
Autumn8
5.2#29 in governance, risk and compliance softwareWebAPI
Visit

| Fact | Autumn8 | Eramba |
|---|---|---|
| Frameworks | The site lists SOC 2, ISO 27001, HIPAA, GDPR, NIST 800-53, FedRAMP, EU AI Act, CSA CAIQ, PCI DSS, and custom frameworks. | The maker lists more than 70 ready-to-import compliance packages and says users can upload a custom framework as a CSV. |
| Integrations | The homepage names MCP, Claude, OpenAI, and Gemini as part of its integrated systems. | Authentication integrations include LDAP, SAML and Google OAuth, with SCIM, CSV and LDAP synchronization options for accounts. |
Autumn8 suits cloud-native SaaS companies, especially seed to Series B businesses and small security teams. It also fits organizations managing compliance across the listed frameworks and AI-agent activity.
Eramba suits GRC teams managing risks, controls, policies, compliance, or related review workflows. Other departments and suppliers can provide review feedback, while organizations needing asset discovery should note its network-scanner limitation.