London, 9th September 2026 – CoreStream GRC, in partnership with SANNOS AI, is proud to announce that it has been shortlisted for the Technology Innovation in GRC: SME category at the RISK Awards 2026, recognizing innovative solutions that are transforming how Governance, Risk & Compliance is delivered.
Recognition for innovation in modern GRC
“Innovation isn’t defined by the size of an organization, it’s defined by how effectively new ideas are turned into real-world impact. The Technology Innovation in GRC: SME award celebrates growing and agile organizations that are using technology to transform the way Governance, Risk & Compliance is delivered. From AI and automation to RegTech and other innovative solutions, this year’s finalists are finding smarter ways to overcome business challenges, improve efficiency, unlock better insight and strengthen GRC capabilities.”
The shortlist acknowledges organizations that are leveraging technology to address complex regulatory and risk management challenges through innovation, automation, and enhanced insight. Finalists in the Technology Innovation in GRC: SME category for the #RISK Awards 2026, include:
- CoreStream GRC and SANNOS
- Mandatry
- Elliot Poublan at Initia Risk
- Aspida Group
- Elizabeth Matthew at V&E Solutions
- RiskSmart
- LioraEngine
- Behavox
“For CoreStream GRC, this recognition reflects our commitment to helping organizations streamline compliance, strengthen governance, and improve risk visibility through a modern, integrated approach to GRC underpinned by our intelligence layer partner, SANNOS.”
Paul Cadwallader, GRC Strategy Director (former Deloitte partner), CoreStream GRC
Alongside being shortlisted for Technology Innovation in GRC: SME, CoreStream GRC has also been shortlisted in the Best Use of AI in GRC category at the #RISK Awards 2026, recognizing organizations that are using artificial intelligence to deliver measurable value across governance, risk, and compliance.
The award celebrates organizations that are applying AI to improve insight, increase efficiency, strengthen decision-making, and help address complex risk and compliance challenges in a responsible and transparent way.
Finalists in the Best Use of AI in GRC category include:
- CoreStream GRC
- ReadiNow
- Workiva
- LogicGate
- Optro
- ServiceNow
- Shell
- Aviva
- LioraEngine
“AI is powerful for automation, but its impact depends entirely on how it’s applied within each organization. Human judgment still leads the way, AI gives people the time to use it well.”
Paul Cadwallader, GRC Strategy Director, CoreStream GRC
The innovative partnership of CoreStream GRC and SANNOS
CoreStream GRC and SANNOS bring together former Big 4 consultants and experienced GRC practitioners who understand the realities of audits, regulatory reviews, controls testing and third-party assurance. Rather than applying generic AI to compliance, the partnership has built an evidence-driven assurance capability for regulated environments. Powered by the Secure Controls Framework, the solution combines deep domain expertise with advanced AI to automate compliance analysis while maintaining the traceability, transparency and defensibility required by auditors, regulators and boards.
This expert-led partnership enables organizations to automate traditionally manual compliance activities while maintaining audit-ready traceability and transparency.
Key capabilities include:
- Automated evidence review and assessment
- Control mapping across multiple regulations and frameworks
- Gap analysis and compliance reporting
- Third-party risk assessment acceleration
- Full source traceability for audit and regulatory assurance
Delivering measurable outcomes that matter
- Up to 80% reduction in compliance effort
- Up to 88% faster framework assessments
- Up to 95% faster third-party risk assessments
“Being shortlisted for the RISK Awards is a fantastic recognition of what can be achieved through true partnership. At SANNOS, we are incredibly proud to work alongside CoreStream GRC to bring practical, evidence-driven innovation to regulated organizations. For us, true innovation is about combining deep GRC expertise with advanced AI to solve real assurance challenges, improve efficiency, and provide the transparency and confidence that regulators, auditors, and boards require.”
Anders Søborg, Co-founder (former Chief Risk Officer), SANNOS
About the #Risk Awards
The #RISK Awards winners will be announced at the #RISK Awards 2026 ceremony later this year.
Date: 11th November 2026
Location: Excel, London (after #RISK Europe)
Time: 7 PM – 11:45 PM
Learn more here.
CoreStream GRC is honored to be recognized alongside other innovators in the category and looks forward to the next stage of the judging process.
About CoreStream GRC
The intuitive, flexible GRC platform that delivers efficiency and value – your way. Driven by the belief that technology should be an enabler, not a barrier, we created the CoreStream GRC platform: a flexible, no-code solution that empowers organizations to design their perfect GRC system with our expert team.
You tell us what you need, and we deliver it, quickly and without unnecessary complexity. Using pre-built, customizable features, it’s as intuitive and versatile as building with Lego bricks – the solutions are limitless.
With seamless scalability, an intuitive interface, and rapid implementation, CoreStream GRC turns GRC from an administrative burden into a powerful enabler for your business.
Trusted by leading organizations like the BBC, Deloitte, NHS, PwC Middle East and Shell Energy, CoreStream GRC consistently delivers real, measurable value for all your risk, and compliance management needs.
About SANNOS
SANNOS is the automated assessment and risk generation engine trusted by Big 4 firms and global institutions to orchestrate complex regulatory environments. SANNOS maintains a living library of proprietary mappings, allowing for rapid deployment in high-stakes environments. Bespoke frameworks setup in days not weeks.
Frequently Asked Questions
The #RISK Awards are a recognition platform for professionals, teams and innovators working across risk, governance, compliance, security, RegTech and related disciplines. Held alongside #RISK Expo Europe, the awards celebrate organizations that are helping to redefine resilience, integrate risk disciplines and set new standards for excellence in modern GRC.
AI-driven GRC automation uses artificial intelligence to streamline governance, risk and compliance processes such as evidence review, control mapping, compliance analysis and reporting. In this partnership, CoreStream GRC and SANNOS apply AI to help organizations reduce manual compliance effort while maintaining transparency and audit-ready traceability.
AI can help compliance teams analyze evidence faster, identify gaps, map controls across frameworks and generate clearer reports for review. The CoreStream GRC and SANNOS solution is designed for regulated environments where outputs must be traceable, defensible and suitable for scrutiny by regulators, auditors and boards.
Control mapping is the process of aligning internal controls to multiple regulations, standards or frameworks so organizations can understand overlaps, reduce duplication and demonstrate coverage. Powered by the Secure Controls Framework, the CoreStream GRC and SANNOS partnership helps organizations map controls across complex regulatory requirements more efficiently.
Evidence traceability shows where conclusions come from, what information was reviewed and how compliance decisions were reached. This is especially important in regulated sectors because organizations must be able to explain and defend their compliance position during audits, regulatory reviews and board reporting.
GRC software can accelerate third-party risk assessments by automating questionnaire review, evidence analysis, gap identification and reporting. CoreStream GRC and SANNOS support faster third-party assurance by combining workflow automation, AI-driven assessment and full source traceability.
No. AI is best used to reduce repetitive manual work, improve consistency and surface insights faster. Human expertise remains essential for risk judgement, regulatory interpretation, assurance decisions and governance oversight.
The CoreStream GRC team have won the rising star award for 2 years running (2025 and 2026) at the Women in GRC awards. Sophie Lis, the Director of Compliance won GRC Innovator of the Year too. Michael Rasmussen awarded CoreStream GRC with his own 20/20 Innovation Award too, with Enterprise Integrated GRC Architecture & Platforms.
