Made in Switzerland

The all-in-one GRC platform. AI-native from day one.

The most flexible, fastest to implement, with the highest return on investment. Built by people who've done your job.

Get a demo →Watch the video
50+
frameworks ready to use
Swiss
built and run from Morges
1
login for everything
35+
years of GRC experience

Four Acuna screens: a program overview across ISO 27001, NIS2, DORA, SOC 2 and GDPR; ISO 27001 controls mapped to NIS2 Article 21 measures; audit evidence linked to each control with its owner; and supplier grades from A to F.

ComplyOne control library behind every framework you carry

Aiko71 of 94 NIS2 requirements already covered by your ISO 27001 controls

AssureEvery piece of evidence linked to its control and its owner

AikoLogistics dropped from B to D. Review it first.

The platform

All your GRC.One platform.

Acuna GRC · Core · 01 / 07

Comply

Your frameworks and controls, linked together. Do the work once, use it everywhere.

ISO 27001NIS2DORAGDPR
Learn more →Acuna GRC · Core · 02 / 07

Implement

Turn each requirement into measures and controls, each with a clear owner.

RequirementsControlsOwners
Learn more →Acuna GRC · Core · 03 / 07

Operate

Run compliance day to day: risks, documents, recurring tasks and the annual plan.

Annual planTasksRisks
Learn more →Acuna GRC · Core · 04 / 07

Assure

Get ready for audits with confidence. Every piece of evidence is linked to its control.

AuditsEvidenceKPIs
Learn more →Module · 05 / 07

TPRM · Supplier Shield

Grade your suppliers from A to F, automatically. Get an alert when something changes.

OSINTMonitoringCampaigns
Learn more →Module · 06 / 07

Data Privacy

Records, DPIAs and data subject requests, in the same place as everything else.

GDPRnDSGROPADPIA
Learn more →Module · 07 / 07Soon

AI Governance

One list of every AI system you build or buy, ready for the EU AI Act.

ISO 42001EU AI Act
Learn more →

The problem

You've outgrown tools built for people who just discovered compliance.

Vanta, Drata, OneTrust; they're built for startups getting their first SOC 2. Great for them. But you're not starting. You're managing 15 frameworks, 200 controls, and a board that wants answers yesterday. You need a platform that speaks your language.

THEM

The others

Guided wizards for first timers
Generic templates, one size fits all
Compliance as a product mentality
Lock in with rigid workflows
Pretty dashboards, shallow data

ACUNA

Built different

Pro grade cockpit, zero hand holding
Your frameworks, your controls, your way
Built by people who've sat in your chair
Flexible architecture, no lock in
Deep analytics that drive decisions

Aiko · AI assistant

One AI, connected to every module.

Aiko reads your controls, suppliers, evidence and risks at the same time. You ask the question, Aiko finds the answer.

Aiko
Reading · Comply
Which controls cover both ISO 27001 and NIS2?

Ask anything

Instant answers about your controls, evidence, risks and deadlines.

Order anything

"Prepare the board summary." Aiko does it.

Brainstorm on your data

Test ideas with your real data, with Aiko as your sparring partner.

See Aiko in action →More about Aiko

Who it's for

One platform.Made for your role.

CISO

Steer ISO 27001, SOC 2 and NIS2 from one place.

  • One control covers many frameworks
  • Fix what matters most first
  • Clear reports for leadership and the board
Acuna for CISOs →
Acuna Comply compliance programme

Frameworks

The toughest rules. Already built in.

More than 50 frameworks ready to use. Pick the ones that apply to you.

SecurityIntl

ISO 27001

Protect your information with a security management system.

Map once, reuse everywhereSecurityEU

NIS2

The EU cybersecurity rules for essential sectors.

ResilienceEU

DORA

Digital resilience for banks, insurers and their suppliers.

PrivacyEUCH

GDPR · nDSG

Data protection in Europe and Switzerland.

AssuranceUS

SOC 2

Show your customers their data is safe with you.

AIIntl

ISO 42001

Manage your AI systems responsibly.

AIEU

EU AI Act

Classify your AI systems and track your duties.

Product securityEU

Cyber Resilience Act

Security for digital products sold in the EU.

50+ frameworksInternational, EU, Swiss and US rules, updated regularly.See all 50+ frameworks →

Features

Take your GRC to the next level.

Plan it, run it, prove it. Click to see.

Plan

Run

Prove

Map many frameworks at once

One control, many frameworks. Do the work once.

Get a demo
Map many frameworks at once

Integrations

Connect your tools. On your terms.

Ready-made connectors for the tools you already use, API keys to push your own data, and custom connectors we build when you need one.

Your tools
  • Entra ID
  • Defender
  • Azure
  • AWS
  • GitHub
  • Jira
  • + a connector built for you
AcunaEvidence, KPIs and security alerts, kept current on their ownHosted in Switzerland or the EU

Your tools feed Acuna

Connectors pull security data on a schedule, and API keys let your own systems push data in. Every call is logged.

Missing a connector? We build it.

We design the integration around your setup. Every native connector we have exists because a client needed it.

Your data stays yours

Swiss company, hosting in Switzerland or the EU. Your evidence goes straight from your systems to Acuna.

Tell us which tool you'd like to connect →

Team

Built by people who've done your job.

Practitioners across GRC, cybersecurity, audit, and compliance, who've sat in your chair.

Alexis Hirschhorn
CEO of Acuna

Alexis Hirschhorn

Cyber security and governance consultant with 20+ years advising multinationals, governments, and international organizations.

Cyber & information securityCloud securityRisk & governance consultingCertified Lead Auditor
Henri Haenni
CEO of Abilene Group

Henri Haenni

Business continuity and information security expert; certified international trainer and Lecturer at Sorbonne University Paris 1.

Business continuityRisk managementInformation security governanceSorbonne University lecturer
Laura Menetrey
Legal and compliance expert

Laura Menetrey

Strategic legal advisor in data protection and privacy law, helping organizations navigate GDPR, NIS2, DORA, and Swiss nDSG.

Data protection lawGDPR, NIS2, DORA, nDSGPrivacy & regulatory advisoryData mapping & compliance
Jean Munyarugerero
Auditing expert

Jean Munyarugerero

Hands-on IS and business continuity trainer and auditor with experience spanning finance, cloud, public sector, and NGOs.

IS & business continuity trainerManagement systems auditorFinance, cloud, public sector, NGOs
Jean-Emmanuel Rodriguez
Cybersecurity governance expert

Jean-Emmanuel Rodriguez

Supports clients through vendor risk, compliance technology integration, and gap analysis from policy development to go-live.

AI governanceInformation security governanceGap analysis & framework implementationGRC
Bénédicte Sévin
GRC Consulting team leader

Bénédicte Sévin

Leads end-to-end project supervision across implementations, audits, and compliance programs for global organizations.

GRC project leadershipISO 27001 Lead Implementer15+ years international experienceI.S.I.T. Paris certified

Pricing

No surprises. No per seat games.

Transparent pricing that scales with your organization, not your headcount.

Professional

For organizations running advanced GRC programs.

Starts from

CHF 5'388

  • Unlimited frameworks
  • Custom dashboards
  • Integrated KPI and custom reports
  • Connectors and API
  • Full AI support

Optional modules

Supplier Shield TPRMBusiness Continuity and Crisis ManagementEnterprise Risk ManagementData Protection
Contact Sales

Enterprise

For large organizations with complex, multi-entity GRC programs.

Get in touch

  • All Professional features
  • Multi-entity management
  • RBAC (Role-Based Access Control)
  • Trust Center
  • Breach Scanner
  • D&B Credit Score integration
  • Dedicated onboarding and support
  • Custom SLA
  • Priority access to new features
Contact Sales

For partners

MSSP

For companies that manage multiple clients.

  • All Professional features
  • White label
  • Manage your tenants
  • Deployment bundles
  • Get faster results for:
  • ISO / SOC / Privacy implementations
  • Centralized audit full functionality
  • Fully customizable templates with mass deployment
  • Integrated AI to fast track and support your clients

Get in touch

Learn more about Acuna for MSSPs →

Special pricing

§ Non-profit & Academic

We offer custom discounted rates for registered non-profit organizations, international NGOs, and accredited academic or research institutions. Eligibility is confirmed on request: usually a registration document or .edu / .ac domain is enough.

Request non-profit pricing

We respond within 48h. No commitment required.

Who is eligible

  • Registered non-profit / 501(c)(3) equivalent
  • International NGO (UN, ICRC, Gavi...)
  • University or research institution