DocRead vs Gracen

DocRead manages policy distribution, staff acknowledgements, and compliance records within Microsoft 365 and SharePoint. It supports configurable approval workflows, role-based reviews, version tracking, and audit trails for policy changes. Policies can be assigned by role, department, location, or group membership. Acknowledgements may be mandatory and time-bound, with automated reminders and escalation for overdue responses. Live dashboards track policy status and completion by policy or user. The Microsoft 365 edition works in SharePoint Online and extends existing document libraries. A separate edition runs inside an organization’s on-premises SharePoint Server environment. DocRead is presented for HR, IT, health and safety, and compliance policies. Both editions require a quote: Microsoft 365 pricing depends on users receiving tasks, while SharePoint Server licensing is based on user count, with editions varying by user and site limits. A 30-day trial is available; evaluation in an organization’s own environment is arranged by contacting Collaboris.

Gracen is a web-based GRC workspace combining third-party risk, controls, evidence, audits, policies, risks, incidents, assets, tasks, and reports. Vendor management includes directories, contract and document tracking, risk profiling, and OFAC/FHFA screening-result review workflows. Due diligence supports reusable questionnaires, OTP-protected external links, response tracking, and reviews. Controls cover libraries, frameworks, requirements, mappings, evidence, and assessments. Audit tools track scope and status, PBC requests, evidence submissions, tests, findings, and an external auditor portal. Policy workflows provide versioning, approvals, publication, distribution, and employee attestations. Asset inventory connects with risk and compliance context, while risk and incident tracking link to remediation tasks. Dashboards and exportable reports cover the listed GRC areas. Gracen supports authenticated, organisation-scoped access, role-based controls, OTP-protected external flows, and audit trails. It is modular, with pricing available from sales.