Submarine

Spec sheet

Purpose

Submarine is a governance, risk and compliance platform for insurers and brokers in the UAE, Saudi Arabia and the wider GCC.Read 8 Oct 2026 · grcsubmarine.com

Integrations

The Enterprise plan mentions integrations, and the feature comparison lists a REST API and API keys; no named third-party integrations are listed on the opened pages.Read 8 Oct 2026 · grcsubmarine.com

Support

Basic includes email support; Enterprise lists onboarding and priority support.Read 8 Oct 2026 · grcsubmarine.com

Access and API

Enterprise includes role personas, per-module permissions, SSO, a REST API and API keys.Read 8 Oct 2026 · grcsubmarine.com

AI Copilot

The AI Copilot answers questions about gaps, risks and controls using organizational data, cites supporting records and is scoped to what the user may see.Read 8 Oct 2026 · grcsubmarine.com

Audit trail

An append-only audit trail records who changed what and when by default.Read 8 Oct 2026 · grcsubmarine.com

Controls

It maps a common control set across frameworks and tracks evidence, control testing, findings and remediation.Read 8 Oct 2026 · grcsubmarine.com

Customization

The platform supports custom risk categories and fields, and Excel import on every register.Read 8 Oct 2026 · grcsubmarine.com

Dashboards

The platform provides real-time coverage and risk metrics with configurable per-role dashboards.Read 8 Oct 2026 · grcsubmarine.com

Frameworks

The platform lists NCA ECC-2:2024, SAMA CSF, OTCC, ADHICS v2, UAE IA, CBUAE Rulebook, DHA NABIDH, ISO/IEC 27001, NIST CSF, NIST 800-53, EU AI Act and Saudi PDPL.Read 8 Oct 2026 · grcsubmarine.com

Plan scope

The pricing page describes Basic as core GRC for a single organization and says individual modules can be enabled per organization on request.Read 8 Oct 2026 · grcsubmarine.com

Policies and continuity

Enterprise includes a versioned policy document store and business continuity and recovery plans with objectives and test cadence.Read 8 Oct 2026 · grcsubmarine.com

Regional readiness

The site describes Submarine as built for the GCC, with regional frameworks, data-residency awareness and an RTL-ready UI.Read 8 Oct 2026 · grcsubmarine.com

Risk management

The configurable risk register supports multi-dimension impact, rating bands, residual scoring, risk appetite, KRIs, incidents, AI residual-risk assessments and third-party risk.Read 8 Oct 2026 · grcsubmarine.com

Plans and prices

Every Submarine plan and price →

Where Specifiction places it

• Governance, Risk and Compliance Software#23 of 367.1