Noru

Noru is agentic compliance software for technology companies and other security and privacy-minded organisations. It connects to the systems a company already runs, with integrations including AWS, GCP, Azure, GitHub and GitLab. AI agents map controls, draft policies, gather evidence and flag drift, and the customer's team reviews and approves. Six solutions are offered: Agentic Compliance (ISO 27001, SOC 2 and 30+ frameworks), Privacy Automation (GDPR Article 30 records), Regulatory Compliance (DORA, NIS2, Cyber Resilience Act, Nordic schemes), AI Governance, Third-Party Risk Management and Risk Management. Compliance data can be embedded in developer tools through an API and MCP. Noru is operated by The GRC Company AB in Stockholm, Sweden.