Risk, incidents and controls in one record.
Four programs, one source of truth. Arc Terminal governs the risk and control register, Arc Forensics works the incident, and Arc Ops tests the controls continually — each writing to a single source of truth you can defend in an audit — extensible, API-first, and wired for your own AI rather than ours.
Single-tenant cloud deployment · SOC 2 Type II and ISO 27001 aligned · flat monthly fee
| Arc Terminal | Available · Beta |
| Arc Forensics | Available · Beta |
| Arc Ops | Available · Beta |
| Arc Risk | Available · Beta |
Four programs, one source of truth
01 — ProgramsThe enterprise risk and GRC program at the centre of the platform: risk register, control library, policy and framework mapping, treatment plans and the evidence they hang on. Extensible by design — turn on the modules you need, extend the schema, and every other program reads and writes here.
Arc Terminal →A specialised DFIR program that runs from Arc Terminal and reports back to it over the platform API. Cases, artefacts, timelines and findings are held under chain of custody and reported straight back into the register they affect.
Arc Forensics →GRC engineering: control tests run continuously against your estate and report a result, not data. No payloads are exchanged on any script — pass or fail, with the run signed and written to the audit log.
Arc Ops →The risk analysis and management program: board-level posture and appetite per category, the working register with treatments and exceptions, third-party and AI impact, and quantitative analysis — all on the record Arc Terminal holds.
Arc Risk →What the single record buys you
02 — Platform{{ f.title }}
{{ f.body }}
Who runs on Arc
03 — Use cases{{ u.title }}
{{ u.body }}
Security & compliance
04 — AssuranceArc is built for regulated environments, so the platform holds itself to the standards it measures you against. Evidence carries provenance, custody and an immutable audit trail from capture to report.
{{ a.title }}
{{ a.body }}
Licensing
05 — LicensingOne flat monthly fee per program on a twelve-month term — no per-seat metering, no per-case surcharge, no charge for the tenth person who logs in. The only thing that moves the price is scale: if your user numbers or data volume outgrow the infrastructure your deployment runs on, we agree the next tier with you before performance is affected. Clients of our sister consultancy, GOVERNANCE Ltd., are eligible for a discount; ask sales.
Bring your register, incidents and control tests into one record.
All four programs are available now and running as a limited beta cohort through the end of 2026, ahead of general availability in January 2027. Seats in the cohort are capped.
Enquiry received.
We reply within one business day. If it is urgent, say so in a follow-up and we will move.