ControlHatch vs Eramba
ControlHatch
controlhatch.com
Eramba
eramba.orgSide by side
| Figure | ControlHatch | Eramba |
|---|---|---|
| Price from | Free | €208.33/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | — | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 9 |
| Spec score · Internal Controls Software | 8.5 (#5) | 9.1 (#1) |
| Founded | The opened company and product pages do not state a founding year. | 2007 |
| Frameworks | The site says ControlHatch supports more than 50 frameworks and standards, including SOX 404, SOC 1 and SOC 2, ITGC, ISO 27001, PCI DSS, and HIPAA. | The maker lists more than 70 ready-to-import compliance packages and says users can upload a custom framework as a CSV. |
| Headquarters | The terms give the company address as 681 S Logan St, Denver, Colorado 80209, United States. | London, United Kingdom, and Bratislava, Slovak Republic |
| Integrations | The homepage says ControlHatch integrates with existing workflows but names no specific third-party integrations. | Authentication integrations include LDAP, SAML and Google OAuth, with SCIM, CSV and LDAP synchronization options for accounts. |
| Intended users | The stated audiences include internal-audit departments, external-audit firms, compliance professionals, ERM teams and accounting or finance departments. | The access management guide describes GRC team members as managing information such as risks, controls and policies, while other departments and suppliers may provide review feedback. |
| Licence | ControlHatch software and platform content are proprietary Lawson Advisory Group property, and the terms prohibit copying, modification, redistribution and derivative works. | Eramba states that Community and Enterprise are source-available but not open source; modification, reverse engineering and redistribution are prohibited. |
| Purpose | ControlHatch is a GRC platform for SOX compliance, internal controls, risk assessments, and operational audits. | Eramba is GRC software designed to help organizations manage governance, risk and compliance activities. |
| Self-hosting | The opened product pages describe a cloud platform and identify no self-hosted deployment option. | Community runs on customer servers, while Enterprise can run on customer infrastructure or as eramba-hosted SaaS. |
| Support | Support is available through a contact form and [email protected], with a stated typical reply time of one business day. | Community users receive forum and documentation help, while Enterprise customers receive unlimited email support during European business hours. |
Plans
Eramba
- CommunityFree
- Enterprise On-Premise€2,500 a year
- Enterprise SaaS€5,000 a year
- Community On PremiseFree
- Community on-premisesFree
- Implementation workshop€800, paid once
- Enterprise On Premise€2,500 a year
- Enterprise on-premises€2,500 a year
- Enterprise SaaS€5,000 a year
In their own words
ControlHatch
ControlHatch is a web-based GRC platform for SOX compliance, internal controls, risk assessments, and operational audits. Teams can organize control testing by audit round, record exceptions, and capture reviewer sign-off in an audit trail. Its AI-assisted workflow drafts risks, controls, and assertions from process descriptions for users to review and refine. Risk dashboards score risks and link them to mitigating controls. Recurring monthly or quarterly certification campaigns can send reminders and record timestamped attestations. A dashboard tracks evidence requests and fieldwork status, with scheduled reminders for outstanding PBC items; teams can export fieldwork to their own Excel testing templates. ControlHatch says it supports more than 50 frameworks and standards, including SOX 404, SOC 1 and SOC 2, ITGC, ISO 27001, PCI DSS, and HIPAA. Listed security measures include end-to-end encryption, role-based access control, audit logging, and SHA-256 hashing of uploaded evidence. The free plan costs nothing and includes unlimited users, entities, projects, and controls, AI-assisted workflows, and full data export.
Eramba
Eramba is governance, risk, and compliance software for organizations managing activities such as risk, compliance, data privacy, incidents, awareness programs, account reviews, and online assessments. It lists more than 70 ready-to-import compliance packages, and teams can upload a custom framework as a CSV file. Common tools include notifications, granular access controls, status tracking, custom fields, reporting, automations, and REST APIs. Eramba can accept API requests and send webhooks to other systems, with examples involving SIEM incident creation and Jira issue creation. Authentication options include LDAP, SAML, and Google OAuth; its documentation also describes LDAP synchronization. Community and Enterprise can be installed on-premises using Docker or VMware, while SaaS is also available. For SaaS, Eramba says it hosts systems in Europe or the USA and manages daily backups and upgrades when releases become available. Community is free; Enterprise On-Premise starts at €2,500 a year, and Enterprise SaaS starts at €5,000 a year. Eramba is not a network scanner; its documentation recommends syncing asset data from a CMDB through the REST API.