Scytale AI GRC Platform

What do you like best about the product?

What I like most is the support, along with the easy-to-use integration and the user interface.

What do you dislike about the product?

There’s an occasional sync delay that happens from time to time.

What problems is the product solving and how is that benefiting you?

It facilitates obtaining crucial HIPAA and ISO certifications at a competitive price.

What do you like best about the product?

We are currently working with Kamran Naicker on our SOC 2 Type 2 compliance, and the experience has been pleasant, productive, and completely positive. The Scytale portal is remarkably straightforward and easy to use, making evidence tracking seamless. Highly recommend working with Kamran and the team!

What do you dislike about the product?

There isn't much to dislike overall. The only minor friction we experienced was during our SOC 2 Type 1 audit, where securing the external auditor took a bit longer than expected since they are a third-party company. Other than that initial delay, everything with Scytale has gone smoothly.

What problems is the product solving and how is that benefiting you?

Scytale helps us navigate our SOC 2 Type 1 and Type 2 compliance without the typical operational headache. The platform organizes evidence collection in a clean, straightforward way, while having direct support from our customer success representative keeps us on track. It saves us significant time and ensures we meet audit requirements smoothly.

What do you like best about the product?

The Scytale platform was easy to use and quick to set up. Our consultant, Romy, was extremely helpful in guiding us through what was required for our audit and helping us get across the line.

What do you dislike about the product?

I wish there were an easy way to export the required tasks to GitLab for issue tracking and creation. Right now, this functionality is only available for Jira.

What problems is the product solving and how is that benefiting you?

They guided us on what was required for ISO27001, helped us collect the necessary evidence, and supported us throughout the audit process.

What do you like best about the product?

The platform gives you a central space to load documentation and advises what documentation is needed

What do you dislike about the product?

The timeline for the actual audit could have been explained better so that timelines are more clear.

What problems is the product solving and how is that benefiting you?

Weekly meetings help keep you accountable and on track.

What do you like best about the product?

Scytale makes compliance management straightforward and structured. The platform provides excellent visibility of requirements, evidence, risks, and audit readiness, reducing manual effort and helping maintain momentum throughout the certification process. The support team is responsive, knowledgeable, and proactive, making the overall experience smooth and efficient.

What do you dislike about the product?

I have not encountered any significant issues with Scytale. If I had to identify an area for improvement, it would be greater customisation of workflows and reporting to align with specific operational requirements. Other than that, the platform has been reliable and effective in supporting our compliance programme.

What problems is the product solving and how is that benefiting you?

Scytale has streamlined our compliance and audit readiness efforts by centralising evidence collection, risk management, policy tracking, and control monitoring into a single platform. This has reduced manual effort, improved visibility of our compliance posture, and made it easier for teams across the organisation to collaborate on maintaining ISO 27001 compliance and preparing for audits.

What do you like best about the product?

What I like best about Scytale is how it centralizes evidence tracking against ISO 27001 controls. Instead of juggling spreadsheets and scattered documents across teams, I can upload evidence directly tied to specific controls, which cuts down significantly on the manual chasing-around that usually comes with audit prep. It's made our audit readiness process far more organized and repeatable.

What do you dislike about the product?

Honestly, there isn’t anything major I dislike about Scytale. So far, it’s met our needs well and has helped us stay on track for ISO 27001 audit readiness.

What problems is the product solving and how is that benefiting you?

Scytale addresses the core challenge of managing ISO 27001 audit readiness at scale as our organization grows.

The biggest problem it solves is evidence sprawl and manual tracking. Before we centralized evidence in Scytale, control evidence lived across spreadsheets, emails, and shared drives, which made it difficult to tell what was current, what was missing, and who owned each item. With Scytale, we have a single source of truth that’s tied directly to each ISO 27001 control.

It also reduces audit prep inefficiency. Preparing for audits used to mean weeks of chasing down documentation from different teams right before the audit window. Now we upload and organize evidence continuously throughout the year, so audit prep is far less of a fire drill.

Another major improvement is visibility into our compliance posture. Without a centralized system, it’s hard to see at a glance where gaps exist across a full control framework. Scytale gives real-time visibility into which controls are evidenced, which are lagging, and where attention is needed well before an external auditor gets involved.

Finally, it improves cross-team coordination. ISO 27001 evidence often depends on inputs from multiple functions (IT, engineering, HR, vendor management), and Scytale provides a structured way to assign and track evidence ownership across those teams instead of relying on ad hoc follow-ups.

The benefits we’ve seen include reduced audit prep time, since there’s less scrambling close to audit dates when evidence is maintained continuously; better internal accountability, because clear ownership per control removes ambiguity about who’s responsible for what; improved audit outcomes, as auditors receive organized, control-mapped evidence rather than loose documentation; and better scalability as our compliance program matures, including expanding scope around vendor risk and AI governance, because we’re not rebuilding processes from scratch each cycle.

Overall, Scytale has shifted our ISO 27001 program from a reactive, audit-season scramble to an ongoing, repeatable compliance operation.

What do you like best about the product?

Scytale has a very methodical, efficient system for ISO accreditation. Another key part of the experience is the consultant you work with throughout the process. We worked with Jaden, who was especially helpful and knowledgeable, and he made the entire process feel much easier and more streamlined. Their platform is also extremely easy to use and track where you are in the process.

What do you dislike about the product?

Nothing really comes to mind. It is a very well-thought-out platform, and I don't have any significant feedback on it.

What problems is the product solving and how is that benefiting you?

I think the key thing Scytale helps with is improving speed and efficiency when working toward ISO certification. It also sets everything up in a way that’s easier to maintain over time and supports recertification going forward. Jayden, our consultant, was extremely helpful throughout the process; troubleshooting issues on our side and guiding us at different points along the journey.

What do you like best about the product?

An intuitive platform with detailed, recommended actions, plus consistent support from our assigned manager.

What do you dislike about the product?

Nothing that I dislike about the platform or process

What problems is the product solving and how is that benefiting you?

Scytale and the manager made the process very pragmatic, clearly outlining the entire preparation process in a concise way.

What do you like best about the product?

I really appreciate how Scytale makes the very complicated process of SOC 2 and ISO compliance much easier. I also like how supportive the team is, particularly Romy Spencer, who was incredibly patient and helpful, making the entire flow smooth and straightforward. Additionally, their integration with AWS was a very good way to streamline the process. The initial setup was pretty easy for my team of about ten people, making the use of Scytale mandatory and very helpful due to our limited manpower.

What do you dislike about the product?

I initially found the AWS integration with Scytale was not working well, but after some time and asking them to help, it got better.

What problems is the product solving and how is that benefiting you?

I use Scytale to simplify the complex process of SOC 2 and ISO compliance, making it much easier. They are very supportive, especially Romy Spencer, who ensures the process flows smoothly. With our small team, Scytale is mandatory and very helpful.

What do you like best about the product?

Centralized evidence management
Helpful compliance experts
Clear audit preparation workflow
Good visibility into control status and outstanding work

What do you dislike about the product?

Additional reporting and executive-level dashboarding would be helpful for leadership reviews.
Some integrations and evidence workflows occasionally require manual validation.

What problems is the product solving and how is that benefiting you?

We used Scytale to support our SOC compliance program and found the platform extremely valuable for organizing evidence, managing controls, and maintaining audit readiness throughout the year. What stood out most was having a centralized location for policies, evidence, tasks, and auditor requests, which reduced the amount of manual coordination required across teams.