WARNINGThis page is considered a work in progress and is more for example than truth.
Compliance/GRC Product Matrix
Feature Matrix - Core Updated: Oct 2025 / Feature Data is updated daily.
Edit Product Filters & Export Options
Compliance Scorecard
Ideagen
MetricStream
OneTrust
RSA
ServiceNow
ZenQMS
✓
Available
✗
Not available
Limited
Limited feature in some aspect
Built-in
Feature is built into the product
Integration
Available via integration with another product
Plugin/Add-on
Available via plugin or add-on, may require additional subscription
Select column for better visibility
Last Updated
Last Updated date. If missing, data is not confirmed to be current.
Export Options
Compliance Scorecard | Ideagen | MetricStream | OneTrust | RSA | ServiceNow | ZenQMS | |
|---|---|---|---|---|---|---|---|
| Compliance Scorecard | Ideagen Compliance Management | MetricStream GRC Platform | OneTrust Privacy & Compliance | RSA Archer | ServiceNow Governance, Risk & Compliance | ZenQMS Quality Management | |
| — | — | — | — | — | — | — | |
| Company | |||||||
Parent Parent Company | Compliance Scorecard, Inc. | Ideagen PLC | MetricStream, Inc. | OneTrust, LLC | RSA Security LLC | ServiceNow, Inc. | ZenQMS, Inc. |
Employee Size Size of the company or division | 50-100 employees | 1,000+ employees | 1,000+ employees | 2,000+ employees | 1,500+ employees | 20,000+ employees | 50-100 employees |
Founded Year the company was founded | 2015 | 1993 | 2001 | 2016 | 1982 | 2004 | 2012 |
Headquarters Location of company headquarters | United States | Nottingham, United Kingdom | San Jose, California, USA | Atlanta, Georgia, USA | Bedford, Massachusetts, USA | Santa Clara, California, USA | United States |
Public/Private Whether the company is publicly traded or privately held | Private | Public (AIM: IDEA) | Private | Private | Private | Public (NYSE: NOW) | Private |
Acquisition Details about any acquisitions | None | None | None | None | Acquired by Symphony Technology Group in 2020 | None | None |
| Architecture & Deployment | |||||||
Cloud Cloud-based deployment option | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
On Premises On-premises deployment option | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Hybrid Supports both cloud and on-premises deployment options | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
SaaS Software as a Service delivery model | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Private Cloud Ability to deploy in a private cloud environment | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Multi-Tenant Multi-tenant architecture for MSPs | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
White Label Ability to rebrand the solution with your own branding | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
API Access Provides API for custom integrations | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Mobile App Dedicated mobile application for access | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Compliance Frameworks | |||||||
HIPAA Compliance Health Insurance Portability and Accountability Act | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
GDPR Compliance General Data Protection Regulation | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
SOC2 Compliance Service Organization Control 2 | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
PCI DSS Compliance Payment Card Industry Data Security Standard | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
ISO 27001 Compliance Information Security Management System | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
NIST Compliance National Institute of Standards and Technology | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
COBIT Compliance Control Objectives for Information Technologies | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
ITIL Compliance Information Technology Infrastructure Library | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
FISMA Compliance Federal Information Security Management Act | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
FERPA Compliance Family Educational Rights and Privacy Act | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Risk Assessment | |||||||
Risk Assessment Conduct comprehensive risk assessments | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Risk Identification Identify potential risks | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Risk Analysis Analyze identified risks | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Risk Evaluation Evaluate risk severity and impact | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Risk Prioritization Prioritize risks by severity | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Risk Mitigation Develop risk mitigation strategies | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Risk Monitoring Monitor risk levels over time | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Risk Reporting Generate risk reports | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Risk Dashboard Visual dashboard for risk management | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Risk Register Maintain risk register | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Policy Management | |||||||
Policy Creation Create and manage policies | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Policy Templates Pre-built policy templates | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Policy Approval Policy approval workflows | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Policy Distribution Distribute policies to stakeholders | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Policy Acknowledgment Track policy acknowledgments | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Policy Versioning Version control for policies | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Policy Review Schedule policy reviews | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Policy Compliance Monitor policy compliance | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Policy Violations Track policy violations | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Policy Audit Audit policy effectiveness | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Audit Management | |||||||
Audit Planning Plan and schedule audits | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Audit Execution Execute audit procedures | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Audit Documentation Document audit findings | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Audit Findings Track audit findings | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Audit Recommendations Generate audit recommendations | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Audit Follow-up Follow up on audit findings | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Audit Reporting Generate audit reports | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Audit Scheduling Schedule recurring audits | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Audit Workflows Automated audit workflows | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Audit Evidence Collect and store audit evidence | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Documentation Management | |||||||
Document Management Manage compliance documents | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Document Control Control document access and versions | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Document Approval Document approval workflows | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Document Distribution Distribute documents to stakeholders | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Document Retention Manage document retention policies | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Document Disposal Secure document disposal | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Document Search Search compliance documents | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Document Categorization Categorize documents by type | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Document Metadata Manage document metadata | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Document Workflows Automated document workflows | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Training & Awareness | |||||||
Training Management Manage compliance training | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Training Tracking Track training completion | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Training Certification Issue training certificates | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Awareness Programs Security awareness programs | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Phishing Simulation Simulate phishing attacks | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Training Assessments Assess training effectiveness | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Training Scheduling Schedule training sessions | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Training Materials Manage training materials | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Training Reports Generate training reports | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Compliance Education Educational content on compliance | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Incident Management | |||||||
Incident Tracking Track compliance incidents | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Incident Response Manage incident response | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Incident Investigation Investigate incidents | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Incident Documentation Document incident details | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Incident Reporting Report incidents to authorities | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Incident Notification Notify stakeholders of incidents | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Incident Escalation Escalate incidents as needed | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Incident Resolution Track incident resolution | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Incident Analysis Analyze incident patterns | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Lessons Learned Capture lessons learned from incidents | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Reporting & Analytics | |||||||
Compliance Reporting Generate compliance reports | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Executive Dashboards Executive-level dashboards | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
KPI Tracking Track key performance indicators | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Metrics Analysis Analyze compliance metrics | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Trend Analysis Analyze compliance trends | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Benchmarking Benchmark against industry standards | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Custom Reports Create custom reports | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Scheduled Reports Schedule automated reports | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Report Distribution Distribute reports to stakeholders | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Data Visualization Visualize compliance data | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Integration & Automation | |||||||
PSA Integration Integration with Professional Services Automation tools | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
RMM Integration Integration with Remote Monitoring and Management tools | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Ticketing Integration Integration with ticketing systems | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
CRM Integration Integration with Customer Relationship Management | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Active Directory Integration with Active Directory | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
LDAP Integration LDAP directory integration | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
SSO Integration Single Sign-On integration | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Automation Workflows Create automated workflows | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Scheduled Tasks Schedule automated tasks | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Data Synchronization Sync data with external systems | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Security & Access Control | |||||||
Encryption Encrypt sensitive data | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Access Control Role-based access control | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
User Authentication Secure user authentication | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Multi-Factor Authentication Support for MFA | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Audit Logging Comprehensive audit trails | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Data Retention Configurable data retention policies | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Backup & Recovery Backup and disaster recovery capabilities | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Data Export Export data in various formats | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Data Import Import data from other systems | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
Secure Communication Secure communication channels | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |