Scytale AI GRC Platform

What do you like best about the product?

I like that Scytale guides us through everything and helps me understand what’s important and what’s not. They also communicate well, with weekly sessions. Ashleigh knows the domain very well, helps in resolving issues with auditors and lifting any obstacles that we may encounter.

What do you dislike about the product?

I find some things on the platform are not very intuitive, like getting from one place to another and uploading evidence. Uploading data and linking to Google Drive work okay-ish, but they could work on that.

What problems is the product solving and how is that benefiting you?

Scytale helps us complete the audit end to end, from preparing for it and going through it to getting the final report.

What do you like best about the product?

Great service and consulting which is critical in the SOC2 process

What do you dislike about the product?

Not the most automated platform.
Still some evidence has to be uploaded manually.
Exclusion filters are somewhat cumbersome to use

What problems is the product solving and how is that benefiting you?

Getting a SOC2 certification and maintaining it with the least effort possible

What do you like best about the product?

The platform is simple to navigate, and the action items are easy to spot. Since Scytale integrates with most major platforms, prepping for an audit is quick and straightforward. On top of that, our support team is fantastic and always there to answer any questions we have. As someone who went through compliance for the first time with Scytale, I truly couldn’t recommend the product more.

What do you dislike about the product?

The pricing is a bit steep, but worth it for what you receive.

What problems is the product solving and how is that benefiting you?

We’re a small company, and most of our team working on compliance had never been through an audit before. Scytale has kept us organized and helped us understand everything we needed to do. Not to mention, their templates were invaluable throughout the process.

What do you like best about the product?

It’s a great platform that automates many areas, and it’s now serving as a central hub for several aspects of our organization and systems (people and access management, risk management, etc.). I enjoyed my interactions with the very competent Scytale team, especially with Ashleigh Du Preez who was our main contact for the PCI DSS SAQ certification.

What do you dislike about the product?

Nothing, it was a 100% positive experience.

What problems is the product solving and how is that benefiting you?

Platform automates a significant number of topics for evidence collection of PCI DSS certification. Consolidation of PCI DSS requirements into manageable and better understandable guideline for evidence provision.

What do you like best about the product?

Simplicity and support. Our advisor, Kyle Growdon, is very professional, competent, and helpful. He helped us go through the process smoothly.

What do you dislike about the product?

The price could be better, and I also feel that some integration options are missing. I’d recommend improving the integrations with other platforms to make it more flexible. Thanks to Kyle Growdon, the whole process went smooth.

What problems is the product solving and how is that benefiting you?

For us it is ISO 27001 centralized platform. It can be used for other certifications too.

What do you like best about the product?

Scytale helps us simplify and structure ISO 27001 with a structured framework and ongoing support and consulting. I appreciate the positive, systematic scheduled reviews, quick responses to issues, and active participation in our ISO-related innovations. We were happy to have Ashna support us with process improvements, automation, reports, and the standards definitions. It was more than we expected. We also used Scytale’s app and API to build an internal product on top of it, and we’re thankful to Ashna for being part of that process.

What do you dislike about the product?

I have always found Scytale’s structure unclear and confusing, and the UI was hard to understand during setup. We’ve given this feedback for years. I also find it lacks an advanced Knowledge Base with a click-to-get feature, an AI agent that can use the Knowledge Base, and a more open approach to AI, MCP, and the API. The lack of Azure DevOps and Jira integrations makes the process difficult to manage, and we have quite a lot of issues with topics during multi-company and multi-year audits. The system needs renovations, including better document generation and templates. The person who created the system understands it, but we don’t; only the people supporting us save us from facing these issues alone.

What problems is the product solving and how is that benefiting you?

We use Scytale to simplify and structure ISO 27001 with a structured framework and ongoing support and consulting. It helps us go through the process fluently, improve company processes and regulations, build internal automation for ISO-related work, and prepare evidence for auditors.

What do you like best about the product?

Scytale clearly sets out all required items clearly and the automated integrations save a lot of time and effort. The support from Kyle also contributed tremendously to getting us over the line.

What do you dislike about the product?

We had a very positive experience with Scytale.

What problems is the product solving and how is that benefiting you?

Scytale helped us achieve our ISO 27001:2022 certification.

What do you like best about the product?

Having a dedicated consultant supporting us! Big shout out to Daniella L. for all the amazing help - having weekly catchups, clearly explaining what we need to become ISO 27001 compliant.

What do you dislike about the product?

Some integrations and permissions required to connect to our services are a bit excessive.

What problems is the product solving and how is that benefiting you?

Helping us become ISO27001 compliant. Having both an app to track and upload everything too + consultant that supports us and answers any questions - very useful.

What do you like best about the product?

We really appreciated the support we got from Joshua Schroder, who always found a pragmatic solution. The User interface really helped us finding any gaps we had and tracking our progress

What do you dislike about the product?

Some integrations into the Azure universe were lacking

What problems is the product solving and how is that benefiting you?

Scytale took our SOC 2 Type II journey from a daunting compliance project to something a ~14-person team could realistically run alongside product development. The platform keeps controls, evidence and policies organized in one place, which matters a lot when you’re collecting evidence across access reviews, asset registers, DR testing and incident management over several months.

What do you like best about the product?

I think Scytale’s account management team is really great. I get a high level of assistance whenever I need something, and the team is always there. They’re supportive and professional, and they care that we meet our certification goals. I find the platform convenient for managing our policies. The notification system is pretty good and makes it easier for us to share the work across different functions. I also like the trust center. Having everything available to customers in the public trust center has saved us a lot of work, even though there have been some issues with receiving emails from customers who want to see it. Setup was pretty easy when I did it together with a representative.

What do you dislike about the product?

I’ve had some bugs with the trust center, and there have been some issues with receiving emails from customers who want to see it. I also can’t filter PRs by who merged them; I can only filter by author or reviewer. and merger seems to be the important piece.

What problems is the product solving and how is that benefiting you?

I use Scytale to handle the grunt work of preparing for audits and certifications, including gathering evidence, writing controls, and validating them. It also helps me manage our policy center and share it with potential customers.