ControlMeld

ControlMeld is a web app (with optional lightweight desktop agent) that automates the most hated part of GRC: collecting, mapping, and refreshing audit evidence across dozens of tools. It connects to common enterprise systems (Okta, Google Workspace, Microsoft 365, AWS, Azure, GitHub, Jira, ServiceNow) and continuously pulls configuration snapshots, access lists, change logs, and policy attestations. You define a control once (SOC 2, ISO 27001, HIPAA, SOX ITGC), then ControlMeld maps incoming evidence to that control, flags gaps, and generates auditor-ready packets with timestamps and immutable logs. It’s a combination traditional + AI app: traditional connectors and workflows do the heavy lifting, while AI helps classify evidence, draft narratives, and suggest missing artifacts. Realistically, the hard part is maintaining reliable integrations and earning trust with security teams.