What makes BrickGRC modular?

BrickGRC is built from independent bricks — each framework, workflow, and integration is its own module. You pick only what you need (ISO 27001, SOC 2, GDPR, NIST, custom templates) and assemble them without buying an all-or-nothing platform.

Which compliance frameworks does BrickGRC support?

ISO 27001, SOC 2 Type II, GDPR, NIST CSF, HIPAA, and PCI DSS 4.0 are available as guided bricks. You can also build custom-template bricks for internal frameworks or sector-specific standards.

Can I bring my own LLM API key?

Yes. On Professional and Enterprise plans, BrickGRC supports BYO LLM keys for OpenAI, Anthropic, and Gemini, so AI assists run against your provider with your own data isolation and billing.

Where is my data stored and is it used to train AI?

Your data, your rules. BrickGRC isolates customer data per tenant with EU-resident hosting options and never trains models on your data. Embeddings and AI evidence stay inside your tenant boundary.

How does BrickGRC compare to Vanta or Drata?

Vanta and Drata bundle integrations, frameworks, and audits into a single rigid product. BrickGRC is modular: you pick the bricks you need, swap them as your stack evolves, and avoid vendor lock-in or all-or-nothing pricing.

Is there a free trial or assessment?

Yes. The free compliance assessment runs in about 15 minutes with no credit card or signup, and the Free plan lets you keep working in BrickGRC with limited bricks.

Does BrickGRC support custom audit workflows?

Yes. The Professional plan unlocks the workflow builder so you can design audits, evidence-collection flows, approvals, and automations tailored to your organization.

BrickGRC — GRC Software for ISO 27001, SOC 2 & GDPR

How it works

Three steps. No spreadsheets.

Pick your bricks, plug in your AI, ship audit-ready reports. The platform handles the connective tissue.

Pick your bricks

ISO 27001, SOC 2, GDPR, ISO 42001, EU AI Act, NIST AI RMF — pick only the frameworks your customers actually require. Stack more later. No all-or-nothing tax.

Plug in your AI key

OpenAI, Anthropic, Azure OpenAI, or your own local model. AI evidence linking and maturity scoring run against your provider — your billing, your audit trail, your data isolation.

Ship audit-ready reports

One-click export of the Statement of Applicability, control matrix, evidence with citations, internal audit findings, and management responses. Auditor-ready format. Skip the late-night formatting.

Who is this for?

Three teams. Three pain points.

Self-identify, then pick the brick that fits.

Startup chasing SOC 2

Pre-built SOC 2 template, AI-assisted evidence linking, and a Statement of Applicability you can hand to your auditor. Skip the spreadsheet phase entirely.

Existing ISO 27001 team

Replace the Excel + email patchwork with a single source of truth. Re-certification without the panic — Annex A mapping, evidence, and workflows in one place.

Org adopting AI

ISO 42001 and EU AI Act readiness with your own AI keys. Inventory your AI systems, run risk assessments, and ship audit-ready reports — without sending sensitive data to a vendor.

See It in Action

Built for compliance teams
who want results, not busywork

Two Ways to Work

Choose Guided mode for step-by-step walkthroughs with AI coaching, or Expert mode for full control with bulk editing and direct evidence management.

Guided

Expert

Brick Market

Browse and install AI engines, templates, and integrations in one click.

Custom Workflows

Define states, transitions, triggers, and actions that match your process.

BrickGRC Workflows — custom workflow builder with states and transitions

What is BrickGRC?

A GRC platform built from modular bricks

BrickGRC is a Governance, Risk, and Compliance platform where every capability is a modular brick you assemble. Templates, workflows, integrations, AI engines — each one is an independent building block you combine to create something uniquely yours.

"Just like building a house — you pick the bricks, choose the layout, and construct something that's entirely your own."

The Building Blocks

Everything you need,
one brick at a time

Each feature is a modular brick — pick the ones you need and stack them into your perfect compliance program.

Compliance Frameworks

Templates

Pre-built compliance frameworks — ISO 27001, SOC 2, GDPR, and more — or build your own from scratch.

Audits & Assessments

Engagements

Run audits and assessments with guided workflows that keep your team on track from start to finish.

Process Flows

Workflows

Define states, transitions, and milestones. Your process, your rules — workflows that bend to fit your needs.

Evidence Management

Documents

Upload, link, and auto-match evidence to controls with AI. Every document, organized and traceable.

Extensible Catalog

Brick Market

Browse and install AI engines, compliance templates, auth providers, and your own custom integrations. Extend BrickGRC your way.

AI Compliance Assistant

AI-Powered

Compliance Coach, auto-scoring, evidence auto-linking — use our built-in AI or bring your own LLM subscription. AI that works alongside your team, not instead of it.

Compliance Reporting

Reports

Generate configurable compliance reports from your engagement data. Clear insights, ready for stakeholders and auditors.

Access Control

Team & Permissions

Role-based access, invite members, control who sees what. Built for teams of every size.

100% Data Ownership

Your data. Your rules.
Always.

Your compliance evidence stays in your environment. Connect OpenAI, Anthropic, Azure OpenAI, or a local model — your provider, your billing, your audit trail. AI processing runs against the keys you provide. Per-tenant isolation by default; we host in the EU.

Use OpenAI, Anthropic, Azure OpenAI, or local models — your provider, your terms

Per-tenant isolation — your evidence is never mixed across customers

EU-resident hosting (Frankfurt) — for GDPR, Schrems II, and data-residency requirements

Export everything, any time — no vendor lock-in

Why Bricks?

Every organization is different.
Your GRC should be too.

BrickGRC doesn't force you into a rigid mold. You pick the bricks and build exactly what you need — no more, no less. Start with a pre-built framework or construct something entirely custom.

Customizable Templates Use proven frameworks or create your own from a blank canvas
Flexible Workflows Define your own states, transitions, and approval chains
Modular Integrations Add AI engines, cloud connectors, and tools from the Brick Market
Total Data Ownership Your LLM keys, isolated tenancy, full data export — you own everything
Your Compliance, Your Way No two setups need to look the same — and that's the point

Templates

Workflows

AI Engine

Documents

Auth

Reports

Teams

Market

Plans & Pricing

Simple, transparent pricing

See where you stand for free. Upgrade when you're ready to fix it.

Start Here

Free Assessment

$0 forever

No credit card required

What you get

Full assessment + all scores
1st gap preview (teaser)
5 AI coaching questions
2 document uploads
1 team member
Results in 15 minutes

Not included

Full gap list (all controls)
PDF report download
Evidence pack (ZIP)
Remediation recommendations
Re-assessment & platform access

Get Your Score →

After your assessment

Unlock full report — $49

One-time purchase. Full gap list, PDF & evidence ZIP. Credited toward any plan if you upgrade.

Starter

$124 /mo

Billed annually

1 guided framework brick
3 integration bricks
200 AI assists/mo
5 users
3 engagements
5 GB storage

See full details Start Free Trial

Professional

$416 /mo

Billed annually

5 guided + 3 expert bricks
Unlimited integrations
BYO LLM (own API key)
2,000 AI assists/mo
Custom templates & workflows
Custom reports
25 users

See full details Start Free Trial

Enterprise

Custom

Tailored to your needs

Unlimited everything
SSO (SAML / OIDC)
API access
Dedicated support

See full details Contact Sales

All plans include a 7-day free trial with full Professional features. No credit card required.

All-in-one alternative

Why teams pick BrickGRC over all-in-one GRC platforms

Tired of rigid bundles where you pay full price for features you never use? BrickGRC is modular, AI-native, and BYO-key by default — pick only the bricks you need.

Feature	BrickGRC	Traditional GRC	All-in-one platforms
Modular architecture	✓	✗	✗
BYO LLM keys (data privacy)	✓	✗	~
AI-assisted evidence linking	✓	✗	✓
Custom frameworks from scratch	✓	~	✗
Custom workflows & triggers	✓	~	✗
Brick Market / extensibility	✓	✗	~
Guided + Expert audit modes	✓	✗	✗
Self-hosted option	Soon	✓	✗
Starts at	$124/mo	$500+/mo	$300+/mo

	Starter	Professional
Guided work
Expert work
Evidence linking
Compliance & maturity scoring
PDF reports (default template)
Engagement projects
Employee management
2FA / OAuth login
Custom report design & content	—
Fine-grained role permissions	—
API access + API keys	—	—
SSO (SAML / OIDC)	—	—

Pass ISO 27001 & SOC 2 faster.
Without spreadsheet chaos.