworks, control assessments, risk registers with visual heat maps, inherent versus residual scoring, treatment plans, incident management, and comprehensive asset and system inventories, along with audit trails and reporting capabilities. Included frameworks are NIST CSF 2.0, NIST SP 800-53 Rev. 5, NCSC CAF, and CMMC 2.0, while users also have the flexibility to import additional frameworks as needed. The platform is designed to operate within a Docker container using Docker Compose, and it can function offline or in air-gapped environments supported by PostgreSQL, SQL Server, or its own integrated SQLite. For those opting for offline use, activation is facilitated by a non-expiring token, ensuring no telemetry data is transmitted. The system's minimum hardware requirements consist of 2 CPU cores, 4 GB of RAM, and 10 GB of available disk space. Additionally, a build that can be deployed on IIS is available upon request, and there are separate options for support and onboarding services to assist users in maximizing the platform's capabilities. With these features, RaptorGRC aims to enhance an organization’s ability to manage compliance effectively.
Description
GRC solution for technology-focused SMBs and Enterprise Information Security Teams. StandardFusion eliminates the need for spreadsheets by using one system of record. You can identify, assess, treat and track risks with confidence. Audit-based activities can be made a standard process. Audits can be conducted with confidence and easy access to evidence. Manage compliance to multiple standards: ISO, SOC and NIST, HIPAA. GDPR, PCI–DSS, FedRAMP, HIPAA. All vendor and third party risk and security questionnaires can be managed in one place. StandardFusion, a Cloud-Based SaaS platform or on-premise GRC platform, is designed to make InfoSec compliance easy, accessible and scalable. Connect what you do with what your company needs.
API Access
Has API
No
API Access
Has API
Yes
Integrations
Common Controls Hub
No
Confluence
No
Jira
No
Jira Work Management
No
Keycloak
Yes
Okta
No
Ollama
Yes
Slack
No
Integrations
Common Controls Hub
Yes
Confluence
Yes
Jira
Yes
Jira Work Management
Yes
Keycloak
No
Okta
Yes
Ollama
No
Slack
Yes
Pricing Details
$0
The Community Edition includes all software modules at no charge, with no per-seat fee or renewal. It is licensed for internal organizational use on infrastructure you control. Optional support agreements and onboarding services are separately priced.
Free Trial
No
Free Version
Yes
Pricing Details
$1800 per month
Multiple licensing tiers available; Cloud and On-Premise
Free Trial
Yes
Free Version
No
Deployment
Web-Based
No
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
Yes
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
Yes
Vendor Details
Company Name
Biff Labs
Founded
2026
Country
United Kingdom
Website
raptorgrc.com
Vendor Details
Company Name
StandardFusion
Founded
2016
Country
Canada
Website
www.standardfusion.com
Product Features
GRC
Auditing
No
Disaster Recovery
No
Environmental Compliance
No
IT Risk Management
No
Incident Management
No
Internal Controls Management
No
Operational Risk Management
No
Policy Management
No
Product Features
Audit
Alerts / Notifications
No
Audit Planning
No
Compliance Management
Yes
Dashboard
Yes
Exceptions Management
Yes
Forms Management
No
Issue Management
Yes
Mobile Access
No
Multi-Year Planning
No
Risk Assessment
Yes
Workflow Management
Yes
Compliance
Archiving & Retention
Yes
Artificial Intelligence (AI)
No
Audit Management
Yes
Compliance Tracking
No
Controls Testing
Yes
Environmental Compliance
No
FDA Compliance
Yes
HIPAA Compliance
Yes
ISO Compliance
Yes
Incident Management
Yes
OSHA Compliance
No
Risk Management
Yes
Sarbanes-Oxley Compliance
Yes
Surveys & Feedback
No
Version Control
Yes
Workflow / Process Automation
Yes
Data Governance
Access Control
Yes
Data Discovery
No
Data Mapping
No
Data Profiling
No
Deletion Management
No
Email Management
No
Policy Management
Yes
Process Management
Yes
Roles Management
Yes
Storage Management
No
Data Privacy Management
Access Control
No
CCPA Compliance
No
Consent Management
No
Data Mapping
No
GDPR Compliance
No
Incident Management
No
PIA / DPIA
No
Policy Management
No
Risk Management
No
Sensitive Data Identification
No
GDPR Compliance
Access Control
Yes
Consent Management
No
Data Mapping
No
Incident Management
Yes
PIA / DPIA
Yes
Policy Management
Yes
Risk Management
Yes
Sensitive Data Identification
No
GRC
Auditing
Yes
Disaster Recovery
No
Environmental Compliance
No
IT Risk Management
Yes
Incident Management
Yes
Internal Controls Management
Yes
Operational Risk Management
Yes
Policy Management
Yes
HIPAA Compliance
Access Control / Permissions
Yes
Audit Management
Yes
Compliance Reporting
Yes
Data Security
Yes
Documentation Management
No
For Healthcare
No
Incident Management
Yes
Policy Training
Yes
Remediation Management
No
Risk Management
Yes
Vendor Management
Yes
Integrated Risk Management
Audit Management
Yes
Compliance Management
Yes
Dashboard
Yes
Disaster Recovery
No
IT Risk Management
Yes
Incident Management
Yes
Operational Risk Management
Yes
Risk Assessment
Yes
Safety Management
No
Vendor Management
Yes
PCI Compliance
Access Control
Yes
Compliance Reporting
Yes
Exceptions Management
Yes
File Integrity Monitoring
No
Intrusion Detection System
No
Log Management
No
PCI Assessment
No
Patch Management
No
Policy Management
Yes
Policy Management
Approval Process Control
No
Attestation
No
Audit Trails
No
Policy Creation
Yes
Policy Library
Yes
Policy Metadata Management
No
Policy Training
No
Reporting / Analytics
Yes
Version Control
Yes
Workflow Management
Yes
Risk Management
Alerts/Notifications
No
Auditing
Yes
Business Process Control
Yes
Compliance Management
Yes
Corrective Actions (CAPA)
Yes
Dashboard
Yes
Exceptions Management
Yes
IT Risk Management
Yes
Internal Controls Management
Yes
Legal Risk Management
No
Mobile Access
No
Operational Risk Management
No
Predictive Analytics
No
Reputation Risk Management
No
Response Management
Yes
Risk Assessment
Yes
Vendor Management
Audit Management
Yes
Contact Management
Yes
Customer Database
No
Self Service Portal
No
Supplier Master Data
No
Transaction History
No
Vendor Maintained Profiles
No
Vendor Managed Inventory
No
Vendor Performance Rating
No
Vendor Qualification Tracking
No