Packaging
How PureTrace is packaged
The governance core is complete on its own, and each of the five modules works alone or alongside it. License the whole system, the core alone or one module beside the tools you already run.
A module you license appears in your navigation from the next sign-in, and one you have not is not there, so you carry the parts you use and none of the rest.
The core
The governance core
The risk register and its assessment cycles, controls and their assessments, indicators and collection cycles, risk events, threshold breaches, remediation, committee packs and the dashboard, on one record with the audit trail beneath everything. It is complete on its own, and the platform page walks through it part by part.
The modules
The five modules
Each module covers one part of the framework. It can link to the record the core keeps, or stand on its own beside a register you already run.
Supplier Due Diligence & Third-Party Risk
Reviews, tiering and assurance attestations, such as SOC 2, tracked to expiry and mapped to controls.
Obligations Management
Contractual commitments captured in one live register, owned and tracked to their deadlines.
ICARA
The ICARA as a repeatable process driven by the core platform, rather than an intensive annual overhead.
Operational Resilience
Important business services, impact tolerances and scenario testing, with the evidence for each.
Customer Oversight Portal
Secure, curated assurance views for your corporate customers.
Adoption
How firms adopt it, and how it is priced
Configured, not built. PureTrace is set up to your framework (your risk categories, appetite wording, scoring and reporting cycle) with you, rather than developed for you.
The parts you need. License the governance core, one or more modules, or both together. Supplier Due Diligence & Third-Party Risk and Obligations Management each run on their own beside a system you already have, and a module can be added later.
Your data brought across. We support the initial configuration and the loading of your existing records, whether they are held in spreadsheets and internal documents today or in another vendor's system. We work with both.
We do not publish a price list, because the price depends on how your business is structured and which parts you license. We quote for your business.
How we bring you on
The practice comes alongside the platform
The consultancy comes with the platform. These four steps are how an organisation moves onto PureTrace, and a practitioner is alongside for each of them.
- 01
Set up the register together
We start with the register you have rather than a blank one: the categories, the owners, the appetite wording and the impact dimensions you score on.
- 02
Agree the indicators and the thresholds behind them
Which measures indicate which risks, how often each is collected and where the bands sit against appetite for each unit, so a value is scored against a set that fits it.
- 03
Bring your existing records across
Risks, controls, indicator history and open actions move onto the platform with us alongside, from spreadsheets or from the system you run today, so it holds your framework rather than a generic one.
- 04
Take the committee through its first pack
The first pack is assembled from live data with us alongside you, and from then on the cycle runs on your record. If PureTrace did not fit your framework, we would have said so at step one.