AI-native GRC, built in Switzerland

Most GRC solutions want all your trust on day one. We earn it one step at a time.

The most flexible all-in-one GRC platform: agentic AI that earns your trust step by step, and Swiss experts as extra hands to keep you compliant all year.

Sample company. The assistant proposes, you confirm.

Sample company. The assistant proposes, you confirm.

35+ years of experience50+ frameworksISO 27001 certified

Does this sound like you?

Your name is on the report. The work behind it is everywhere.

You answer for the program. But the evidence sits in spreadsheets, tickets and inboxes, the experts you need are hard to find, and the board wants answers now.

The audit rush

“Our ISO 27001 audit is in 60 days, and our evidence is scattered across 40 Excel tabs and Jira tickets.”

Fix: your evidence in one place, each item linked to its control.

Assure →

Unclear legal duties

“NIS2 and the AI Act apply to us now, and we don't know how to turn the legal text into IT tasks.”

Fix: see how Acuna GRC turns legal text into work.

Implement →

The client questionnaire

“Big clients keep sending us 200-question security assessments, and it slows our sales by weeks.”

Fix: draft answers from your approved answers library, and our experts can help you review them.

Trust Center →

The forgotten risk map

“We mapped our risks last year. Nothing has been updated since.”

Fix: each risk sits next to the controls, KPIs and threats behind it, with their dates.

Operate →
Three ways that don't work:A tool that only stores the work.Hiring a full team you can't find or afford.An AI you have to trust all at once.

The platform

One connected control library. Every framework, task and proof in one place.

Requirements, measures, tasks and evidence are already linked, so you can follow the chain from a legal text to its proof.

Plan

Run

Prove

AI & experts

Map many frameworks at once

One control, many frameworks. Do the work once.

92%less time preparing for audits, with controls mapped across frameworks
3xmore productive: controls are checked automatically, so fixes start sooner
10xfaster answers to customer security questions

Measured across Acuna GRC customers. See the frameworks we cover →

Add-on modules

Integrations

Evidence from the tools you already use.

Connectors bring live evidence into your controls. API keys let your own systems push data in, and we build new connectors on request.

Animation: a robot arm takes data from Microsoft Entra ID, Microsoft Defender, Azure, AWS, GitHub and Google Workspace and puts it on a belt into your workspace in Acuna GRC, where your evidence, KPIs and security alerts stay current.

  • Entra ID
  • Okta
  • Google Workspace
  • JumpCloud
  • Defender
  • CrowdStrike
  • Intune
  • Jamf Pro
  • AWS
  • Azure
  • Google Cloud
  • Microsoft 365
  • GitHub
  • GitLab
  • Personio
  • KnowBe4
  • Acronis
  • 100+ connectors in all

Your tools feed Acuna GRC

Connectors pull security data on a schedule, and API keys let your own systems push data in. Every call is logged.

Missing a connector? We build it.

We design the integration around your setup. Every native connector we have exists because a client needed it.

Fixes land where your team works

Tasks sync both ways with Jira and ServiceNow.

See all integrations →

Meet Aiko

Ask for the work. Check the why. Give it more when you're ready.

Aiko is the AI assistant inside Acuna GRC. It prepares real compliance work, with a reason and a source for every step, and it follows the same access rules as everyone else.

Aiko
Reading · Comply
Which requirements have no measure linked?

You set the pace

Suggest only: Aiko explains how. You do it. Ask me first (default): Aiko prepares it. You confirm. Do it and tell me: Aiko does it and shows you what it did.

Some things always ask first

Admins set the highest mode for each action. Changing a risk score, work done for someone else, more than 3 changes at once or 30 in an hour, and anything after Aiko has read supplier, web, privacy request or group data in the same chat always ask first.

Every step on record

Every Aiko action goes into the Activity log, kept for 12 months, with search and date filters. When someone asks why, you can show them.

Our experts

The people behind your program.

Aiko's modes set how much the software does. The Service Dial sets how much these experts do. You choose both.

Alexis Hirschhorn
CEO of Acuna

Alexis Hirschhorn

Bio

Cyber security and governance consultant with 20+ years advising multinationals, governments and international organizations.

Cyber & information securityCloud securityRisk & governance consultingCertified Lead Auditor
Henri Haenni
CEO of Abilene Group

Henri Haenni

Bio

Business continuity and information security expert, certified international trainer and lecturer at Sorbonne University Paris 1.

Business continuityRisk managementInformation security governanceSorbonne University lecturer
Laura Menetrey
Legal and compliance expert

Laura Menetrey

Bio

Strategic legal advisor in data protection and privacy law, helping organizations navigate GDPR, NIS2, DORA and the Swiss FADP.

Data protection lawGDPR, NIS2, DORA, FADPPrivacy & regulatory advisoryData mapping & compliance
Jean Munyarugerero
Auditing expert

Jean Munyarugerero

Bio

Hands-on IS and business continuity trainer and auditor with experience spanning finance, cloud, public sector and NGOs.

IS & business continuity trainerManagement systems auditorFinance, cloud, public sector, NGOs
Jean-Emmanuel Rodriguez
Cybersecurity governance expert

Jean-Emmanuel Rodriguez

Bio

Supports clients through vendor risk, compliance technology integration and gap analysis, from policy development to go-live.

AI governanceInformation security governanceGap analysis & framework implementationGRC
Bénédicte Sévin
GRC Consulting team leader

Bénédicte Sévin

Bio

Leads end-to-end project supervision across implementations, audits and compliance programs for global organizations.

GRC project leadershipISO 27001 Lead Implementer15+ years international experienceI.S.I.T. Paris certified
INFORMATION SECURITY MANAGEMENT · CERTIFIED · ACUNA GRC ·ISO/IEC270012022

Your data, your choice

Your data stays where you need it.

  • Host in Switzerland, the EU or the US.
  • When Aiko can't confirm what you may see, it stops and says so.
  • Aiko's features were security-reviewed before release.
More detail in our Trust Center →

Pricing

Start small. Add more when you're ready.

No per-seat licensing, so your whole team can work in it. Start with Acuna GRC and Aiko, then add modules or our experts when you need them.

Professional

The Acuna GRC core, for organizations running advanced GRC programs.

Organization-based pricing starts from

CHF 6'390

per year


  • Unlimited users
  • Aiko, the AI assistant
  • Every framework included
  • Default API connectors
  • Policies, asset inventory, risk register and evidence collection
  • Access profiles and audit log
  • A dedicated Acuna advisor

Add-on modules

TPRM (Supplier Shield)Data PrivacyCookie ManagerTrust CenterAI GovernanceEvaluationsGroup managementStaff PortalVulnerability management
Request a demo

Enterprise

For large organizations with complex, multi-entity GRC programs.

Price on request


  • All Professional features
  • Dedicated onboarding and support
  • Custom SLA
  • Priority access to new features
Request more information

For partners

MSSP

For companies that manage multiple clients.

  • All Professional features
  • White label
  • Manage your tenants
  • Deployment bundles
  • ISO, SOC and privacy implementations
  • Centralized audit
  • Customizable templates with mass deployment

Price on request

Request a demo

Special pricing

Non-profit & Academic

We offer custom discounted rates for registered non-profit organizations, international NGOs, and accredited academic or research institutions. Eligibility is confirmed on request: usually a registration document or .edu / .ac domain is enough.

Request a demo

No commitment required.

Who is eligible

  • Registered non-profit / 501(c)(3) equivalent
  • International NGO (UN, ICRC, Gavi...)
  • University or research institution

FAQ

Frequently asked questions

Product and AI

Acuna GRC is an all-in-one governance, risk and compliance platform built in Switzerland. Its AI assistant, Aiko, does compliance work with your team one step at a time, in the mode each team chooses, and Swiss experts add extra hands when you need them.

Security and data

Buying and services

Start with one step.

Show us one framework or one disorganized control library. We'll show you Aiko working on it, and you decide what it applies.