Overview

Swif GRC is free governance, risk, and compliance (GRC) software, hosted by Swif. Use it to manage your SOC 2, ISO 27001, HIPAA, NIST, CMMC, and other compliance programs, alongside your Swif device management.

You can launch Swif GRC from the Compliance Marketplace in Swif, in one click when possible.

Swif GRC addresses

Service	Address
Swif GRC app	`https://grc.swif.ai` (EU: `https://grc.eu.swif.ai`)
Trust portal	`https://portal.grc.swif.ai`
API	`https://api.grc.swif.ai`

What this means for you

Bookmarks: old comp.swif.ai links redirect, so they keep working. Update them to grc.swif.ai when you can.
Trust portal links you've shared: links to portal.comp.swif.ai redirect too. When you next share your trust portal, use the new address.
API integrations: if you call api.comp.swif.ai directly, update your integration to api.grc.swif.ai.

Where you'll see the new name

Swif GRC now appears everywhere the old name did:

the Swif GRC app's pages, menus, and browser tab titles, including login, sign-up, and password reset
the trust portal
Statement of Applicability (SOA) pages, where Prepared by now reads Swif GRC
invite and notification emails
the Ask AI window
the Compliance Marketplace in Swif

Launch Swif GRC

In Swif, go to Compliance > Compliance Marketplace.
Click Launch Swif GRC, from the banner at the top of the page, or from the Swif GRC card.

What happens next depends on whether your organization already uses Swif GRC.

Your organization	What happens
Uses Swif GRC, and Swif has a saved API token	Swif GRC opens in a new tab, and you're signed in automatically.
Uses Swif GRC, but Swif has no saved API token	Swif GRC's login page opens in a new tab. Sign in as usual.
Doesn't use Swif GRC yet	A setup window opens, so you can connect Swif GRC to Swif.

The Compliance Marketplace stays open in its own tab.

Signed in automatically

If your organization already uses Swif GRC, and Swif has a saved API token from your earlier setup, Swif GRC opens at https://grc.swif.ai (or https://grc.eu.swif.ai for EU organizations), and you're signed in. There's nothing to copy or confirm.

Login page

If your organization already uses Swif GRC, but Swif doesn't have a saved API token, Swif GRC's login page opens instead. This can happen in a new browser, after clearing your browser data, or after the integration was set up again. Sign in as usual.

First-time setup

If your organization doesn't use Swif GRC yet:

The Launch Swif GRC window shows your Swif API key.
Click Copy. Launch Swif GRC becomes available.
Click Launch Swif GRC. Swif GRC opens at https://grc.swif.ai (or https://grc.eu.swif.ai for EU organizations).
Complete setup in Swif GRC, using the API key you copied.

Trust Center

To set up your organization's public trust portal, see Trust & Transparency Page — Your Organization's Public Trust Portal.

Troubleshooting

Swif GRC opens the login page instead of signing me in

Swif doesn't have a saved API token for your browser, for example in a new browser, or after you cleared your browser data. Sign in as usual.

Launch Swif GRC is grayed out in the setup window

Click Copy to copy your Swif API key first. Launch Swif GRC becomes available after you copy it.

Compliance Marketplace – Self-hosted GRC software - Swif GRC