The people behind Acuna ran audits, built compliance programs, and advised regulators for years before a line of code was written. The platform works the way experienced GRC teams actually work, not the way software vendors imagine they do.
Why Acuna?
Acuna is a GRC platform built and operated by the Abilene Group, an established Swiss GRC group, and led by practitioners who run audits and compliance programs. It maps requirements once across 50+ frameworks, ties every control to a named owner and to evidence, and is priced per organization rather than per seat, with data hosted in Switzerland and the EU.
Acuna was built by practitioners who ran audits and multi-framework programs for multinationals and regulators. That experience shows up in every screen. Requirements map once and reuse across frameworks. Controls have owners, evidence, and a cadence. Audit readiness is a state you maintain, not a scramble before the auditor lands.
Most platforms were built by people who never sat through an ISO surveillance audit or stood up a multi-framework program from scratch. So they map requirements onto spreadsheets, charge by the seat, and hand you a database instead of a program.
Practitioners know the difference. An evidence lifecycle is not a file upload. A control is not a checkbox. Audit readiness is not a dashboard. It is an operational cadence that runs across frameworks, teams, and time.
“An evidence lifecycle is not a file upload. A control is not a checkbox. Audit readiness is not a dashboard. It is an operational cadence.
Acuna models how a mature program actually runs. Requirements are mapped once and reused. Controls are owned by named people, with evidence links, maturity scores, and recurring tasks. Audit readiness is a live view, not a weekend project.
When adding a control owner or an auditor costs money, teams leave out the people who should be involved. Acuna is priced per organization, because a compliance program is not a privilege for a few logins. It is a company-wide responsibility.
Every owner, reviewer, and auditor you add is another line on the invoice, so you keep the program small.
Bring in every owner, reviewer, and auditor. One price covers the whole company.
Acuna is led by practitioners, not a sales organization. Between them they hold decades in audit, privacy, cybersecurity, and AI governance, and they still operate programs today.
.png&w=3840&q=75&dpl=dpl_ABtXioYSmAXQXF5jUWmKimNtQzav)
Henri Haenni
CEO of Abilene Group
Business continuity and information security expert. Certified international trainer and lecturer at Sorbonne University Paris 1. Founded the Abilene Group in 2015.
.png&w=3840&q=75&dpl=dpl_ABtXioYSmAXQXF5jUWmKimNtQzav)
Alexis Hirschhorn
ISO 42001 Lead Auditor · CAIP
Cyber security and governance consultant with 20+ years advising multinationals, governments, and international organizations.
Laura Menetrey
Strategic legal advisor in data protection and privacy law, helping organizations navigate GDPR, NIS2, DORA, and Swiss nDSG.
Jean Munyarugerero
Hands-on IS and business continuity trainer and auditor with experience spanning finance, cloud, public sector, and NGOs.
Jean-Emmanuel Rodriguez
Supports clients through vendor risk, compliance technology integration, and gap analysis from policy development to go-live.
Bénédicte Sévin
ISO 27001 Lead Implementer
Leads end-to-end project supervision across implementations, audits, and compliance programs for global organizations.
Acuna is built and operated by the Abilene Group, a Swiss GRC group founded in Morges in 2015. Alongside Acuna, the group runs a consulting practice, an auditor-training academy, and a cybersecurity arm. The team holds ISO 27001:2022 certification and runs its own compliance program on Acuna. That is not a marketing line. It is how the product is quality-checked.
Built by practitioners
Decades in GRC, audit, and advisory work before a line of code was written.
One organization price
Never per seat. Every owner, reviewer, and auditor, one invoice.
Traceable compliance chain
Requirement to measure to control to task to evidence, end to end.
50+ frameworks
ISO 27001, SOC 2, NIS2, DORA, GDPR, and more, pre-loaded at launch.
Swiss infrastructure
ISO 27001:2022 certified, SOC 2 compliant, data hosted in Switzerland and the EU.
Aiko
An AI agent built for GRC operators, not for demo slides.