PolicyCortex
policycortex.com
Spec sheet
- Purpose
- PolicyCortex is a compliance and assurance platform for regulated cloud and AI systems that connects requirements, control implementation, remediation, and verifiable evidence.Read 3 Oct 2026 · policycortex.com
- Integrations
- Listed integrations include Microsoft Defender for Cloud, AWS Security Hub, GCP Security Command Center, Wiz, Prisma, ServiceNow, Jira, Linear, Azure DevOps, Drata, and Vanta.Read 3 Oct 2026 · policycortex.com
- Headquarters
- Dallas-Fort Worth, TexasRead 28 Sep 2026 · policycortex.com
- Company
- PolicyCortex, Inc. is based in Dallas-Fort Worth, Texas, and identifies Leonard Esere as its founder and chief executive.Read 3 Oct 2026 · policycortex.com
- Access and support
- Access requests are reviewed by the company, which confirms scope and commercial terms before onboarding; fixed-scope delivery support is optional.Read 3 Oct 2026 · policycortex.com
- Cloud providers
- It reads configuration and events from AWS, Azure, and GCP, including GovCloud, Azure Government, and GCC High; GCP does not support its ATO workflow.Read 3 Oct 2026 · policycortex.com
- Evidence retention
- The platform page describes an append-only evidence store with seven-year retention and records regenerated as of historical timestamps.Read 3 Oct 2026 · policycortex.com
- Frameworks
- The company says it supports CMMC Level 2, NIST 800-53 and 800-171, FedRAMP baselines, and ATO and continuous authorization workflows.Read 3 Oct 2026 · policycortex.com
- Notifications and AI
- Listed notification options include Slack, Microsoft Teams, PagerDuty, email, and webhooks; listed AI and ML platforms include Azure OpenAI, AWS Bedrock, GCP Vertex AI, OpenAI API, Anthropic, Hugging Face, and MLflow.Read 3 Oct 2026 · policycortex.com
- Product limit
- The company says PolicyCortex prepares evidence and supports readiness but does not perform the assessment or make certification or authorization decisions.Read 3 Oct 2026 · policycortex.com
- Review packages
- It generates SSP, SAR, and POA&M documents from one implementation record and supports OSCAL 1.1.2 and eMASS XML exports.Read 3 Oct 2026 · policycortex.com
- Security status
- The company states that its cryptography uses FIPS 140-3 validated modules, SOC 2 Type II is in progress, and FedRAMP Moderate is planned but not yet held.Read 3 Oct 2026 · policycortex.com
- Tenant and evidence security
- The company says policy evaluation and evidence collection run inside the customer tenant, with no telemetry pipeline to its servers and no evidence egress; evidence records are SHA3-256 hashed and chained.Read 3 Oct 2026 · policycortex.com
- Workflow
- The platform supports defining system scope, implementing controls, closing gaps, preparing for review, and maintaining readiness as systems change.Read 3 Oct 2026 · policycortex.com
Plans and prices
FinOps cost intelligence Price not published Annual specialist license; available separately as a supporting module FOCUS 1.x visibility · budgets · anomaly detection · commitment recommendations · chargeback Read 3 Oct 2026 · policycortex.com
Full Platform + AI Governance Priced on request Annual or monthly terms; commercial terms on request Per organization · scope and terms confirmed before onboarding Read 3 Oct 2026 · policycortex.com
Governance & Continuous ATO Price not published Annual license; commercial terms on request Per organization · scope and terms confirmed before onboarding Read 3 Oct 2026 · policycortex.com
Where Specifiction places it
- Cloud Governance Software#22 of 266.7