Complass
Features
One shared foundation with the areas you need on top: what you record once, you use everywhere, from requirement to evidence.
Platform and compliance
Complass Core
Included in every planThe foundation for every module: roles and granular permissions, teamwork with comments and inbox, help and tours, support and security.
- Always included: permissions, collaboration and security never cost extra.
- One permission model for everything: every module uses the same roles and profiles.
- Everything connects: tasks, evidence and comments in one place.
- Training in the portal with a certificate of participation, at no extra cost.
Compliance management
Implement frameworks with guidance: phases, templates, document pyramid, catalogues, gap analysis, objectives and action plan up to the audit in the auditor portal.
Learn moreIntegrations
Teams, Slack, Jira, ServiceNow, asset connectors, Microsoft Entra ID and GitHub and API and webhooks: Complass works with the tools your team already uses.
Learn moreRisk and operations
Asset management
IT and OT assets in one place, agentless capture, with SBOM, vendor advisories, end of support, licence reconciliation, identities, relationships and zones per IEC 62443-3-2.
Learn moreVulnerability management
Find known vulnerabilities in your assets, prioritise them in context and work through them with recommendations and deadlines.
Learn moreRisk management
Risk register with qualitative or quantitative assessment, risk appetite and treatment plan, linked to assets, vulnerabilities and incidents.
Learn moreIncident management
Record incidents, check reporting obligations under NIS2, the CRA and the GDPR and track the reporting deadlines with a countdown.
Learn moreBusiness continuity (BCM)
Business impact analysis, business continuity plans with approval, crisis team, emergency manual and exercises, linked to incidents and risks.
Learn moreOrganisation and people
Supplier Management
Classify suppliers, request self-assessments and evidence directly from the supplier, review them and ask for more. With questionnaires for NIS2, GDPR, ISO 27001, the CRA and IEC 62443-2-4.
Learn moreTraining and awareness
The Complass training in the portal, included in the subscription: learning blocks on using the portal and specialist training on your frameworks, practised in a practice company.
Learn morePrivacy operations
Records of processing activities, processors, TOMs, data protection impact assessment and data subject requests with the one-month deadline in one register.
Learn moreOne portal instead of scattered tools
Frameworks, assets, vulnerabilities, incidents and evidence work together. An implemented measure counts for every framework that requires it; vulnerabilities and incidents refer to the same inventory.
Try Complass with your own data
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.