Architecture overview
Understand how Core GRC modules share identity, permissions, and data to support connected governance work.
- Modules
- 5
- Shared workspace
- 1
- Across modules
- RBAC
What every module shares
One organization
Users, modules, and records belong to the organization, not to a separate login per tool.
Shared permissions
Roles apply across modules, with view and manage permissions for each one.
Learn moreShared workflows
Workflows and assignment groups route work the same way in every module.
How Core GRC connects
What connects to Core GRC today, from AI clients to the scripts on your website.
MCP connector
Work in Core GRC from Claude, Claude Code, or Cursor, with your own permissions.
Learn moreCLI and API
Run the same tools from your terminal with coregrc, or over HTTPS with an API key.
Learn moreGoogle Tag Manager
Install the consent banner and Google Consent Mode with the Community Gallery template.
Learn moreWebsite scripts
The consent banner, the accessibility widget and AutoFix, and the policy widget load from the Core GRC CDN.
Vendor and respondent portals
Vendors register through a shared link, and respondents answer assessments and upload evidence without an account.
Single sign-on
Sign in with Google or Microsoft Entra ID, set up with our team and limited to your domains or Entra tenant.
Ready to run risk and privacy in one place?
Book a walkthrough of the modules that match your program. Start with one, add more when you need them.