Open Source Compliance & Risk Management Software
Compliance & Risk Management software automates the tracking of regulatory requirements and the mitigation of operational hazards. These tools manage audit logs, risk assessments, and evidence collection to ensure adherence to legal standards. This type of software serves legal teams and security officers who need to store sensitive PII or PHI without relying on external vendors. Self-hosting these apps allows you to keep internal audit trails and KYC data on your own infrastructure. This approach prevents sensitive governance records from leaving your private network.
This page lists 7 open source tools in the Compliance & Risk Management category. The most popular are Bytebase, CloudQuery and Open Archiver. Most use the AGPL-3.0 or MIT license, and 7 offer an official Docker image.
Bytebase
Manage database schema changes through a web based workspace with GitOps integration and automated SQL review workflows.
CloudQuery
An open source ELT platform that syncs cloud infrastructure metadata from various SaaS sources into data warehouses.
Open Archiver
A self-hosted platform for archiving, indexing, and searching emails from multiple providers with legal compliance features.
Databunker
Self-hosted tool for secure personal records tokenization and storage of sensitive PII, PHI, and KYC data.
Probo
A self-hosted governance, risk, and compliance platform for managing risk assessments, control tracking, and evidence collection.
Marble
Monitor transactions and user activity in real time to detect suspicious behavior and automate fraud prevention.
VerifyWise
Manage AI governance and regulatory compliance for standards such as the EU AI Act and ISO 42001.
Join our newsletter to get shiny new open source software delivered to your inbox. Unsubscribe anytime.