Software > Controlling and Cost Accounting > Risk Management > HITGuard GRC
Clear audit, data protection, incident, risk and compliance management - cloud/on-prem

HITGuard GRC

Clear audit, data protection, incident, risk and compliance management - cloud/on-prem
 
 
 
 
 
 
 
 
Updated on 22. Jan 2026 by TogetherSecure GmbH
Demo version

By practitioners for practitioners!

HITGuard was created based on practical experience and is constantly being developed with the user's perspective in mind. The GRC tool supports you with optimized workflows to work together with different people in your management system in a targeted manner. HITGuard enables you to control the development of your company's maturity level and to share the results achieved with both the management level and the responsible employees themselves. This tool adapts to your requirements, not the other way around!

Benefits

  • Measure the maturity level of your organization with various standard KPIs and also define your own key figures.
  • Respond to the requirements of your management and various authorities with reports compiled as required.
  • Centrally manage risk management systems from different areas, such as ISO 27001, ISO 9001, GDPR, TISAX, B3S, etc. in one risk management software.
  • Documentation to prove that all requirements for your compliance management system have been met.

HITGuard is divided into the following modules:

Risk management

Tailored to the maturity level of your organization and the associated level of detail of the analyses.

  • Risk identification with the aid of knowledge databases
  • Risk analysis & assessment within the framework of a freely configurable risk matrix
  • Risk reduction and monitoring by means of measures and controls
  • Historically traceable development of risks

Data protection

Implement requirements from the General Data Protection Regulation (EU GDPR) efficiently and sustainably.

  • Record and maintain your processing activities (VTs) in clear registers
  • Relieve the burden on data protection officers with delegable self-assessments of DPIAs
  • Quick checks to determine requirements with suggested measures and controls
  • Comprehensive reporting for DPAs, DPIAs, TOMs, requests for information, etc.

    Internal control system

    Workflow-based execution of controls & monitoring of the implementation of measures.

    • Workflow-supported processing of measures & controls
    • Regular progress reports on measures
    • Detailed, traceable logs of checks carried out
    • Key figures and meaningful reporting, including a risk-control matrix

        Compliance management

        Map internal and external requirements and document their fulfillment regularly and verifiably.

        • Knowledge databases with thematically grouped sets of audit questions
        • Suggestions for measures to deal with identified potentials
        • Control proposals for regularly checking the effectiveness of implemented measures
        • Evaluation of compliance according to various standards/norms and internal specifications

        Audit management

        Plan, organize and track the handling of internal and external audits in your company.

        • Maintain audit programs and plans for external and internal audits with your own questionnaires
        • Audit calendar with overviews and details of programs and individual dates
        • Assistants for conducting audits with options for responses through self-assessments
        • Audits on one or more standards and norms with corresponding evaluation options

        Case management

        Implement an anonymous whistleblower system and enable employees, business partners, customers and other stakeholders to anonymously report possible violations, e.g. of laws or internal guidelines.

        • Anonymous reporting in accordance with EU Directive 2019/1937
        • Secure and anonymous reporting channel that protects the identity of the whistleblower and third parties
        • Workflows for efficient processing of reports, questions and answers
        • Automatic reminders to comply with statutory response deadlines

          Have we piqued your interest? Request a no-obligation demo today!

          Interfaces:

          CSV Import/ Export
          Microsoft Excel
          REST API

          References:

          • VAMED AG (sector: planning, construction and operation of healthcare facilities; approx. 18,000 employees)
          • PORR AG (sector: construction group; approx. 20,000 employees)
          • DEKRA Automobil GmbH
          • Jochen Schweizer mydays Holding GmbH
          • KRAGES (sector: operator of nursing homes and general healthcare facilities)
          • bluesource - mobile solutions gmbh (sector: app development)
          • IT Cluster (Industry: Representation of interests)
          • SBA Research (Industry: Research)
          • computer betting company gmbh (Industry: Gambling)
          • Adullam hospital and care centers
          • MIC (Industry: Automotive supplier, software manufacturer customs software)
          • LAFUWA GmbH (Industry: Engineering office for environmental technology)
          • cyan Security Group GmbH (Industry: Provider of IT security solutions)
          • LeitnerLeitner GmbH Auditors and tax consultants
          Contact information:
          Ms. Ing. Mag. Christina Haas
          Geschäftsführerin
          Frau Ing. Mag. Christina Haas
          +43 (0) 670 200 54 49
          Explore more about the software:
          Request online demonstration
          request meeting
          Software exposé
          request URL

          Functions (excerpt) of HITGuard GRC:

          Access management
          Access restriction
          Action tracking
          AES encryption
          Analysis functions
          Anonymization
          API interfaces
          Archiving
          Assessment forms
          Assessment tools
          Asset register
          Audit management
          Auditfunction signature
          Authentication
          Authorization management
          Authorization profiles
          Business Impact Analysis
          Business Processes
          Case management
          Checklist creation
          Checklists
          Compliance management
          Control plan
          Control Specification
          Control system
          Corrective actions
          Corrective and preventive actions
          Critical production materials
          critical products
          critical suppliers
          Dashboards
          Data analysis
          Data categories
          Data encryption
          Data maintenance
          Data Processing Agreement (DPA)
          Data protection impact assessment
          Data protection management
          Database
          Deadline monitoring
          decentralized data collection
          Deletion classes
          Deletion rules
          Directory of processing activities
          Dispatch of tasks
          DMS
          Document control
          Document repository
          Document workflow
          Documentation and evidence management
          Documentation of QM
          Drill-down analysis
          DSGVO Documentation
          E-mail integration
          Evaluation catalogs
          Excel import
          Export functions
          External parties
          Feedback submission
          Grouping of assets
          Hazard catalog
          Hierarchies
          Industry standards
          Inspection planning
          Inspection plans
          Inspection reports
          Integrate organizational structure
          Interfaces
          Internal audit functions
          ISO 27001
          ISO standard management
          Mapping system landscapes
          Master data interface
          Measures export and import
          Measures management
          Measures overview
          Measures status query
          Monitoring of workflows
          Multi-user capability
          Multilingualism
          Multitenancy
          norms and standards
          Notification system
          Occupational safety
          Operating instructions
          Opportunity management
          Passkeys
          Probabilities of occurrence
          process reference of risks
          protected subdirectories
          Quality assurance
          Queries
          Ranking of risks
          recurring risks
          Reminder functions
          Report management
          Requests from data subjects
          resubmission of risks
          Retention periods
          Reviews
          Revision security
          Rights management
          Risk analysis
          Risk assessment
          Risk cockpit
          Risk control
          Risk control measures
          Risk management
          Risk portfolio
          Risk priority number rankings (RPN)
          Risk recording
          Risk treatment plan
          Risk types
          Role Management
          Sample management
          Sample templates
          Search
          Security Incidents
          Security methods
          Security protocols
          Shift models
          SSL support
          Standards compliance
          Statement of applicability (SoA)
          Supplier audits
          Supplier evaluation
          Supplier qualification
          Supplier questionnaires
          Task generation
          Task management
          Task tracking
          Technical and organizational measures
          Template management
          Test result display
          Test results
          Text module management
          Text templates, sample texts
          Time series analyses
          Top measures
          Top risks
          Trend analyses
          Two-factor authentication
          Unstructured data
          User management
          Version management
          Warranties
          Whistleblower system
          Workflow management

          Price

          0
          EUR
          Demo Version
          from 195.00
          EUR
          plus 20% VAT
          annually

          Get to know the software better! Request a video appointment for a personal presentation!

          Technical specifications:

          Web-based:
          yes
          SaaS, Cloud:
          yes
          On-premises (local installation):
          yes
          AI Supported:
          yes
          Multi-user (network-compatible):
          yes
          Multi-client compatible:
          yes
          The product is also available in:
          specialized suppliers
          Maintenance:
          included in price
          Customizing:
          possible for a fee
          First installation (year):
          2017
          Number of installations:
          > 100
          Manufacturer based in:
          Austria
          Training:
          for a fee
          Hotline:
          included in price
          Installation support:
          included in price
          Documentation:
          Online Help, Demo version, Technical documentation
          Dialogue language(s):
          English, German
          System requirements:
          Compatible operating systems (runs with):
          Win 11
          Win 10
          Win Server
          Mainframe based
          Unix based
          Linux based
          Mac OS
          Mobile OSs (supports):
          iOS
          Android
          Old Compatible Operating Systems:
          Win 8
          Win 7
          Data storage medium:
          DVD
          CD-ROM
          Download
          Flash memory

          Software was recommended by SoftGuide in this IT projects:

          Austrian mechanical engineering company seeks risk management software

          Project no.: 23/3226
          Tender until: finished

          We are looking for software that is necessary for risk assessment of automation solutions for ... more

          Research institute seeks vendor qualification tool

          Project no.: 23/3070
          Tender until: finished

          We are a clinical research company and are planning to introduce a vendor qualification tool to ... more

          IT service provider seeks complete GRC solution

          Project no.: 23/3031
          Tender until: finished

          We are an internationally positioned IT service provider (software, provision of data centers) ... more

          more IT projects