19 Reciprocity Testimonials

"We now have a scalable platform that supports our company’s growth, enabling us to home in on priorities based on our existing control maturity and overall compliance and risk posture. The more we use ZenGRC, the more benefit we see."

"Training sessions with an onboarding expert are crucial for starting your ZenGRC experience on the right foot, as they help organizations understand how the platform will best fit their needs. Professional and patient, experts guide you through core concepts, showcasing ZenGRC’s flexibility and providing handy productivity tips and tricks. After they import the programs you need to work with, you see how the mapping works between programs, controls, risks, and vendors, and it will spur you to populate the platform with as much relevant data as you can.”

“For our first audit, I acted as the middleman between the auditors and our company’s control owners. It was a constant game of requesting information, managing document formats and figuring out how to securely collaborate. We made it work but I said, ‘Never again,’ thus starting our search for a GRC solution."

"We used to spend a ton of time sending emails to manage issue tracking and resolution for audits. ZenGRC makes tracking issues incredibly simple."

“During these unusual times caused by COVID-19, we haven’t missed a beat with our audit processes, We are just getting started with ZenGRC, primed to expand our usage to support all facets of our company’s audit, risk and compliance activities.”

"ZenGRC has been a great help for managing our assessments. The system is flexible, easy to use and constantly improving with regular updates."

“ZenGRC delivered much-needed continuity and value during a time of uncertainty caused by the pandemic. It was a huge weight off our CIOs back that we could maintain our compliance obligations as planned and on schedule. Our program didn’t miss a beat.”

"We’ve achieved all our compliance objectives. We’re in a really good compliance posture going forward."

"ZenGRC enabled us to start demonstrating and tracking ongoing compliance in a matter of days."

"For small to mid-sized companies with stretched infosec resources, scaling a compliance program on your own eats up too much time and money. It’s a testament to ZenGRC and the platform’s ability to manage multiple frameworks that we saw value soon after implementation. The solution just makes sense from a cost benefit.”

"We wouldn’t be anywhere near where we are in our risk management program without ZenGRC.”

"When I started at Bluegreen, we conducted our SOC and SOX audits with spreadsheets and emails, as is the norm at many organizations, We were getting the job done, but it was cumbersome, requiring ongoing exchanges with internal staff and auditors to ensure individuals had what was needed to move the audit towards completion."

"ZenGRC allows us to push ourselves as an organization, collectively assessing the most simple, yet strategic, way to assess vendors, We ask fewer risk-related questions but gain more assurances about vendors — best practices we strongly believe in.”

“Zen was easy to use, it matched our mental model for how things ought to be linked together, it had all the compliance programs we needed to deal with available to us as templates and it was extensible. I didn’t find another solution that even came close.”

“The usability and efficiency that ZenGRC provides is outstanding. The seeded content preloaded by Reciprocity’s onboarding team gave us a huge jumpstart. We were able to get up and running in less than 15 days.”