LogicGate Risk Cloud

The Skeptic

The risk pages document customizable risk registers, automated risk assessment and mitigation workflows, KRI monitoring, financial quantification of impacts, and a connected graph view of assets, risks and controls, with incident handling appearing as automated routing and tracking. We found no public information on a documented risk methodology, protection-need inheritance across asset relations, or NIS2 24h/72h reporting deadlines, so the evidence stops short of the top band. 1 2 3

Report an error

The Skeptic

Control records with citations, mapping of Unified Compliance Framework common controls onto internal controls, automated control testing with issue notifications, and dashboards for control audit status, evidence testing results and corrective actions are all documented. We found no public information on a statement of applicability or on measure delegation and escalation, and one captured page still describes Spark AI control testing in future tense for January 2026, which a buyer should confirm has shipped. 4 5 7

Report an error

The Skeptic

Thirty-three frameworks are listed by name including ISO 27001-2, SOC 2, NIST CSF, GDPR, PCI DSS, HIPAA and CMMC, with predefined crosswalks and automatic import and mapping of new requirements and controls from the Unified Compliance Framework as authority documents change. The captured pages give different figures for the framework total (over 25, over 30, and 33 in the catalog), the catalog notes that framework licences are not included with the platform, and we found no public information on NIS2, TISAX, DORA or BSI IT-Grundschutz coverage. 4 5 6 7

Report an error

The Skeptic

An audit log export API, an automated evidence collection endpoint that pushes evidence without exposing internal systems, continuously updated executive reporting with AI-generated summaries, and an A-LIGN partnership mapping audit evidence requirements into the platform are documented. We found no public information on read-only auditor access or on reproducing any record as it stood on a given date; the 98 percent drop in audit findings and 80 percent faster audit completion are vendor case-study figures a buyer should ask to see sourced. 4 8 9

Report an error

The Skeptic

A documented REST API spans core objects — workflows, field values, bulk record import, evidence upload and audit log export — alongside webhooks, a Postman collection, an SFTP connector, an MCP server and pre-built evidence sources for HR and cloud-security systems, with named connectors including Jira, Workday, AWS Security Hub, CrowdStrike and BitSight. The captured pages give different totals for the catalog (200-plus on the homepage against 267 in the integrations directory), and we found no public information on single sign-on or SCIM provisioning. 1 8 10 11

Report an error

The Skeptic

The contracting entity is proven as LogicGate, Inc. of Chicago, Illinois — a US company — and customer instances run on vendor subdomains, while the captured pages state nothing about hosting location, data residency, a data processing agreement or subprocessors, leaving every dimension beyond the entity unknown. OpenAI appears among the named integrations, though the pages do not state what data it processes. 1 3 8 10

Report an error

The Skeptic

The only pricing route on the captured pages is a 'Request Pricing' call, and we found no public amounts, editions or billing periods. Licensing structure is partly disclosed — two Power User licences with unlimited users included per subscription, and 20 integration service hours for the Unified Compliance Framework connector — but without figures the real invoice is not computable from public pages. 1 2 7

Report an error