ControlHatch
6.7#7 in internal controls softwareFree planFree planWeb
VisitControlHatch vs Eramba
What both publish
| Fact | ControlHatch | Eramba |
|---|---|---|
| Founded | The opened company and product pages do not state a founding year. | 2007 |
| Frameworks | The site says ControlHatch supports more than 50 frameworks and standards, including SOX 404, SOC 1 and SOC 2, ITGC, ISO 27001, PCI DSS, and HIPAA. | The maker lists more than 70 ready-to-import compliance packages and says users can upload a custom framework as a CSV. |
| Headquarters | The terms give the company address as 681 S Logan St, Denver, Colorado 80209, United States. | London, United Kingdom, and Bratislava, Slovak Republic |
| Integrations | The homepage says ControlHatch integrates with existing workflows but names no specific third-party integrations. | Authentication integrations include LDAP, SAML and Google OAuth, with SCIM, CSV and LDAP synchronization options for accounts. |
| Intended users | The stated audiences include internal-audit departments, external-audit firms, compliance professionals, ERM teams and accounting or finance departments. | The access management guide describes GRC team members as managing information such as risks, controls and policies, while other departments and suppliers may provide review feedback. |
| Licence | ControlHatch software and platform content are proprietary Lawson Advisory Group property, and the terms prohibit copying, modification, redistribution and derivative works. | Eramba states that Community and Enterprise are source-available but not open source; modification, reverse engineering and redistribution are prohibited. |
| Purpose | ControlHatch is a GRC platform for SOX compliance, internal controls, risk assessments, and operational audits. | Eramba is GRC software designed to help organizations manage governance, risk and compliance activities. |
ControlHatch plans
- FreeFree
Eramba plans
- CommunityFree
- Enterprise On-Premise€2,500 a year
- Enterprise SaaS€5,000 a year
- Community on-premisesFree
- Community On PremiseFree
- Implementation workshop€800, paid once
Pick ControlHatch if…
ControlHatch suits SOX compliance teams, internal or external audit firms, risk and compliance professionals, and accounting or finance departments. It is useful for organizations coordinating control testing, certifications, evidence requests, risk assessments, and audit documentation in a web platform.
Pick Eramba if…
Eramba suits GRC teams managing risks, controls, policies, compliance, or related review workflows. Other departments and suppliers can provide review feedback, while organizations needing asset discovery should note its network-scanner limitation.