Tool profile
Protecht: cost, fit and limits
Protecht is an enterprise risk and compliance platform made by Protecht Group Holdings Pty Ltd that combines enterprise risk management, controls assurance and an integrations hub, with hosting in an AWS region the customer picks at signup.
What to know first
Protecht sells its ERM platform, an ALM service and a controls assurance solution on quotes only; the compliance solution page says price depends on the solutions chosen, number of users, implementation scope and integrations. What the vendor does publish is its security posture: ISO 27001 certification, a SOC 2 assessment, AES-256 encryption at rest and an AWS region fixed at signup. Cognita AI is named on the site but not explained on the pages we read.
Protecht at a glance
| Maker | Protecht Group Holdings Pty Ltd, Australia |
|---|---|
| Free plan | No |
| Entry price | Quote only |
| API access | No |
| Category | Best AI Risk Management Software in 2026, rank 4 of 12 |
| Website | protechtgroup.com |
Who Protecht is best for
Risk teams that answer security questionnaires
The security page states ISO 27001 certification, a SOC 2 assessment, EU-GDPR and UK-GDPR alignment and encryption at rest, so most questionnaire answers can be pulled from a published page.
Compliance owners who test controls
The controls assurance solution covers planning, testing and reporting on a controls framework, with a product tour on the solution page that shows how the steps connect.
Companies with data residency rules
The privacy policy says the Protecht ERM and ALM sites are hosted in the AWS region selected at signup, which lets a buyer set the region at the start.
Protecht plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| Protecht ERM | Custom quote | Enterprise risk management platform, hosted in the AWS region chosen at signup, with two-factor authentication available out of the box. |
| Protecht ALM | Custom quote | Named with Protecht ERM in the privacy policy as a service whose AWS region is set at signup. |
| Controls assurance | Custom quote | The compliance management solution for planning, testing and reporting on a controls framework; price depends on solutions, users, scope and integrations. |
Checked November 2026.
What Protecht does
- Configurable platform
- Administrators tailor forms with instruction and guidance text and maintain the system with bulk updates, so a risk team can adapt screens to its own wording without vendor services.
- Integrations Hub
- An Integrations Hub connects GRC data to the applications and data sources a company already uses. The named connectors were not extracted from the integrations page we opened.
- Controls assurance process
- The compliance solution covers planning, testing and reporting across a controls framework, which helps teams that must show auditors a repeatable testing cycle with evidence.
- Security controls
- Two-factor authentication is available out of the box in Protecht.ERM, and databases and backups are encrypted at rest with AES-256, while login pages are served over TLS.
How Protecht handles your data
The security page states ISO 27001 certification and a SOC 2 assessment and names EU-GDPR and UK-GDPR. Databases and backups are encrypted at rest with AES-256. The privacy policy says the ERM and ALM sites are hosted in the AWS region selected at signup, confirmed through the customer success manager, and that data is kept while the services are provided, until deletion is requested or as the law requires. Whether customer data trains Cognita AI was not stated, so the vendor's policy was not checked for this.
Where Protecht falls short in practice
- Price is hidden behind scope. The vendor lists no price and ties the quote to solutions, users, implementation scope and integrations, so comparing it with a printed-price tool takes a sales conversation.
- Region is fixed at signup. The AWS region is set when the account is created and confirmed through the customer success manager. A buyer who changes residency requirements later should ask how a move is handled.
- AI is named, not explained. Cognita AI appears on the site but the pages we read do not say what it does, so an AI-driven requirement cannot be assessed before a demo.
Works with
Alternatives to Protecht
Protecht: common questions
Which Protecht products are sold?
The pages we read name Protecht ERM, Protecht ALM and a controls assurance solution under compliance management. The privacy policy names ERM and ALM together as services with an AWS region set at signup. The vendor publishes no list prices, so each product is quoted after a conversation.
Can I choose where Protecht hosts my data?
Yes, in part. The privacy policy says the Protecht ERM and ALM sites are hosted in the AWS region selected at signup and that the region is confirmed through the customer success manager. The pages we read do not list the available regions, so ask before signing.
What security certifications does Protecht state?
The security page states ISO 27001 certification and a SOC 2 assessment and names EU-GDPR and UK-GDPR. It also says databases and backups are encrypted at rest with AES-256. Ask for the current certificates and the SOC 2 report scope during due diligence.
What does Protecht's Cognita AI do?
The site names Cognita AI, but the pages we opened do not describe its function, so no claim can be made here. Ask the vendor for a demo on your own data, a list of model providers and a statement on whether customer data is used for training.
How is Protecht priced?
Protecht does not publish prices. The compliance management solution page says pricing depends on the solutions needed, the number of users, the implementation scope and the integrations, and it asks for an enquiry. Request a written quote that separates licenses from implementation work.