Topic · concept
Internal Control Standards
Internal Control Standards are frameworks of policies and procedures designed to provide reasonable assurance regarding the achievement of objectives in operational effectiveness, reliable financial reporting, and compliance with laws and regulations. The COSO Internal Control - Integrated Framework (originally released in 1992 and refreshed as ICIF-2013) is the most widely adopted standard for internal controls and underpins SOX 404 compliance, with supplemental 2023 guidance for internal control over sustainability reporting (ICSR) addressing modern risks including generative AI and robotic process automation.
127 related providers on APIs.io
Source repository →
Links
Providers working in Internal Control Standards
Providers whose own tags share at least two of this topic's tags, most shared first — the top 30 of 127.
| Provider | About | Rating | APIs |
|---|---|---|---|
| anecdotes | anecdotes is an enterprise Governance, Risk and Compliance (GRC) platform, founded in 2020 and headquartered in Tel Aviv, that pairs a GRC data engine with AI agents to replace point-in-time audit cycles with continuous, evidence-backed co… | exemplar | 2 |
| Wegalvanize | Wegalvanize.com is the former web home of Galvanize, the governance, risk, and compliance (GRC) software company behind the HighBond platform; Galvanize was acquired by Diligent and wegalvanize.com now redirects to diligent.com. The HighBo… | developing | 1 |
| Vanta | Vanta is a trust management platform that automates security compliance for frameworks including SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR. The Vanta API enables organizations to programmatically manage their compliance posture, automate… | developing | 2 |
| OpenPages | IBM OpenPages is an AI-driven, unified governance, risk, and compliance (GRC) platform delivered as a managed service on IBM Cloud. Originally founded as OpenPages Inc. (a Matrix Partners portfolio company) and acquired by IBM in 2010, it… | developing | 1 |
| MetricStream | MetricStream is a San Jose, California based enterprise software company and a market leader in integrated Governance, Risk, and Compliance (GRC) management, serving large regulated organizations across banking and financial services, insu… | thin | 8 |
| Anitian | Anitian, Inc. is a Portland, Oregon cloud security and compliance automation company that helps SaaS providers reach and maintain U.S. federal compliance. Its FedFlex platform automates the FedRAMP lifecycle — pre-engineered AWS and Azure… | emerging | 2 |
| Risk Ledger | Risk Ledger is a London-based third-party and supply chain risk management platform that helps organizations assess, monitor, and continuously manage the security risks across their supplier networks. Through its "Active Supply Chain Secur… | emerging | 0 |
| Carbide | Carbide (carbidesecure.com) is a compliance-automation and risk-management platform that pairs software with credentialed security advisors to help fast-growing organizations achieve and maintain security certifications and regulatory comp… | emerging | 0 |
| Azimuth GRC | Azimuth GRC provides automated compliance management software that transforms complex regulatory requirements into clear, actionable guidance. Their platform, VALIDATOR, offers real‑time monitoring, audit automation, and curated legal cont… | emerging | 1 |
| Diligent Pharma | Diligent Pharma, Inc. is a Princeton, New Jersey clinical-trial quality and compliance company, founded in 2015, that operates a centralized vendor qualification and oversight platform for pharmaceutical and biotech sponsors and their serv… | emerging | 0 |
| Wordsmith | Wordsmith is an Edinburgh-based legal AI platform built for in-house legal teams, marketed as a Slack-native legal copilot that lets non-legal staff self-serve compliant answers, templates, and contract reviews directly in the tools they a… | emerging | 2 |
| Diligent | Diligent Corporation is a governance, risk, and compliance (GRC) software company best known for its board management portal (Diligent Boards / Boardbooks) and the broader Diligent One Platform, which unifies board management, enterprise r… | emerging | 4 |
| Greenboard | Greenboard is an AI-native compliance software platform for SEC- and FINRA-regulated financial institutions, consolidating communications archiving, employee compliance monitoring, marketing/advertising review, firm-wide compliance managem… | emerging | 0 |
| Klaimee | Klaimee is a Y Combinator (Spring/P26 batch) startup building certification, financial guarantee, and liability insurance for AI agents running in production. The company evaluates an autonomous agent across risk dimensions such as scope,… | minimal | 0 |
| Sahl | Innovatrix Tech, Corp. operates Sahl (getsahl.io), an AI-powered Governance, Risk, and Compliance (GRC) platform built in the MENA region for MENA organizations. Sahl automates policy generation, control mapping, risk assessment, evidence… | minimal | 0 |
| Auditocity | Auditocity is an HR compliance software platform that helps organizations of any size master regulatory requirements and best practices. It maintains a library of more than 14,000 questions spanning federal, state, and industry-specific HR… | minimal | 0 |
| Kovr.ai | Kovr.ai is a security and compliance automation company surfaced through the Battery Ventures portfolio and profiled in the API Evangelist network. Its verified public engineering presence is the GitHub organization github.com/kovr-ai, who… | minimal | 0 |
| Paisley Consulting | Paisley Consulting was a governance, risk, and compliance (GRC) software company best known for its AutoAudit internal audit management product. The Paisley Consulting brand and its paisleyconsulting.com domain now redirect to Empowered Sy… | minimal | 0 |
| Security Standards and Procedures | Frameworks and documented guidelines that establish security requirements, controls, and best practices for protecting organizational assets and information systems. It plays a critical role in protecting organizational assets and maintain… | minimal | 0 |
| Outils De Gestion Des Risques | Outils de Gestion des Risques refers to risk management tools and services used in French-speaking business and regulatory environments, covering risk assessment, monitoring, mitigation, reporting, and compliance. No verifiable public APIs… | minimal | 0 |
| Amazon Config | AWS Config provides a detailed view of the configuration of AWS resources in your AWS account. This includes how the resources are related to one another and how they were configured in the past, enabling assessment, auditing, and evaluati… | 1 | |
| AuditBoard | AuditBoard (rebranded in 2026 as Optro) is an AI-powered GRC (governance, risk, and compliance) SaaS platform used by more than half of the Fortune 500 to run their audit, risk, and compliance programs. Its connected-risk suite spans Contr… | 0 | |
| OneTrust | OneTrust is an enterprise trust, privacy, and AI-governance platform. Its developer portal publishes 37 downloadable OpenAPI definitions covering roughly 631 operations across Universal Consent & Preference Management, Cookie Consent / CMP… | exemplar | 37 |
| Drata | Drata is a continuous security and compliance automation platform supporting SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, and more, with policies, evidence, and trust center. Drata exposes a public REST API plus the SafeBase Trust API (acquired… | exemplar | 3 |
| Avetta | Avetta operates a cloud-based supply chain risk management (SCRM) and contractor compliance platform, Avetta One, used by more than 360,000 businesses across 120+ countries to prequalify, audit, and continuously monitor contractors and sup… | exemplar | 6 |
| SecurityScorecard | SecurityScorecard is a cybersecurity ratings and third-party risk management platform that continuously rates the security posture of any company from the outside in, producing an A-F security score across ten risk factors. Its REST API (b… | exemplar | 8 |
| Amazon CloudTrail | AWS CloudTrail enables governance, compliance, operational auditing, and risk auditing of your AWS account by tracking user activity and API usage across AWS environments, hybrid setups, and multicloud deployments with immutable audit trai… | strong | 1 |
| Thomson Reuters | Thomson Reuters provides over 137 APIs across legal, tax and accounting, risk and fraud, and trade and supply industries through their global developer portal. APIs cover Westlaw legal research, Checkpoint tax content, ONESOURCE tax softwa… | strong | 134 |
| CipherOwl | CipherOwl provides AI-powered security and compliance for institutional stablecoins and digital assets. Its Screening, Risk & Reporting (SRR) API turns a blockchain address into a compliance decision: real-time sanctions and risk screening… | strong | 1 |
| Fenergo | Fenergo is an Irish-headquartered financial-services SaaS vendor whose Fen-X platform delivers Client Lifecycle Management (CLM), Know Your Customer (KYC), AML screening, client onboarding, transaction monitoring and regulatory compliance… | strong | 145 |
A term in the Regulation area.
Tags
AuditingComplianceCOSOGovernanceInternal ControlsRisk ManagementSOX