Consolidate compliance obligations from law, contracts and internal policy into a single register — linked to controls, evidence and corrective actions.
Obligations sit in spreadsheets across many departments. When the regulator asks, it takes days to pull together.
The organisation has control processes and legal obligations, but nobody can reconcile which obligation is missing a control.
Attachments live in email. It is unclear who submitted, who assessed, and on what grounds the conclusion was reached.
A new regulation is issued, but there is no mechanism to identify which obligations are affected and which controls must change.
Two representative screens illustrating the product interface. The figures shown are sample data.
Two separate groups of measures: the compliance outcome of obligations in force, and the workload still to be done.
Each obligation passes through six stages; compliance check campaigns run alongside them in the four steps of ISO 19011.
| Who it fits | When to use it | Data to prepare |
|---|---|---|
| Enterprises with many sector obligations: finance, banking, insurance, healthcare, education | Ahead of a review period or a sector inspection | The list of applicable regulations |
| Groups with several member companies and legal entities | When consolidating compliance after a merger or branch expansion | Org structure and compliance owners |
| Organisations building a compliance management system to ISO 37301 | When moving from spreadsheets to a system | The existing control list |
This module runs on its own. Once linking is on, all three share the risk register, control library and evidence store — see the platform architecture diagram.
RiskTech supports organisations operating to the standards below. This is not a certification claim for the software or for the organisations using it.
A 30-minute demo following the role you hold. No data preparation needed beforehand. We respond within one business day.
