Agent Index by Heritage Services
Submit / Claim
Home / Agents / Noru Agentic Compliance (GRC agents)

Noru Agentic Compliance (GRC agents)

Vendor: Noru (The GRC Company AB) · HQ: Sweden · Category: Compliance · Risk

Last verified · Added · 4 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

What it does

Noru is a Stockholm-built GRC platform aimed at ISO 27001 certification and European frameworks (NIS2, DORA, EU AI Act, ISO 42001, Cyber Resilience Act) alongside SOC 2 and 25+ others. Its Agentic Compliance pages say agents connected to the customer's systems do the work a person would otherwise do by hand: drafting the policies a framework requires, mapping controls across frameworks, gathering evidence from connected systems (for example MFA status pulled daily from Microsoft Entra ID) and linking it to controls, drafting treatments in the risk assessment, flagging a control when it drifts and surfacing the next task. Every output is a reviewable draft; nothing enters the program or reaches the auditor until a human accepts it. Agent tools exposed over MCP are bound to domain-scoped permissions, and each evidence record carries a capture-time digest and provenance. Cortex is the in-app assistant. Customer timelines are vendor claims. Pricing is quoted per package (based on systems connected and work volume), not published.

Frameworks (vendor-stated)

ISO 27001SOC 2DORA

Vendor-claimed ISO 27001, SOC 2, NIS2, DORA, EU AI Act, ISO 42001, GDPR, EU Cyber Resilience Act

Pricing (as published)

Not published

Tasks

evidence collectionpolicy managementcontrol mappingcontrol monitoringrisk assessment

Sources

  1. noru.tech/solutions/agentic-compliance (primary)
  2. noru.tech/pricing
  3. noru.tech/company
  4. noru.tech/terms-and-conditions

Last verified 19 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Not legal or audit advice. Confirm current pricing, framework coverage and India-regulatory claims with the vendor before purchasing.

Next step: find an auditor

After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.

Auditors by framework

Existing directory filters for frameworks this listing tags, shown only where at least three Verified firms are listed. A tag is vendor-stated relevance, not a certification.

Narrow by region

Published country pages in this directory. Choose any region; this listing has no mapped HQ country page.

United States · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates

Send a request Get matched with verified auditors All verified audit firms

Send my request to up to 3 matches

Choose up to 3 listed tools and/or audit firms, or tick Match me and we will pick from the directory. We store the request for review. Nothing is sent to any firm from this form. Not a ranking.

Listings (up to 3)

0 of 3 selected

Framework(s) (select all that apply)

Next steps

Working aids from official sources and this directory. This is not a ranking.

Guides

Request a demo

We'll pass your request to the vendor later; no automatic emails. Nothing is sent to the vendor now.

Compare Noru Agentic Compliance (GRC agents) with

Alternatives

  • 6clicks Hailey AI — Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform. (shared tags: ISO 27001, SOC 2, DORA)
  • VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents) — Singapore-headquartered agentic compliance platform whose named agents review uploaded evidence against framework controls and flag gaps, score vendors from 12+ external sources without questionnaires, scan cloud posture and auto-escalate critical findings to the risk register, draft answers to customer security questionnaires (SIG, CAIQ, custom) from live policies, draft policies, and generate fixes for failed controls and mark them ready for re-audit. (shared tags: ISO 27001, SOC 2, DORA)
  • Akitra Andromeda AI compliance agents — AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer. (shared tags: ISO 27001, SOC 2)
  • Comp AI — Open-source-leaning AI compliance software that automates evidence collection, policy generation, and continuous monitoring for SOC 2, ISO 27001, HIPAA and GDPR. (shared tags: ISO 27001, SOC 2)
  • Complyance GRC AI Agents — Enterprise GRC platform with a fleet of task-specific AI agents for evidence review, control advice and remediation, policy drafting, risk treatment planning, vendor questionnaire review and risk scoring, and customer security questionnaires. (shared tags: ISO 27001, SOC 2)
  • Cypago Agentic Workflows — Cyber GRC platform whose AI agents build and run end-to-end compliance workflows from natural-language prompts, covering evidence collection, control testing, gap analysis and continuous control monitoring. (shared tags: ISO 27001, SOC 2)

See all Noru Agentic Compliance alternatives →

FAQ (from this dataset)

What does Noru Agentic Compliance do?

EU-hosted compliance platform where AI agents connected to your systems draft policies, map controls across frameworks, collect evidence daily, flag control drift and draft risk treatments, with every output a draft a human must accept.

How much does Noru Agentic Compliance cost?

Not published

Where is Noru (The GRC Company AB) headquartered?

Sweden

Which frameworks does Noru Agentic Compliance support?

Frameworks (vendor-stated): ISO 27001, SOC 2, DORA. Framework tags indicate relevance, not certification.

What are alternatives to Noru Agentic Compliance?

See the Noru Agentic Compliance alternatives page for category-sharing listings in relevance order, not a ranking. Noru Agentic Compliance alternatives.

Stay updated

We use your email only to send the newsletter. See our privacy policy.