EasyRisk
easyrisk.io
What it is
EasyRisk is an operational risk register for identifying, analyzing, evaluating, treating, and monitoring risks. Its qualitative 5×5 matrix shows inherent and residual risk and computes severity bands. EasyRisk describes its workflow as aligned with ISO 31000, but explicitly says it is not certified to that standard. Risk and treatment changes record who made them, when, and the old and new values; application users cannot edit or delete those audit entries. Dashboards surface overdue reviews and high-severity risks, and each risk has a next-review date. Teams can assign owners and roles, set treatment actions and due dates, and discuss risks in comment threads. The pricing comparison lists a REST API and MCP server, and Enterprise supports SAML and OIDC single sign-on. EasyRisk can run on an organization’s own infrastructure or servers. The Free plan includes unlimited risks, one risk board, one editor, and one attachment per risk. Team is $168 a year per editor, billed annually; Business is listed at $29 a year per editor, billed yearly.
Spec sheet
- Purpose
- EasyRisk is an operational risk register for identifying, analyzing, evaluating, treating, and monitoring risks.Read 30 Sep 2026 · easyrisk.io
- Audience
- The Enterprise plan is presented for regulated organizations with formal second- and third-line defenses; Business is described for multi-team organizations and board reporting.Read 30 Sep 2026 · easyrisk.io
- Integrations
- The pricing comparison lists a REST API and MCP server for AI assistants; Enterprise SSO supports SAML and OIDC with MS Entra ID, Okta, and Google Workspace.Read 30 Sep 2026 · easyrisk.io
- Security
- The Trust Center says workspace isolation is enforced with database Row-Level Security and tested automatically before each release.Read 30 Sep 2026 · easyrisk.io
- Support
- The Free plan includes standard email support, paid Team and Business plans include priority support, and Enterprise includes a dedicated customer success manager.Read 30 Sep 2026 · easyrisk.io
- Headquarters
- Wilen b. Wollerau, SwitzerlandRead 28 Sep 2026 · easyrisk.io
- Assurance
- For organizations requiring ISO 27001 certification, a SOC 2 report, or penetration-test reports, the Trust Center asks them to contact EasyRisk to confirm whether the requirement can be met.Read 30 Sep 2026 · easyrisk.io
- Audit history
- Risk and treatment changes record who made the change, when it happened, and the old and new values; audit entries cannot be edited or deleted through the application.Read 30 Sep 2026 · easyrisk.io
- Hosting and backups
- Application data and backups remain within the EU/EEA and Switzerland; the database is backed up daily, with the latest 30 backup runs retained in encrypted form.Read 30 Sep 2026 · easyrisk.io
- Review monitoring
- Dashboards surface overdue reviews and high-severity risks, and each risk has a next-review date.Read 30 Sep 2026 · easyrisk.io
- Risk scoring
- It provides a qualitative 5×5 matrix with inherent and residual risk views and computed severity bands.Read 30 Sep 2026 · easyrisk.io
- Self-hosting
- EasyRisk says it can run on an organization's own infrastructure or servers.Read 30 Sep 2026 · easyrisk.io
- Team collaboration
- Users can assign risk owners and roles, treatment actions and due dates, and discuss risks in comment threads.Read 30 Sep 2026 · easyrisk.io
- Workflow
- The product describes its risk workflow as ISO 31000 aligned and explicitly says it is not certified to ISO 31000.Read 30 Sep 2026 · easyrisk.io
Plans and prices
Strong points and limits
Strong points
- Tracks inherent and residual risk in a 5×5 matrix.
- Audit entries retain old and new values.
- Dashboards surface overdue reviews and high-severity risks.
- Can run on an organization’s own infrastructure.
- Free plan includes unlimited risks.
Limits
- Free plan is limited to one board and one editor.
- EasyRisk says it is not ISO 31000 certified.
- Free allows one attachment per risk.
Who it suits
EasyRisk suits organizations that need a structured risk register, review tracking, and audit history. Business is described for multi-team organizations and board reporting, while Enterprise is presented for regulated organizations with formal second- and third-line defenses.
Verdict
EasyRisk combines risk scoring, review monitoring, treatment tracking, and an application-protected audit history. Note its explicit ISO 31000 certification limitation and compare the Free plan’s board and editor limits with your needs.
Where Specifiction places it
- Risk Management Software#2 of 348.4