ermine review
Cloud ERM software for ISO-aligned risk workflows, controls, audits and evidence.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
ermine is a cloud-based risk and compliance platform for organizations managing enterprise risks, controls, audits and evidence. Its intended users include leadership, compliance, risk, quality and audit teams across sectors. It combines a 5×5 risk matrix with configurable workflows and reporting aligned with ISO 31000, and the published description also names regulatory templates for DORA and NIS2. It is a fit for teams that want risk and evidence management in one system rather than a narrowly focused risk register.
The workflow and evidence capabilities are the central draw. Teams can configure matrices, route approvals, assign tasks and map controls across frameworks for reuse. Evidence collection and matching, expiry alerts, pending-evidence alerts and control efficacy dashboards connect documentation to ongoing control oversight. Audit trails record the author, timestamp and reason, while external auditors can receive read-only access. Multi-entity views, shared controls and entity-level permissions support organizations coordinating risk work across entities. Automated regulatory reports and PDF export add reporting options.
Integration coverage spans document and collaboration tools such as Google Drive, Microsoft 365, SharePoint, OneDrive, Teams and email, along with business systems including Sage, SAP, Salesforce, HubSpot and Zoho; Azure AD, Okta and Google are also listed. The vendor states that annual pricing depends on users and active regulations and requires a demo for a fixed estimate, so buyers should request a quote against their intended scope. ermine suits teams that need cross-framework control reuse, evidence tracking and ISO-aligned workflows. Organizations seeking published rates, a non-cloud deployment or business-continuity capabilities should consider alternatives.
ermine pros and cons
- Where it wins
- Configurable risk matrices, approvals and reporting aligned with ISO 31000
- Maps and reuses controls across frameworks, with evidence expiry alerts
- Multi-entity views, audit trails and integrations with business systems
- Where it doesn't
- Annual pricing requires a demo and depends on users and active regulations
- Cloud deployment only, with email as the listed support channel
- No listed business-continuity features
ermine fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update