Agent Index by Heritage Services
Submit / Claim
Home / Agents / Noru Agentic Compliance (GRC agents)

Noru Agentic Compliance (GRC agents)

Vendor: Noru (The GRC Company AB) · HQ: Sweden · Category: Compliance · Risk

Last verified · Added · 4 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

What it does

Noru is a Stockholm-built GRC platform aimed at ISO 27001 certification and European frameworks (NIS2, DORA, EU AI Act, ISO 42001, Cyber Resilience Act) alongside SOC 2 and 25+ others. Its Agentic Compliance pages say agents connected to the customer's systems do the work a person would otherwise do by hand: drafting the policies a framework requires, mapping controls across frameworks, gathering evidence from connected systems (for example MFA status pulled daily from Microsoft Entra ID) and linking it to controls, drafting treatments in the risk assessment, flagging a control when it drifts and surfacing the next task. Every output is a reviewable draft; nothing enters the program or reaches the auditor until a human accepts it. Agent tools exposed over MCP are bound to domain-scoped permissions, and each evidence record carries a capture-time digest and provenance. Cortex is the in-app assistant. Customer timelines are vendor claims. Pricing is quoted per package (based on systems connected and work volume), not published.

Frameworks

ISO 27001SOC 2

Vendor-claimed ISO 27001, SOC 2, NIS2, DORA, EU AI Act, ISO 42001, GDPR, EU Cyber Resilience Act

Pricing (as published)

Not published

Tasks

evidence collectionpolicy managementcontrol mappingcontrol monitoringrisk assessment

Sources

  1. noru.tech/solutions/agentic-compliance (primary)
  2. noru.tech/pricing
  3. noru.tech/company
  4. noru.tech/terms-and-conditions

Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email sales@heritageservices.online. See our methodology.

Not legal or audit advice. Confirm current pricing, framework coverage and India-regulatory claims with the vendor before purchasing.

Compare Noru Agentic Compliance (GRC agents) with

Alternatives

  • 6clicks Hailey AI — Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform. (shared tags: ISO 27001, SOC 2)
  • Akitra Andromeda AI compliance agents — AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer. (shared tags: ISO 27001, SOC 2)
  • Comp AI — Open-source-leaning AI compliance software that automates evidence collection, policy generation, and continuous monitoring for SOC 2, ISO 27001, HIPAA and GDPR. (shared tags: ISO 27001, SOC 2)
  • Complyance GRC AI Agents — Enterprise GRC platform with a fleet of task-specific AI agents for evidence review, control advice and remediation, policy drafting, risk treatment planning, vendor questionnaire review and risk scoring, and customer security questionnaires. (shared tags: ISO 27001, SOC 2)
  • Cypago Agentic Workflows — Cyber GRC platform whose AI agents build and run end-to-end compliance workflows from natural-language prompts, covering evidence collection, control testing, gap analysis and continuous control monitoring. (shared tags: ISO 27001, SOC 2)
  • Drata — Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs. (shared tags: ISO 27001, SOC 2)

See all Noru Agentic Compliance (GRC agents) alternatives →

Stay updated

We use your email only to send the newsletter. See our privacy policy.