MetricStream
GRC software covering IT and cyber risk, IT and cyber compliance, vendor and third-party risk, enterprise risk, regulatory compliance, internal audit and resilience.
- Categories
- GRC and compliance automation, Third-party risk and security ratings, Compliance audits (SOC 2, ISO 27001)
- Based in
- San Jose, United States
- Ownership
- Private
About MetricStream
MetricStream is a software company that sells a Governance, Risk and Compliance platform. Its products cover enterprise and operational risk, internal audit, regulatory compliance, policy management, third-party risk, business continuity and cyber GRC. The company says its platform is AI-first and built on a single connected data model. It also offers an AppStudio for configuring and extending products, plus APIs for integrating other systems. MetricStream sells to large organisations across many sectors. Named customers include Shell, the London Stock Exchange Group, Nordea, Nationwide Building Society, Siemens Energy, CBRE Investment Management, CIBC, BMO Financial Group and dnata. It also serves the financial sector with a digital operational resilience solution aimed at DORA compliance. The company describes itself as a SaaS provider with a multi-instance global cloud. It says it runs annual audits by certified third-party assessors and follows secure development practices. It reports over a million users worldwide.
Products
- MetricStream PlatformA shared foundation for GRC products with a federated data model, AppStudio, APIs and AI.
- Enterprise Risk ManagementHelps risk teams identify, assess and mitigate enterprise risks.
- Cyber GRCManages cyber risk and aligns controls with frameworks such as ISO and NIST.
- Internal Audit ManagementSupports risk-based auditing and SOX compliance work.
- Operational Risk ManagementGives risk professionals timely operational risk insights.
- Operational ResilienceHelps manage disruptions with assessments and automated response plans.