Freedom251 › Governance, Risk and Compliance Software
Submarine
What Submarine is
Submarine is a governance, risk and compliance platform for insurers and brokers in the UAE, Saudi Arabia and the wider GCC. It maps common controls across frameworks including NCA ECC-2:2024, SAMA CSF, OTCC, ADHICS v2, UAE IA, CBUAE Rulebook, DHA NABIDH, ISO/IEC 27001, NIST CSF, NIST 800-53, EU AI Act and Saudi PDPL. Teams can collect evidence, test controls, record findings and manage remediation. A configurable risk register covers impact dimensions, rating bands, residual scoring, risk appetite, KRIs, incidents, AI residual-risk assessments and third-party risk. Role-based dashboards show coverage and risk metrics. The AI Copilot answers questions about gaps, risks and controls using permitted organizational records, while an append-only audit trail records changes and times. Basic provides core GRC for one organization at $9,000 a year with email support. Enterprise adds versioned policy storage, continuity and recovery planning, role personas, module permissions, SSO, REST API access, API keys, unlimited members, onboarding and priority support; Enterprise pricing is custom. The platform is available through web and API access, supports Excel import on every register, custom risk categories and fields, and has an RTL-ready interface.
Who it suits
It suits GCC insurers and brokers needing framework mapping, evidence collection, risk registers, control tracking and regional compliance workflows.
What it does well
- Maps regional and international frameworks
- Configurable risk register
- Evidence and control tracking
- Role-based risk dashboards
- REST API and API keys in Enterprise
What to know first
- Basic costs $9,000 a year
- Enterprise pricing is custom
- Basic covers one organization
- No named third-party integrations listed
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Basic | $9,000/ year · Core GRC for a single organization · Email support | $9,000 a year |
| Enterprise | Custom · Everything in Basic · REST API & API keys · SSO · Unlimited members · Onboarding + priority support | On request |
As grcsubmarine.com lists them, read 8 Oct 2026. The maker's own page has the final word.
Verdict
Submarine brings framework mapping, evidence, risk management, dashboards and AI-assisted control questions into a GCC-focused GRC platform. Basic has a stated annual price for one organization, while Enterprise adds broader access, integration and support features at custom pricing.
Facts from Submarine's own pages
- Access and API
- Enterprise includes role personas, per-module permissions, SSO, a REST API and API keys. · grcsubmarine.com, 8 Oct 2026
- AI Copilot
- The AI Copilot answers questions about gaps, risks and controls using organizational data, cites supporting records and is scoped to what the user may see. · grcsubmarine.com, 8 Oct 2026
- Audit trail
- An append-only audit trail records who changed what and when by default. · grcsubmarine.com, 8 Oct 2026
- Controls
- It maps a common control set across frameworks and tracks evidence, control testing, findings and remediation. · grcsubmarine.com, 8 Oct 2026
- Customization
- The platform supports custom risk categories and fields, and Excel import on every register. · grcsubmarine.com, 8 Oct 2026
- Dashboards
- The platform provides real-time coverage and risk metrics with configurable per-role dashboards. · grcsubmarine.com, 8 Oct 2026
- Frameworks
- The platform lists NCA ECC-2:2024, SAMA CSF, OTCC, ADHICS v2, UAE IA, CBUAE Rulebook, DHA NABIDH, ISO/IEC 27001, NIST CSF, NIST 800-53, EU AI Act and Saudi PDPL. · grcsubmarine.com, 8 Oct 2026
- Integrations
- The Enterprise plan mentions integrations, and the feature comparison lists a REST API and API keys; no named third-party integrations are listed on the opened pages. · grcsubmarine.com, 8 Oct 2026
- Plan scope
- The pricing page describes Basic as core GRC for a single organization and says individual modules can be enabled per organization on request. · grcsubmarine.com, 8 Oct 2026
- Policies and continuity
- Enterprise includes a versioned policy document store and business continuity and recovery plans with objectives and test cadence. · grcsubmarine.com, 8 Oct 2026
- Purpose
- Submarine is a governance, risk and compliance platform for insurers and brokers in the UAE, Saudi Arabia and the wider GCC. · grcsubmarine.com, 8 Oct 2026
- Regional readiness
- The site describes Submarine as built for the GCC, with regional frameworks, data-residency awareness and an RTL-ready UI. · grcsubmarine.com, 8 Oct 2026
- Risk management
- The configurable risk register supports multi-dimension impact, rating bands, residual scoring, risk appetite, KRIs, incidents, AI residual-risk assessments and third-party risk. · grcsubmarine.com, 8 Oct 2026
- Support
- Basic includes email support; Enterprise lists onboarding and priority support. · grcsubmarine.com, 8 Oct 2026