MetricStream’s mission is to help our customers 'Thrive on Risk'. And to be able to do so, trust must be the foundation. Trust encompasses all stakeholders -- from customers, to partners, to employees, to shareholders, and to broader GRC industry participants. We believe transparency at all levels is key to earning and maintaining this trust.
For a Governance Risk and Compliance (GRC) Software as a service (SaaS) provider the value of trust is covered under three areas which are - Reliability and Performance, Security and Privacy, and finally Compliance. In each of the areas we provide continuous assurance and continue to raise our standards.
Reliability and Performance
MetricStream SaaS architecture foundation is a multi-instance global cloud with continuous focus on raising the bar on performance with every software release. Millions of GRC professionals are benefitting year on year with this design principle. We have clear service level agreements which we consistently meet and exceed.DOWNLOAD WHITEPAPER
Built on a R&D foundation of secure software development practices, MetricStream SaaS Applications are built ground-up for a secure cloud-based digitization journey for every customer. With a continuous focus and vigilance on a multi-layer security model we continue to be a trusted partner for all our customers. As we all know security, in cloud, must be a shared responsibility, and as such a good collaboration model is the basis for a successful journey year on year – not only for MetricStream but also the industry.
MetricStream is also audited by third-party security vendors to get an independent assessment of our security controls and practices.REQUEST SECURITY REPORTS
MetricStream fundamentally values privacy of all the stakeholders involved. It is built on the well-known principles of privacy around accuracy, ask for and keep only what you need, keep it secure, and remove when not needed. This has helped us not only meet but also exceed expectations when new regulations such as GDPR and CCPA came about. MetricStream Infrastructure is designed with clear systems principles.
MetricStream, given its unique position in GRC, wholeheartedly embraces compliance. This is evident in the certifications, professional conduct of its employees, and training and awareness programs. From a customer perspective, the most important documentation to review for GRC SaaS are the certificates and our transparency on the software content.
MetricStream is also audited by third-party security audit firms to assess compliance with various standards.REQUEST COMPLIANCE REPORTS