ControlHatch vs FloQast
ControlHatch
controlhatch.com
FloQast
floqast.comSide by side
| Figure | ControlHatch | FloQast |
|---|---|---|
| Price from | Free | $999/mo |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| API | — | Yes |
| Plans published | 1 | 2 |
| Spec score · Internal Controls Software | 8.5 (#5) | 8.6 (#3) |
| Spec score · SOX Compliance Software | 8.4 (#4) | 8.5 (#3) |
| Founded | The opened company and product pages do not state a founding year. | 2013 |
| Headquarters | The terms give the company address as 681 S Logan St, Denver, Colorado 80209, United States. | Los Angeles, California, US |
| Integrations | The homepage says ControlHatch integrates with existing workflows but names no specific third-party integrations. | FloQast lists integrations across ERP, banking, accounts payable, collaboration, communication, documentation, identity management, and payroll, including ADP, Box, Google Drive, Microsoft Teams, and Slack. |
| Intended users | The stated audiences include internal-audit departments, external-audit firms, compliance professionals, ERM teams and accounting or finance departments. | FloQast describes its platform as built for accountants and presents use cases for accounting, finance, controller, audit, and compliance roles. |
| Purpose | ControlHatch is a GRC platform for SOX compliance, internal controls, risk assessments, and operational audits. | FloQast is an accounting workflow automation platform built to help accounting teams manage close, reconciliation, accounting operations, and compliance workflows. |
| Security | The product lists end-to-end encryption, role-based access control, audit logging and SHA-256 hashing of uploaded evidence. | FloQast says it provides a SOC 3 report and performs annual penetration tests on high-risk products and infrastructure. |
| Support | Support is available through a contact form and [email protected], with a stated typical reply time of one business day. | Customers can submit platform support requests through FloQast’s support portal, and account managers or customer success managers handle billing questions. |
Plans
In their own words
ControlHatch
ControlHatch is a web-based GRC platform for SOX compliance, internal controls, risk assessments, and operational audits. Teams can organize control testing by audit round, record exceptions, and capture reviewer sign-off in an audit trail. Its AI-assisted workflow drafts risks, controls, and assertions from process descriptions for users to review and refine. Risk dashboards score risks and link them to mitigating controls. Recurring monthly or quarterly certification campaigns can send reminders and record timestamped attestations. A dashboard tracks evidence requests and fieldwork status, with scheduled reminders for outstanding PBC items; teams can export fieldwork to their own Excel testing templates. ControlHatch says it supports more than 50 frameworks and standards, including SOX 404, SOC 1 and SOC 2, ITGC, ISO 27001, PCI DSS, and HIPAA. Listed security measures include end-to-end encryption, role-based access control, audit logging, and SHA-256 hashing of uploaded evidence. The free plan costs nothing and includes unlimited users, entities, projects, and controls, AI-assisted workflows, and full data export.
FloQast
FloQast is accounting workflow software for teams handling close, reconciliation, accounting operations, and compliance. It brings close tasks together, tracks progress, and helps surface dependencies and bottlenecks across teams and entities. Its tools automate reconciliations, transaction matching, and journal entry workflows, with review and approval steps. Teams can review AI-generated transaction-matching rules; FloQast says its AI learns from user inputs. The platform includes audit trails, task dependencies, recurring templates, multi-entity close, and native ERP connectivity. FloQast lists integrations spanning ERP, banking, accounts payable, collaboration, communications, documentation, identity management, and payroll, including ADP, Box, Google Drive, Microsoft Teams, and Slack. The service is cloud-based and browser-accessible, with macOS and Windows support. FloQast says it provides a SOC 3 report, conducts annual penetration tests on high-risk products and infrastructure, and holds ISO/IEC 42001 certification for its accounting transformation platform. The company was founded in 2013 and is headquartered in Los Angeles. It is paid, has no free plan, and offers customized packages with pricing on request.