Kanonik

Kanonik is a GRC platform built for teams of roughly 25 to 200 people that run compliance with an AI assistant rather than a dedicated GRC department. The user connects the AI client they already use (Claude, ChatGPT, Gemini, AWS Bedrock or Azure OpenAI) over the Model Context Protocol and loads Kanonik's signed skill library; the AI then drafts controls, risks, policies, procedures, evidence and mappings.

Every proposal passes a server-side Verifier (rule checks plus an independent model check), then a single-use signed approval that a named person must click, and only then lands in an append-only, hash-chained audit record kept for seven years. Auditors receive a signed export bundle they can verify offline without an account.

Supported frameworks: ISO 27001:2022, SOC 2, GDPR, NIST CSF 2.0 and HIPAA, with controls authored once and mapped across frameworks. Kanonik holds no credentials to the customer's cloud or identity systems and ships no connectors to other GRC platforms; it is intended to replace a GRC tool, not sit beside one.