Drata
Continuous control monitoring and audit readiness across security frameworks.
Regulatory Compliance
Compliance automation (GRC)
Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.
Addresses 88 stories in our coverage in the last 90 days 2 products that provide it
What it is
Software that maps your controls to frameworks, collects evidence automatically from your systems, tracks risks and tasks, and shows where the gaps are.
How to value it
Compliance work run in spreadsheets is slow, error-prone and drifts away from reality. Automation cuts audit preparation and, more importantly, shows management where controls are actually failing, which is what NIS2 Art. 20 expects them to oversee.
Questions to ask a vendor
- 1Which frameworks are supported out of the box, including NIS2 and DORA?
- 2Which of our systems can it collect evidence from automatically?
- 3Does it include a risk register and supplier management, or only control checklists?
- 4Can auditors get read access directly?
For your risk register
- Risk
- Compliance gaps stay unknown to management until an audit or an incident.
- Control
- GRC platform with automated evidence and a live risk register.
- Owner
- GRC lead.
- Measure
- Controls with current evidence.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Vanta
Automated evidence collection and continuous monitoring for ISO 27001, SOC 2, NIS2 and other frameworks.
Recent stories it addresses
224 stories in total- 16 Oct 2026Norwegian DPA fines Xandr EUR 8 600 000 for unlawful processing of personal data
Norwegian DPA fines Xandr EUR 8.6M for unlawful processing of sensitive personal data.
- 14 Oct 2026Garante per la protezione dei dati personali (Italy) - 710/2026
Italy's DPA fines IQVIA €7M for GDPR violations after patient data breach.
- 13 Oct 2026Datatilsynet (Norway) - 20/03541-37
Norway's Datatilsynet fines Xandr €8.5M for unlawful processing of Grindr user data.
- 13 Oct 2026Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation
Xandr fined €8.6M for illegally relaying Grindr users' sensitive data.
- 12 Oct 2026Norway fines Microsoft ad firm $9.6 million over Grindr data sharing
Norway fines Microsoft ad firm Xandr $9.6M for unlawful Grindr user data sharing.
- 12 Oct 2026Italian DPA fines Wind Tre EUR 16 700 000 for unlawful telemarketing and data protection infringements
Italian DPA fines Wind Tre EUR 16.7M for unlawful telemarketing and data protection infringements.
- 12 Oct 2026Privacy win: Norwegian Authority fines Microsoft’s Xandr € 8.5 Million
Norwegian Authority fines Microsoft's Xandr €8.5M for GDPR violations related to Grindr data.
- 11 Oct 2026AZOP (Croatia) - Croatian Gambling Operator
Croatian DPA fines gambling operator €2.59M for GDPR violations related to biometric data collection.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.