Risk register and assessments
Build a risk library by category, score inherent and residual ratings inside assessments, and track treatment through to closure.
GRC in one portal
Governance, risk and compliance software for growing firms
Protocore replaces scattered spreadsheets with a single multi-client portal for risk registers, controls, policies, audits and corrective actions — so your programme stays joined up and audit-ready.
- Quantitative risk appetite with KRI thresholds and alerts
- Control testing history with attached evidence
- Internal audit calendar, findings and corrective actions
- Enforced MFA, SSO and role-based access
One record
Risk to control to test to finding to action, linked end to end.
Minutes
Pull a board or supervisor pack instead of rebuilding it by hand.
Per client
Isolated workspaces for every firm, entity or engagement you oversee.
What Protocore covers
Every workspace is configured around the programme an organisation actually runs, so teams see the registers relevant to them and nothing else.
Controls and control testing
Link controls to the risks they mitigate, record test results over time, and see where coverage is thin.
Compliance oversight
Keep oversight tasks, periodic reviews and regulatory checks in one place instead of spreadsheets and mailboxes.
Policies and document control
Versioned policies and procedures with owners, approvals and review dates so nothing quietly goes stale.
Audits, findings and actions
Plan internal audits on a calendar, raise findings from the work, and assign corrective actions with due dates.
Risk appetite and indicators
Set quantitative appetite thresholds, attach key risk indicators, and get alerted when a measure moves out of range.
From spreadsheets to a defensible record
01
Configure the programme
Choose the sections and sub-sections a workspace needs, then apply a starter library for your industry or framework.
02
Run the work in one place
Score risks, test controls, log oversight, publish policies, raise findings and drive actions to closure.
03
Evidence on demand
Dashboards, appetite alerts and export-ready reports built from the live record — not a separate deck.
Built for multi-client oversight
Isolated workspaces
Each client or legal entity gets its own workspace with separate registers, members and access rules.
Role-based access
Owners, contributors and internal auditors see only what their role needs, with activity recorded as work happens.
Evidence you can hand over
Attach evidence to controls, tests and findings so reviews and audits start from a complete record.