Submarine is a governance, risk and compliance platform for insurers and brokers in the UAE, Saudi Arabia and the wider GCC. It maps common controls across frameworks including NCA ECC-2:2024, SAMA CSF, OTCC, ADHICS v2, UAE IA, CBUAE Rulebook, DHA NABIDH, ISO/IEC 27001, NIST CSF, NIST 800-53, EU AI Act and Saudi PDPL. Teams can collect evidence, test controls, record findings and manage remediation. A configurable risk register covers impact dimensions, rating bands, residual scoring, risk appetite, KRIs, incidents, AI residual-risk assessments and third-party risk. Role-based dashboards show coverage and risk metrics. The AI Copilot answers questions about gaps, risks and controls using permitted organizational records, while an append-only audit trail records changes and times. Basic provides core GRC for one organization at 9000.00 USD per year with email support. Enterprise adds versioned policy storage, continuity and recovery planning, role personas, module permissions, SSO, REST API access, API keys, unlimited members, onboarding and priority support; Enterprise pricing is custom. The platform is available through web and API access, supports Excel import on every register, custom risk categories and fields, and has an RTL-ready interface.
Who it is for
It suits GCC insurers and brokers needing framework mapping, evidence collection, risk registers, control tracking and regional compliance workflows.
What is good
- Maps regional and international frameworks
- Configurable risk register
- Evidence and control tracking
- Role-based risk dashboards
- REST API and API keys in Enterprise
What to know first
- Basic costs 9000.00 USD per year
- Enterprise pricing is custom
- Basic covers one organization
- No named third-party integrations listed
Verdict
Submarine brings framework mapping, evidence, risk management, dashboards and AI-assisted control questions into a GCC-focused GRC platform. Basic has a stated annual price for one organization, while Enterprise adds broader access, integration and support features at custom pricing.
Submarine plans and pricing
All plansCompared on governance, risk and compliance software
- Free plan
- No
- Policy management
- Yes
- Risk register
- Yes
- Evidence collection
- Yes
- Supported frameworks
- NCA ECC-2:2024; SAMA CSF; OTCC; ADHICS v2; UAE IA; CBUAE Rulebook; DHA NABIDH; ISO/IEC 27001; NIST CSF; NIST 800-53; EU AI Act; Saudi PDPL
- API access
- Yes
