Korinza Platform Overview

What is Korinza?

Korinza is a governance, risk, and compliance (GRC) platform purpose-built for private equity-backed operating companies and mid-market businesses. It replaces spreadsheet-based compliance programs with an integrated system that provides risk visibility, compliance framework management, regulatory monitoring, and audit readiness.

Korinza is designed for companies with 50–5,000 employees that have real compliance obligations but cannot justify the cost and implementation complexity of enterprise GRC platforms like ServiceNow GRC, OneTrust, or Archer. Typical customers are PE-backed manufacturing, healthcare, distribution, food & beverage, and professional services companies.

Core Modules

Portfolio Oversight

The Portfolio Oversight module is designed for private equity sponsors and operating partners. It provides a cross-portfolio dashboard that aggregates risk scores, compliance posture, open findings, regulatory exposure, and insurance gaps across all portfolio companies. PE sponsors can switch between portfolio companies from a single login and see a cross-portfolio summary dashboard.

Risk Register

The risk register is the central repository for all identified risks. Each risk has an owner, a likelihood score (1–5), an impact score (1–5), a risk score (likelihood × impact), a treatment plan, a due date, and a status (open, in progress, mitigated, accepted, closed). Risks can be linked to compliance controls, policies, vendors, and economic signals. The platform includes a pre-built library of 80+ risk templates covering operational, financial, legal, cyber, regulatory, and reputational risk categories.

Compliance Frameworks

Korinza includes pre-mapped control libraries for 20+ compliance frameworks. Adopting a framework takes one click and immediately shows the organisation's coverage percentage, which controls are implemented, which are partially implemented, and which are missing. Supported frameworks include: SOC 2, ISO 27001, HIPAA, NIST CSF, PCI DSS, ISO 9001, ISO 45001, ISO 14001, AS9100D, IATF 16949, 21 CFR Part 820, and more.

Policy Management

The policy management module handles the full policy lifecycle: creation, AI-assisted drafting, versioning, employee distribution, and attestation tracking. Policies can be linked to compliance controls and frameworks. Employee attestation is tracked per policy version, with overdue alerts and reminder workflows.

AI Assistant

The AI assistant is integrated throughout the platform. It can draft policies from a title and description, suggest likelihood and impact scores for risks based on description and industry context, identify compliance gaps based on current control coverage, and answer GRC-related questions in a conversational interface. The assistant uses the organisation's own data as context, so answers are specific to the company's risk register, compliance posture, and industry.

Regulatory Monitoring

Automated scanning across 37 federal and state sources including FDA, EPA, OSHA, DOJ, EEOC, NRC, DEA, OCC, FDIC, FCC, WARN Act, State AGs, IRS liens, UCC filings, CISA KEV, NIST NVD, and SEC EDGAR. Smart name matching finds records even with spelling variations.

Audit Management

Evidence collection, auditor collaboration, structured findings, and complete audit trails. Supports internal audit teams and external auditors with read-only access roles. External auditors receive scoped, time-limited access to specific engagements.

Integrations and Data Sources

Korinza integrates with Slack, Microsoft Teams, Oracle NetSuite, QuickBooks Online, DocuSign, Google Drive, ADP Workforce Now, Gusto, Rippling, and Ninety.io. It also connects to 37+ regulatory and economic data sources including FRED, BLS, OFAC SDN, OIG LEIE, SAM.gov, USPTO, CourtListener, and more.

Technical Architecture

Korinza is a web application built on React, TypeScript, and Node.js. The backend uses tRPC for type-safe API communication and Drizzle ORM for database management. The platform is hosted on managed cloud infrastructure in the United States with automated backups and 99.9% uptime target.

Access Model

Korinza uses role-based access control with six roles: Owner, Admin, Member, Viewer, External Auditor, and Audit Viewer. Permissions are enforced at the API layer. External auditors get read-only access to assigned engagements only.