SAI360

Software by SAI360

Integrated GRC platform (GRC Elevate 6.0 with embedded AI); compliance risk assessments; ethics and compliance bundles; learning; enterprise risk management.

Checked 27 August 2026

Where it is weaker

Recorded with the same care as the capabilities, and not softened.

  • Exact pricing figures not captured.
  • Legal entity and ABN not verified against ABN Lookup.
  • Australian entity is SAI360 CORE Pty Ltd, a NSW-registered supplier; global HQ is Chicago.

Statement of capabilities

Every tracked requirement for Privacy, Cybersecurity & GRC, shown whether or not we could establish it.

  • Verified
  • Partial
  • No
  • Not established

1Privacy

0 of 10

  • 1.1Australian Privacy Principles (APP) managementPartial

    Compliance risk assessment modules cover obligations; APP-specific scope not confirmed.

  • 1.2Privacy registerNot established
  • 1.3Data inventoryNot established
  • 1.4Data mappingNot established
  • 1.5Privacy Impact Assessment (PIA / DPIA)Not established
  • 1.6Consent managementNot established
  • 1.7Retention managementNot established
  • 1.8Data breach workflowNot established
  • 1.9Notifiable Data Breaches (NDB) workflowNot established
  • 1.10Data subject / privacy requestsNot established

2Cyber Frameworks

0 of 5

  • 2.1ACSC Essential Eight maturityNot established
  • 2.2ISO/IEC 27001 information security managementNot established
  • 2.3Information Security Manual (ISM) complianceNot established
  • 2.4NIST Cybersecurity Framework (CSF)Not established
  • 2.5SOC 2 readinessNot established

3Risk

1 of 6

  • 3.1Cyber risk registerVerified
  • 3.2Asset registerNot established
  • 3.3Control libraryNot established
  • 3.4Control testingNot established
  • 3.5Third-party risk managementNot established
  • 3.6Vendor assessmentNot established

4Evidence

0 of 5

  • 4.1Audit evidenceNot established
  • 4.2Policy managementPartial

    Policy management appears in plan bundles; scope not fully detailed in captured pages.

  • 4.3AttestationsNot established
  • 4.4Evidence collectionNot established
  • 4.5Compliance reportsNot established

5Security Operations

0 of 3

  • 5.1Vulnerability managementNot established
  • 5.2Incident responseNot established
  • 5.3Security assessmentNot established

6Technical

0 of 6

  • 6.1Single sign-on (SSO)Not established
  • 6.2IntegrationsNot established
  • 6.3API accessNot established
  • 6.4Australian data residencyNot established
  • 6.5EncryptionNot established
  • 6.6Audit logNot established

Integrations

None named on the provider's own site. If integrations matter to you, confirm directly before buying.

Evidence & sources

Comparison-critical facts carry evidence: where they came from, when they were checked, and how they were verified.

Australian Privacy Principles (APP) management

Cyber risk register

Policy management

Request a quote or demo

Send your requirements to SAI360's provider. Your details are shared only with them.

Privacy, cybersecurity and GRC software and services support compliance with privacy law and security frameworks. Nothing on this page is legal advice, and no provider is certified, accredited or approved by the OAIC, ACSC or any regulator unless independently evidenced.