Easily automate the management, monitoring, and audits of all of your frameworks. Anecdotes has over 40 pre-mapped frameworks for you to choose from. Thanks to our cross-mapping technology, the work you do in one framework can be leveraged for others—which makes adopting additional frameworks much easier! Have multiple instances of a framework? No problem. Easily create as many as your business needs.

You shouldn't be punished for having a mature program! Keep using your own, custom frameworks. With just a few simple steps you can upload or configure a custom framework. And don't worry—at Anecdotes, custom frameworks use the same automation and cross-mapping that our out-of-the-box frameworks use, so you will continue to enjoy automated evidence collection.

Anecdotes has created rules based on CIS standards to automatically detect gaps within your GRC data. You can also create custom rules based on your policies—no code required! If records in the evidence table match the rule, it will be flagged, so you know exactly where you need to focus your efforts. This will save you valuable time and help you identify gaps you may otherwise miss.

Data is at the core of everything we do. The more plugins you connect, the more you'll be able to do, and the better visibility you'll have into your GRC posture. All of our 170+ plugins are developed 100% in-house, so you don't have to worry about third parties gaining access to your data. We build them based on the principle of least privilege, so you won't be providing excessive access, either.

Mature companies often have more than one cloud instance, and you need to see all of them to gain a real understanding of your GRC posture. Anecdotes lets you connect as many as you need. And don't worry, with Anecdotes' granular configurability you will be able to decide which account is in scope for each of your frameworks.

With some tools, like Jira or GitHub, you'll want to collect evidence that’s unique to the way your business operates. The Anecdotes Evidence Lab empowers you to craft custom evidence. Once defined, this evidence will be automatically collected and mapped to your entire GRC program.

Upload your policies to your Anecdotes Compliance OS or choose from our elaborate policy library. You can automatically manage the entire review and approval cycle with ease, using notifications to communicate efficiently with reviewers and approvers.

Anecdotes Playbooks is an automated solution for continuously responding to events in your GRC data. Integrate with collaboration tools and predefine a response plan to reduce downtime and risk exposure while addressing events in your data.

Anecdotes Compliance OS includes dashboards for monitoring the various aspects of your GRC program and demonstrating your ROI. You can filter data to meet your needs and generate reports to demonstrate your progress.

Don't want all users to have access to all parts of the platform? No problem. With Anecdotes Custom Roles you can easily define and assign roles and permissions to team members according to business needs and limitations.

Anecdotes supports single sign-on through Google, Microsoft, and other Identity Providers (IdPs).

Configure SCIM provisioning of users with OKTA.

These are the core users of the platform. User licenses do not apply to external users who are assigned specific tasks, or auditors—those are unlimited.