Compyl Reviews

.The system is very easy to use and very user friendly

No dislikes at this time, I would like a 2 factor authentication to login

Security is huge and having the ability to use comply to help manage that is critical

It is extremely customizable and accomodating.

Truly nothing but incorporating more and more frameworks and regulatory requirements is tough to keep up with.

Visible relationships to all aspects of GRC, as well as related aspects within Audit, Service Management, Automation, Operations and Policy.

As someone who has navigated various platforms in the GRC space, I must say that Compyl stands out for its holistic approach and flexibility. The platform integrates every aspect of GRC into a cohesive system, which makes it incredibly efficient. One thing that stands out is Compyl's flexibility. If you're dealing with industry-specific regulations, varying internal processes, or unique risk factors, you can make it work within Compyl.

There is a higher learning due to the flexibility of the system.

With Compyl, we have all our program information in one place that can be reported on or visually shown through dashboards. This also allows us to know the current state of compliance across a number of different frameworks.

The opportunities for automation are the most attractive feature for me. Data ingestion was much easier than it should be.. A job well done. The policy mapping demonstrates a keen awareness of the regulatory and policy landscape. Features are constantly evolving but without radical change making the adoption of new functionality almost unnoticeable.

Lack of documentation!! (but the library is growing)

Automating IT Security risk management compliance. The query builder enables me to determine compliance with the control requirement programmatically. I can also reuse the exact data for audit evidence.

We have been looking for a GRC platform like this for a very long time. Compile interconnect data way further than any other platform that I've seen. I feel I have a bunch more accurate understanding of my risk landscape when compared to other tools that I have used.

There was just a fairly significant UI update and we are told another one is coming before the end of the summer. I'm looking forward to some of the new design.

This is the first time our business has had a risk register that was more than just a static document.

We're a small tech company in a competitive market accessing sensitive data. While we've always felt great about our security, as we grew we needed to move forward with compliance certifications which was new to us. We weren't impressed with the "compliance as a service" tools out there and wanted something that was more than a box check.

Compyl was the perfect choice for us. We have been with them for years and they've not only helped us obtain our certifications, but have also really explained the processes and what they *really* mean.

Support team / security team is very helpful and hard working to navigate compliance program. Very hands on with product, which is improving to support compliance programs. Good relationship with auditors to facilitate evidence management and improvements. Very responsive team and good support. Great AI capabilities to assist with managing policies, compliance and risks.

Product is still maturing rapidly, expect changes and improvements to functionality.

It is critical to our Soc2 compliance program. AI capabilities are very useful.

Moving away from spreadsheets and crosswalks, Compyl makes assessing the adequacy of controls and ongoing compliance with multiple frameworks and regulations efficient.

Nothing currently to note. We always look forward to seeing additional updates and new features.

We used to track controls in multiple spreadsheets, which made it hard to track improvements over time. It was also very manual to update our assessments when new requirements came out.

FInd a platform that not only keeps pace with regulatory changes but also remains user-friendly is a rare thing to find. From the start, Compyl impressed me with its modern interface, which is both intuitive and aesthetically pleasing. This platform was clearly designed with the end-user in mind, as it offers a seamless navigation experience unlike any other GRC software I've used in recent years.

My background is in information security, specifically in the financial service industry so I have a depth of knowledge when it comes to governance, risk and compliance. I would say for some users that are just looking for a quick SOC 2 or are not that focused on security, wouldn't get the most out of Compyl. Compyl is more geared towards users that have real issues they are looking to tackle, vs going through a security motion to check a box.

Prior to bringing in Compyl to my current organization, there was no GRC platform in place. We were working off of a mixture of sharepoint, google docs, and excel spreadsheets to balance the lack of a GRC presence. Compyl has given us a true security and compliance posture, allowing us to reconcile past issues and build a proper program.

I really love that Compyl is trying to remedy the pain points that CISO's have when it comes to compliance from the viewpoint of a CISO. They have and offer a unique perpective in that sense, and it shows in the solutions. Separately they are an amazing company to partner with. They make implementation as easy as can be and will be as involved in helping you as you need them to be so that it is more than just a tool, it's actually helping build your security program.

The recent update to their interface is amazing, they applied feedback that we have shared as customers and really care about making the product easy to use. The Customer Support from the team has been amazing, any time we needed something and is why we really feel like it's a partnership more than just a product.

I had some struggles earlier on with the Document Template area of the tool, but the recent update has addressed it. Other than that, there really weren't downsides that I had to the product, and any time I have had an issue, the team works to resolve it rapidly and are amazing at communicating that with me.