SHARE
Facebook X Pinterest WhatsApp

ACL Software Platform Features & Pricing

See our complete list of top GRC vendors Company Description ACL is a privately owned software company headquartered in Vancouver, British Columbia, Canada. For more than 30 years, ACL has been delivering risk management, compliance, and audit software to some of the biggest private and public organizations. Its automated enterprise SaaS platform merges GRC and […]

Written By
thumbnail Drew Robb
Drew Robb
May 3, 2018
eSecurity Planet content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More

See our complete list of top GRC vendors

Company Description

ACL is a privately owned software company headquartered in Vancouver, British Columbia, Canada. For more than 30 years, ACL has been delivering risk management, compliance, and audit software to some of the biggest private and public organizations. Its automated enterprise SaaS platform merges GRC and corporate performance management (CPM).

Product Description

ACL’s platform contains four core modules – strategy, projects, results and analytics –with integrated content and add-ons such as data connectors and configuration services.

  • The Strategy module provides a view of strategic objectives and risks across the entity structure for risk universal planning and assessments.
  • The Projects module is where operational risk treatment activities are planned and executed, from audits or compliance reviews to risk assessments or risk action plans.
  • The Results module displays the output from risk analytics or monitoring programs, as well as human data from surveys or event forms (e.g. hotlines, whistleblowers).
  • The Analytics module performs ad hoc risk analytics or automated analysis for monitoring programs, data aggregation and reporting purposes.
  • The Reports module aggregates data from the other modules into BI-type reports or dashboards.

The platform includes a certified data connector to SAP ERP systems; embedded content in the platform specific to functional areas like robotic process automation for ERP processes; IT standards and regulations for cybersecurity and data privacy; regulatory content for banking and lending; and various entitlement programs for government.

“ACL’s embedded content can link standards or regulations to the organization’s library of process risk controls,” said Kris Hutton, ACL Director of Product Management. “This links to data analysis and surveys, which can be aggregated back to the Strategy module for better context to report to the board and senior management, demonstrating the direct business impact of certain initiatives.”

New Features

Recent updates include enabling customers to run a well-governed organization in real time, and making ACL’s GRC Platform seamlessly embed GRC knowledge content into daily workflow. The May 2018 release includes:

  • A new dashboard for leadership oversight of audits, compliance reviews or risk assessment projects, including productivity benchmarks (e.g. projects completed, controls tested/passed/failed, issues opened and remediated, etc.)
  • Robotic control assessments, where you can automate the pass/fail of a control with data analytics
  • “Mission Control” module that shows control and process owners a flat view of the controls they own along with milestones and status
  • Ability to more easily assign controls to front lines to perform a control or self-assessment for areas like SOX compliance, IT governance, internal control management, compliance management and strategy & performance governance
  • Expansion of embedded content suites for financial controls monitoring, IT governance, banking & lending and government entitlement program oversight
  • Evidence-linking for audit, compliance and risk project work

Markets and Use Cases

Key verticals include banking and lending, state, local, provincial and federal government, and higher education.

Analyst View

Forrester classifies ACL as a Strong Performer, its second-highest rating. The analyst firm said ACL’s GRC portfolio has grown substantially from its original audit solution. Forrester gives ACL high marks for its simple user interface, strong mobile support, and strong analytic integration.

Metrics

More than 7100 active customers in 140 countries, including 60 percent of the Fortune 1000, 72 percent of the S&P 500, more than 700 local and state governments worldwide and more than 200 federal government agencies.

Delivery

ACL’s platform is primarily delivered through the cloud, with its analytics module on premises.

Pricing

On an annual subscription basis, prices range from less than $10,000/year to $1 million or more a year.

thumbnail Drew Robb

Originally from Scotland, Drew Robb has been a writer for more than 25 years. He lives in Florida and specializes in IT, engineering, and business. As well as eWeek and TechRepublic, he writes for a wide range of magazines including Gas Turbine World, SDxCentral, and HR Magazine. He is the author of Server Disk Management in a Windows Environment (Auerbach Publications).

Recommended for you...

Meet the Cybersecurity Startups Beating Hackers at Their Own Game
Maine Basan
Aug 20, 2025
Free Antivirus Software Face-Off: Which One Protects Best?
Matt Gonzales
Aug 13, 2025
The 6 Best Password Managers for Small Businesses (Tested and Trusted)
Matt Gonzales
Jul 29, 2025
Protect Your Privacy: Best Secure Messaging Apps in 2025
Liz Ticong
Jun 25, 2025
eSecurity Planet Logo

eSecurity Planet is a leading resource for IT professionals at large enterprises who are actively researching cybersecurity vendors and latest trends. eSecurity Planet focuses on providing instruction for how to approach common security challenges, as well as informational deep-dives about advanced cybersecurity topics.

Property of TechnologyAdvice. © 2025 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.