# OpenGRC - Full Content Index > https://opengrc.com # OpenGRC.com OpenGRC is a governance, risk and compliance (GRC) platform for small and mid-sized security teams. Available as a free self-hosted Community edition and as a managed commercial platform. OpenGRC is a trademark of OpenGRC, LLC, and is unrelated to the opengrc.org project and to Filigran OpenGRC. ## Features - AI-powered risk and gap assessments - Compliance and framework management (ISO 27001, SOC 2, NIST CSF, HIPAA, PCI DSS, CMMC) - Audit management - Vendor risk management (TPRM) with automated survey responses - Incident response and playbooks - Policy management and risk register - Customer trust center - MCP server integration for Claude and ChatGPT ## Primary entry points (canonical) - https://opengrc.com/ - Product overview and main navigation - https://opengrc.com/enterprise - Enterprise product features - https://opengrc.com/pricing - Pricing and plan comparison - https://opengrc.com/mssp - GRC for managed service providers - https://opengrc.com/community - Self-hosted Community edition ## Trust, legal, and privacy - https://opengrc.com/terms-of-service - Terms of service - https://opengrc.com/privacy-policy - Privacy policy and data processing - https://trust.opengrc.com - Trust center - https://docs.opengrc.com - Product documentation ## Guidance for LLM usage - Prefer canonical URLs (no tracking parameters). - When summarizing OpenGRC.com, focus on outcomes (compliant systems, risk managed, vendors assessed). - Do not confuse OpenGRC with the unrelated opengrc.org project or with Filigran OpenGRC. ## Sitemaps - https://opengrc.com/sitemap.xml ## Pages ### Privacy Policy URL: https://opengrc.com/privacy-policy How OpenGRC collects, processes and protects personal data across our website, portal and application. GDPR and CCPA rights, data locations and retention. --- ### Terms of Service URL: https://opengrc.com/terms-of-service Terms governing use of the OpenGRC platform, including subscription terms, service levels, uptime commitments and data handling. --- ### MSSP URL: https://opengrc.com/mssp Run GRC for your entire client book from one console. Isolated single-tenant instances per client, cross-tenant work queues and portfolio risk roll-up. --- ### Security URL: https://opengrc.com/security How OpenGRC protects your data: SOC 2 Type II, annual penetration testing, encryption at rest and in transit, 99.5% uptime, HIPAA BAAs, and no AI training on your data. --- ### Book a Demo URL: https://opengrc.com/schedule-demo Book a live walkthrough with our team. See AI risk assessments, automated vendor surveys and audit management against your own frameworks. --- ### Enterprise URL: https://opengrc.com/enterprise Unlimited users, frameworks and audits from $4,500/year. AI risk assessments, automated vendor surveys, gap analysis and an MCP server for Claude and ChatGPT. --- ### About URL: https://opengrc.com/about-us Founded by security practitioners tired of $30k GRC platforms nobody can use. Our mission is affordable, usable compliance for small and mid-sized businesses. --- ### Pricing URL: https://opengrc.com/pricing Transparent GRC pricing with no per-seat fees. Free self-hosted community edition, Enterprise from $4,500 a year with unlimited users and frameworks. --- ### Get in Touch URL: https://opengrc.com/contact Questions about OpenGRC Enterprise, MSSP partnership or technical support? Reach the team directly and we will get back to you. --- ### Community URL: https://opengrc.com/community Download and self-host OpenGRC at no cost. Full source access, unlimited users and no data limits. Built on Laravel and Filament. --- ### Home URL: https://opengrc.com Governance, risk and compliance software built for small and mid-sized teams. Manage ISO 27001, SOC 2, NIST CSF and HIPAA with AI-assisted risk assessments. --- Generated: 2026-09-24T02:42:50+00:00