ControlHatch vs Protecht
ControlHatch
controlhatch.com
Protecht
protechtgroup.comSide by side
| Figure | ControlHatch | Protecht |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | Yes |
| API | — | Yes |
| Plans published | 1 | 1 |
| Spec score · Internal Controls Software | 8.5 (#5) | 7.7 (#10) |
| Founded | The opened company and product pages do not state a founding year. | 1999 |
| Headquarters | The terms give the company address as 681 S Logan St, Denver, Colorado 80209, United States. | Sydney, Australia |
| Integrations | The homepage says ControlHatch integrates with existing workflows but names no specific third-party integrations. | The Integrations Hub lists connections including Microsoft Teams, Outlook, Slack, ServiceNow, Jira, Okta, Active Directory, Power BI, Oracle, SAP, Workday, LexisNexis, SecurityScorecard, and Twilio. |
| Intended users | The stated audiences include internal-audit departments, external-audit firms, compliance professionals, ERM teams and accounting or finance departments. | Protecht describes its platform as serving organizations in financial services, government, education, healthcare, and other industries. |
| Purpose | ControlHatch is a GRC platform for SOX compliance, internal controls, risk assessments, and operational audits. | Protecht ERM provides tools to manage risk assessments, key risk indicators, compliance incidents, vendor and IT risk, operational resilience, business continuity, and audits. |
| Security | The product lists end-to-end encryption, role-based access control, audit logging and SHA-256 hashing of uploaded evidence. | Protecht states that it encrypts data at rest using AES-256 and uses HTTPS/TLS for communications, with TLS 1.2 listed as the supported protocol on its security page. |
| Support | Support is available through a contact form and [email protected], with a stated typical reply time of one business day. | Protecht describes regional in-house support teams, multi-channel support, and 24/7 support for critical issues. |
Plans
In their own words
ControlHatch
ControlHatch is a web-based GRC platform for SOX compliance, internal controls, risk assessments, and operational audits. Teams can organize control testing by audit round, record exceptions, and capture reviewer sign-off in an audit trail. Its AI-assisted workflow drafts risks, controls, and assertions from process descriptions for users to review and refine. Risk dashboards score risks and link them to mitigating controls. Recurring monthly or quarterly certification campaigns can send reminders and record timestamped attestations. A dashboard tracks evidence requests and fieldwork status, with scheduled reminders for outstanding PBC items; teams can export fieldwork to their own Excel testing templates. ControlHatch says it supports more than 50 frameworks and standards, including SOX 404, SOC 1 and SOC 2, ITGC, ISO 27001, PCI DSS, and HIPAA. Listed security measures include end-to-end encryption, role-based access control, audit logging, and SHA-256 hashing of uploaded evidence. The free plan costs nothing and includes unlimited users, entities, projects, and controls, AI-assisted workflows, and full data export.
Protecht
Protecht is a cloud platform for managing risk, compliance, resilience, and audit. Protecht ERM covers risk assessments, key risk indicators, compliance incidents, vendor and IT risk, operational resilience, business continuity, and audit. Teams can configure forms, workflow rules, reports, and dashboards without coding. Dashboards and reports use structured, interconnected data to help identify trends and areas requiring action. Integration options include SSO, REST APIs, web services, SCIM identity management, scheduled file imports, and no-code iPaaS connections. Protecht says it hosts customer data in the customer’s region and states that it is ISO 27001 certified, SOC 2 assessed, and compliant with EU and UK GDPR. Its SaaS products are described as operating 24/7 with a standard SLA of 99.5% availability. Annual licence fees depend on the number and type of named active users, and pricing is available on request. Marketplace templates and the Operational Resilience module are billed separately. Protecht describes its customers as ranging from organizations with two users to those with more than 20,000.