Reciprocity (now ZenGRC)

ZenGRC, formerly known as Reciprocity, is a trusted governance, risk, and compliance (GRC) software platform designed to help organizations modernize their approach to compliance, risk management, and audit programs. The company has pioneered the use of agentic AI in the GRC space, offering an intelligent assistant called GRACI that performs analyst-level work including program scoping, control design, and audit structure generation. Their platform enables organizations to transition from spreadsheets and fragmented point solutions to a unified, comprehensive GRC system. The platform supports a wide range of compliance frameworks including ISO, SOC, HIPAA, PCI, CCPA, NIST, and COBIT, with seamless integration through the Secure Controls Framework (SCF). ZenGRC emphasizes rapid implementation, promising deployment within weeks rather than months, with minimal business disruption. The company serves security executives and teams looking to communicate cyber risk in business terms, positioning compliance and risk management as strategic business functions rather than operational bottlenecks. ZenGRC distinguishes itself through transparent, flat-fee pricing that includes all critical features without hidden costs. The platform offers robust capabilities including third-party risk management, vendor management, risk scoring, data visualizations, and customizable dashboards. Their AI implementation prioritizes security, running through AWS Bedrock with isolated instances and training exclusively on customer-specific data.