Connect de.iterate to the tools you already use, and keep your compliance, governance and risk management evidence current without the copying and pasting.
Your policies live in SharePoint or Confluence. Your devices are managed in Intune or Jamf. Your team signs in through your identity provider. de.iterate connects to all of them, so your compliance, governance and risk management system reflects what's really happening in your business.
de.iterate is an Australian GRC platform built as one integrated management system (IMS). Every feature in de.iterate runs on the same platform. Risks, controls, obligations, policies, assets, suppliers, audits and evidence all link to each other, so a change in one place shows up everywhere it matters.
We help you get your ducks in a row.
Most of the evidence your auditor wants already exists somewhere else. It’s in your device management tool, your document library and your identity provider. Getting it into your compliance program usually means someone taking screenshots, exporting spreadsheets and uploading files, then doing it all again next quarter.
de.iterate connects to those tools directly. Device compliance comes in from Intune, Jamf, CrowdStrike, Defender or SentinelOne, documents from SharePoint and Confluence, and users from Entra ID, each attached to the control it evidences and refreshed on a schedule you set. The screenshot stops being a task on someone’s list and becomes a feed, and when a source drifts out of tolerance de.iterate raises a finding rather than waiting for the next audit to notice.
Every manual step is a chance for something to go out of date. In de.iterate, the picture stays current because the systems that hold the evidence are the ones keeping it.
de.iterate connects to the systems that hold your governance and risk evidence, so controls are checked against live data, KRIs move on their own and the screenshot stops being someone’s job.
SharePoint · OneDrive · Confluence · Notion · Box · Dropbox · Google Drive
Keep policies and evidence where your team already works. de.iterate stays in sync with your document store, tracks review dates and approvals, and flags a policy that changed at the source without being re-approved. No second copy to maintain.
Microsoft Entra ID · Okta · Ping Identity · Google Workspace · SailPoint · CyberArk · 1Password · SAML · OpenID Connect
Staff sign in with single sign-on and users sync from your identity provider. de.iterate then checks what the directory says: who has MFA, which leavers still have active accounts, which guests nobody sponsored and whether privileged accounts are vaulted. Access reviews come with the evidence already attached.
Microsoft Intune · Jamf · Tanium · ManageEngine Endpoint Central · CrowdStrike · Microsoft Defender · SentinelOne · Tenable · Qualys · Rapid7 · Snyk
de.iterate compares your asset register with the tools that manage and protect your devices, and raises a finding when they disagree: a laptop in Intune with no EDR agent, a sensor that stopped reporting, a critical vulnerability open past your patching window. Mystery laptops don’t stay mysterious for long.
Amazon Web Services · Microsoft Azure · Google Cloud · Wiz · Fortinet · Veeam · Acronis
Cloud accounts, security posture findings and firewall firmware feed your asset register and your KRIs, so every account has an owner, every critical finding has an age, and every system that needs a backup has had one inside its recovery window.
Microsoft Sentinel · Splunk · Datadog · PagerDuty · Microsoft Purview · Varonis · Proofpoint · Mimecast · KnowBe4 · Cornerstone OnDemand
de.iterate logs sources that go quiet, incidents that take too long to close, phishing clicks, overdue training and sensitive files open to everyone all become KRIs on the risks they affect, with the evidence collected for the assurance task that asks about them.
ServiceNow · Jira · Freshservice · Zendesk · Ivanti · BMC Helix · ManageEngine ServiceDesk Plus · TOPdesk · Asana · monday.com · Smartsheet · ClickUp · Slack · Microsoft Teams
Compliance work lands in the tool your teams already use. With de.iterate, a non-conformance becomes a ticket, closing the ticket closes the task, and approvals and KRI alerts arrive in Teams or Slack rather than in another inbox.
Workday · SAP SuccessFactors · Employment Hero · ELMO · BambooHR · HiBob · Oracle Fusion HCM · ADP · Cornerstone OnDemand · KnowBe4
Your HR system becomes the source of truth for who works here, in what role and from when to when. de.iterate checks leavers against every account they held, flags joiners who haven’t completed their training, and keeps the people register current without anyone retyping it.
Coupa · SAP Ariba · SAP S/4HANA · Oracle NetSuite · Microsoft Dynamics 365 · Salesforce · HubSpot · Docusign · Adobe Acrobat Sign · BitSight · SecurityScorecard · OneTrust · Archer
Procurement and finance systems show which suppliers you’re paying and which haven’t been assessed. Signed agreements attach themselves to the supplier record, security ratings move a KRI when a critical supplier’s score drops, and existing registers in OneTrust or Archer come across rather than being rebuilt.
Zapier · Microsoft Power Automate · Workato · Make · n8n · MuleSoft · Boomi · Power BI · Snowflake · Google BigQuery
Through Zapier, de.iterate reaches 9,000+ apps: any tool can push a KRI value, attach evidence or react when a risk changes. Enterprise integration teams get the same triggers and actions through their own platform, and your risk, KRI and control data flows into the dashboards and warehouses the board already reads.
ConnectWise · HaloPSA · Autotask · NinjaOne
Managed service providers can keep client compliance work on track in the tools they already use to run their business. Find out more about our Partner Program.
Netskope · Check Point · Zscaler · Palo Alto Networks · Cisco · Cloudflare One · Microsoft Defender for Cloud Apps · Fortinet
See which AI apps your people are using, which ones nobody approved and whether sensitive data is going into prompts. These tools feed the shadow-AI KRIs and the evidence ISO 42001 asks for.
ChatGPT Enterprise · Claude Enterprise · Microsoft Copilot Studio · Azure AI Foundry · Amazon Bedrock · Google Vertex AI · Salesforce Agentforce · Wiz
Keep your AI register current from the source. de.iterate reads the agents, models, connectors and MCP servers that exist inside each platform, flags the ones that aren’t registered or have write access without a risk assessment, and enriches each record with what the agent can touch.
A risk register with a pulse, with inherent and residual scoring, heatmaps and risk appetite.
Every obligation traced to the evidence that meets it, across 25+ frameworks.
Plain-English policies, clear approvals and proof your staff have read them.
Scheduled controls testing, with the evidence ready before your auditor asks.
ISO 42001, AI impact assessments and an inventory of the AI in your business.
Find your personal information, see where it goes and keep your privacy policy current.
