Explore

The whole risk model, at a glance

The core objects connect to each other. Configuration and Education stand on their own — different ways in.

Make better decisions Core GRC model Fit to your business Reporting AI Integration Education Risk Control Obligation Event Configuration Permissions
Risk

Configurable scoring, risk appetite, parent/child risks, and an append-only history of every change.

Supports
Identifying, scoring and reviewing risks without emotional bias.
Outcome
Risks that survive scrutiny, and a defensible trail of how they changed.
Also here
Actions attach directly to a risk.
Risks Tutorial: scoring without bias
Control

AI-assisted control design that picks right-sized controls, plus 4-way effectiveness assessment tracked over time.

Supports
Designing controls that reduce risk — then proving they work.
Outcome
Controls chosen well, with effectiveness you can show trending, not just documented.
Also here
Assessments live here. Actions attach to a control.
Controls Tutorial: writing controls that last
Obligation

Import any obligation model from CSV — not only the frameworks we ship — and record partial compliance, not binary met / not-met.

Supports
Mapping controls to any standard, regulation or internal policy.
Outcome
A defensible 'we're 60% there' position an auditor can actually read.
Obligations Tutorial: audit-readiness
Event

Capture an incident as it unfolds, close it properly with lessons, and link it back to the risks and controls it touched — with tasks, watchers and loss capture.

Supports
Running a live incident and learning from it.
Outcome
Closed events that feed straight back into your risk and control picture.
Also here
Tasks and actions run inside the event.
Events Tutorial: the event lifecycle
Reporting

Appetite roll-up by domain or category, with board packs generated from live data.

Supports
Reporting to risk committees and the board.
Outcome
Packs built from current data, not rebuilt by hand each quarter.
AI Integration

Connect Claude, ChatGPT, Gemini or any MCP-compatible tool to your live risk data — then analyse, restructure and improve it with AI that never touches our own infrastructure.

Supports
Putting the AI you already use to work on your risk data.
Outcome
Spreadsheet migration, risk classification and sharper risk statements — in minutes, on your terms.
Education

Short, practitioner-voiced how-to videos, surfaced in context on the screen where you'd otherwise get stuck — teaching the craft, not the software.

Supports
Learning the craft of risk management at the point of work.
Outcome
A non-specialist doing it well, without a training course.
Configuration

Tenant-configurable scoring scales, impact tables, risk appetite, categories and the lists behind events — set RiskQuilt to match your framework.

Supports
Setting the platform up to fit how your organisation runs risk.
Outcome
The tool bends to your model, not your model to the tool.
Permissions & Access

Role-based access with granular, per-node permissions that inherit down your register hierarchy — so people see and change exactly what they should.

Supports
Giving everyone the right access without locking anyone out.
Outcome
Unlimited users contributing safely, with a clear line on who can do what.

Core GRC model

Configurable scoring, risk appetite, parent/child risks, and an append-only history of every change.

Supports
Identifying, scoring and reviewing risks without emotional bias.
Outcome
Risks that survive scrutiny, and a defensible trail of how they changed.
Also here
Actions attach directly to a risk.
Risks Tutorial: scoring without bias

AI-assisted control design that picks right-sized controls, plus 4-way effectiveness assessment tracked over time.

Supports
Designing controls that reduce risk — then proving they work.
Outcome
Controls chosen well, with effectiveness you can show trending, not just documented.
Also here
Assessments live here. Actions attach to a control.
Controls Tutorial: writing controls that last

Import any obligation model from CSV — not only the frameworks we ship — and record partial compliance, not binary met / not-met.

Supports
Mapping controls to any standard, regulation or internal policy.
Outcome
A defensible 'we're 60% there' position an auditor can actually read.
Obligations Tutorial: audit-readiness

Capture an incident as it unfolds, close it properly with lessons, and link it back to the risks and controls it touched — with tasks, watchers and loss capture.

Supports
Running a live incident and learning from it.
Outcome
Closed events that feed straight back into your risk and control picture.
Also here
Tasks and actions run inside the event.
Events Tutorial: the event lifecycle

Make better decisions

Appetite roll-up by domain or category, with board packs generated from live data.

Supports
Reporting to risk committees and the board.
Outcome
Packs built from current data, not rebuilt by hand each quarter.

Connect Claude, ChatGPT, Gemini or any MCP-compatible tool to your live risk data — then analyse, restructure and improve it with AI that never touches our own infrastructure.

Supports
Putting the AI you already use to work on your risk data.
Outcome
Spreadsheet migration, risk classification and sharper risk statements — in minutes, on your terms.

Short, practitioner-voiced how-to videos, surfaced in context on the screen where you'd otherwise get stuck — teaching the craft, not the software.

Supports
Learning the craft of risk management at the point of work.
Outcome
A non-specialist doing it well, without a training course.

Fit to your business

Tenant-configurable scoring scales, impact tables, risk appetite, categories and the lists behind events — set RiskQuilt to match your framework.

Supports
Setting the platform up to fit how your organisation runs risk.
Outcome
The tool bends to your model, not your model to the tool.

Role-based access with granular, per-node permissions that inherit down your register hierarchy — so people see and change exactly what they should.

Supports
Giving everyone the right access without locking anyone out.
Outcome
Unlimited users contributing safely, with a clear line on who can do what.

Ready to leave the spreadsheets behind?

Start your free trial today. No credit card required. No sales call. Your data, your platform, in minutes.