TinyGRC is an app for the Atlassian Confluence that helps you track basic compliance and visualize overall performance. Track SOC2, PCI, ISO 27001, NIST CSF, NIST 800-53, and HIPAA compliance efforts among others.
Release 4.0
A new version, 4.0 in Atlassian Cloud built on the new Atlassian infrastructure.
TinyGRC brings Governance, Risk, and Compliance into the Confluence you already use.
Most GRC platforms ask your team to leave the tools they live in and re-enter everything into a new dashboard. TinyGRC is different — it works inside Confluence, right next to the work the evidence comes from.
What you can do with TinyGRC:
Track multiple standards — SOC 2, ISO 27001 (2022), HIPAA, PCI, FedRAMP, NIST CSF, and NIST 800-53 r5 — each with its own controls and progress.
Collect and organize evidence in the pages where it belongs, instead of a scattered folder of files.
Collaborate with your auditor in real time. Grant access to a Confluence page, submit evidence, and get it approved or rejected — no more emailing versions back and forth.
See the whole picture with visual charts that show overall compliance progress by standard and by control.
Who it’s for: small and mid-sized teams that need real, defensible compliance without the overhead — or the price tag — of enterprise GRC suites.