MetricStream’s mission is to help everyone Perform with Integrity. Hence trust is core to our culture. Trust encompasses all stakeholders -- from customers, to partners, to employees, to shareholders, and to broader GRC industry participants. We believe transparency at all levels is key to earning and maintaining this trust.  

For a Governance Risk and Compliance (GRC) Software as a service (SaaS) provider the value of trust is covered under three areas which are - Reliability and Performance, Security and Privacy, and finally Compliance. In each of the areas we provide continuous assurance and continue to raise our standards.

Reliability and Performance

MetricStream SaaS architecture foundation is a multi-instance global cloud with continuous focus on raising the bar on performance with every software release. Millions of GRC professionals are benefitting year over year with this design principle. We have clear service level agreements which we consistently meet and exceed.

Download Whitepaper


Built on a R&D foundation of secure software development practices, MetricStream SaaS Applications are built ground-up for a secure cloud-based digitization journey for every customer. With a continuous focus and vigilance on a multi-layer security model we continue to be a trusted partner for all our customers. As we all know security, in cloud, must be a shared responsibility, and as such a good collaboration model is the basis for a successful journey year over year – not only for MetricStream but also the industry.

Click here to review details on Shared Responsibility and Cloud Security Assurance.

MetricStream is also audited by third party security vendors to get an independent assessment of our security controls and practices.

Request Security Reports


MetricStream fundamentally values Privacy of all the stakeholders involved. It is built on the well-known principles of privacy around accuracy, ask for and keep only what you need, keep it secure, and remove when not needed. This has helped us not only meet but also exceed when new regulations such as GDPR and CCPA came about. MetricStream Infrastructure is designed with clear Systems principles.

MetricStream is also shaping initiatives around Global Standards on Data Exchange that are Risk Managed and Privacy Preserving. See for more details.

Read Privacy Policy


MetricStream, given its unique position in GRC, wholeheartedly embraces compliance. This is evident in the certifications, professional conduct of its employees, and training and awareness programs. From a customer perspective, the most important documentation to review for GRC SaaS are the certificates and our transparency on the software content.  

MetricStream is also audited by third party security audit firms to assess compliance with various standards.

Request Compliance Reports

Get a demo Download RFP Template Pricing Contact