Each client is on a different tool.
Fix: Run every client program in Acuna GRC, each in its own organization. Your consultants switch between the clients they belong to.
See tenant managementConsultants and MSSPs
GRC platform for MSSPs and consultants
Every client asks for the same work. Deliver it once, then repeat it.
Acuna GRC is the vCISO platform for multi-client compliance. Run each client’s program in its own organization, reuse your frameworks, templates and roadmaps from one client to the next, and deliver it all under your brand with white label.
1 · PICK YOUR FRAMEWORKS4 adopted
✓ISO/IEC 27001:2022Adopted
✓NIS2 DirectiveAdoptAdopted
✓FINMA Circular 2023/1Adopted
✓NIST CSF 2.0Adopted
2 · CLOSE THE GAPSApply selected
Orphan requirements4112Aiko proposes
✓Backup and disaster recoveryLinked
✓ICT readiness for continuityLinked
3 · FOLLOW THE ROADMAPISO 27001
SupportLeft to do: 94
✓Context and leadershipDone
✓Planning and riskDone
Does this sound like you?
Why does compliance work not scale across clients? Each client starts from zero.
Most firms already have the method. The time goes into a different tool for each client, the same setup rebuilt for every engagement and hours of linking nobody can bill.
We rebuild the same ISO 27001 setup for every client.
Fix: Import your own framework once, add controls and starter documents from the repository, and follow the roadmap. Approve & seed creates the tasks, controls and documents in one pass.
See the reusable setupSetup hours we cannot bill.
Fix: Aiko plans the missing links for your consultants to confirm. Nothing is linked until they click Apply.
See Aiko at workHow Acuna GRC covers it
What does an MSSP need from a GRC platform? One method, every client.
Acuna GRC keeps each client separate and your method shared: tenant management and white label to deliver it, Comply and Implement to reuse your setup, and Assure to show each client where they stand.
01 · White label and tenants
Can we run every client in one place, under our brand?
Yes. Each client is its own organization in Acuna GRC, with its own users, access profiles and sign-in rules, and your consultants switch between the clients they belong to. White label lets you deliver Acuna GRC under your own brand, and each organization’s Identity settings hold its name and the logo of its public portals.
See Administration and security →02 · Comply
Can we reuse our method from one client to the next?
Yes. Import your own framework from a CSV file under Admin, or ask the Acuna team to prepare one, and adopt it in each new client. With the compliance roadmap on, Approve & seed creates the tasks, controls and documents of each step in one pass.
See Comply →03 · Implement
Do we start each client from a blank page?
No. Add controls and task templates from Acuna’s curated repository, filtered to the client’s frameworks, and deploy starter document bundles that become the client’s own templates. Every control then gets an owner, a schedule and signed runs.
See Implement →04 · Assure
How do we show each client where they stand?
Assure keeps each client’s records, audits and corrective actions. Generate Report turns the live KPIs into a management report in PDF or Excel, ready for your next client review.
See Assure →Add-ons your clients often need
Aiko at your pace
Does the AI work per client? Yes, and it asks first.
Aiko answers only from the records the person asking may see. It plans the setup links for your consultants, and nothing changes until they click Apply.
1Aiko proposes
Bulk run · Ready for reviewWhich controls have no measure? Plan the missing links.12 controls have no measure · a link planned for each✓CTRL-012 → IAM-05Both cover privileged access reviews.High✓CTRL-017 → IAM-05Rotation is part of managing secrets.High✓CTRL-031 → ASM-01Partial overlap with the inventory.Medium2You confirm
You tick the links you trustApply✓2 links applied, saved in the Activity logControls with no measure12103You set the pace
How much Aiko doesSuggest only
Aiko explains. You do it.Ask me first · default
Aiko prepares. You confirm.Do it and tell me
Aiko does it and shows you.
Setup links, planned in bulk
Ask Aiko which controls have no measure and it plans the missing links on a bulk run page; your consultant ticks the ones to keep. In Mapping, Run AI ranks candidates with a reason.
Some things always ask first
Admins set the highest mode for each action.
Every step on record
Every Aiko action goes into the Activity log.
One Aikoacross Acuna GRC. Add a module and it helps there too. How Aiko works
Swiss experts
Who backs our consultants on a hard engagement? Our experts, behind you.
Your consultants stay the experts your clients see. Acuna’s own team, with an ISO 27001 Lead Implementer and a certified Lead Auditor, backs them up when an engagement needs it.
GRC Consulting team leader
Bénédicte Sévin
ISO 27001 Lead Implementer.png&w=3840&q=75&dpl=dpl_4Dg9REr95DWnBWcmUyNosLk9R8tj)
Auditing expert
Jean Munyarugerero
Management systems auditor
Do it yourself
You run the program in Acuna GRC, with Aiko.
Done with youPartner backup
Guidance, reviews and audit preparation with your team.
Done for you
Our experts run it. You review.
Become a partner expert
- Deliver Acuna GRC to your clients under your brand
- Call on our experts when an engagement needs backup
- Request more information to join the partner program
Integrations
Can Acuna GRC collect evidence from each client’s tools? Yes, with 100+ connectors.
Connectors pull security data from the identity, device, cloud, backup and ticketing tools your clients already run, on a schedule. Each one you connect saves a manual step.
Animation: a robot arm takes data from Microsoft Entra ID, Microsoft Defender, Azure, AWS, GitHub and Jira and puts it on a belt into your workspace in Acuna, where your evidence, KPIs and security alerts stay current.
Entra ID
Okta
Google Workspace
JumpCloud
Microsoft 365
Intune
Defender
CrowdStrike
Acronis
Azure
AWS
KnowBe4
Jira
ServiceNow- 100+ connectors in all
Your tools feed Acuna GRC
Connectors pull security data on a schedule, and API keys let your own systems push data in. Every call is logged.
Missing a connector? We build it.
We design the integration around your setup. Every native connector we have exists because a client needed it.
Fixes land where your team works
Tasks sync both ways with Jira and ServiceNow. See Integrations and API
How it connects
Which parts of Acuna GRC does a partner use? The core, in every client.
Each client runs on the four core workspaces, with Aiko and Admin. Add TPRM, the Trust Center or Evaluations where a client needs them.
Acuna GRC core
Add-on modules
MSSPs connects to
- ComplyYour frameworks, adopted per client
- ImplementControls from the repository
- OperateRisks and policies for each client
- AssureReports for each client review
- Administration and securityUsers and branding per organization
- TPRM (Supplier Shield)Supplier questionnaires for clients
- Trust CenterClient questionnaires from approved facts
- EvaluationsA gap assessment for a new client
- AikoPlans the setup links
FAQ
What else do partners ask about Acuna GRC?
Is this the same as Group management?
No. Group management is for one company with a head office and its subsidiaries. As a partner, you run separate client organizations. See Group management
Can a client see our other clients?
No. Each client is its own organization. People work only in the organizations they belong to, and access profiles decide what they see inside each one.
Can our clients do part of the work themselves?
Yes. Invite the client’s team into its organization with an access profile that fits, from read-only to owning their own controls and tasks.
How fast can we onboard a new client?
A new client starts from your method, not a blank page. In its own organization, adopt your frameworks, deploy your starter document bundles and approve the roadmap: Approve & seed creates the tasks, controls and documents in one pass. See the reusable setup
How are partners priced?
Acuna GRC is priced per organization, not per seat. The MSSP plan, with white label, tenant management and deployment bundles, is priced on request: tell us how many clients you serve and which frameworks they need. See pricing
Does Acuna GRC certify our clients?
No. Acuna GRC runs the program and keeps the evidence. Certification comes from an accredited certification body.
How do we become an Acuna partner?
Request more information with the form below and tell us how many clients you serve and which frameworks they need. We walk you through the partner program, white label and tenant management. See the partner program
Need a CISO yourself?
For your own organization rather than your clients, our Swiss experts can take the role, in Acuna GRC. See CISO as a service
Where is client data hosted?
In Switzerland, the EU or the US, as you choose.
Running compliance for several clients? Talk to us about partnering.
Tell us how many clients you serve and which frameworks they need. We show you Acuna GRC with white label and tenant management.
Hosted in Switzerland, the EU or the US