Enterprise-wide visibility
See risks, controls, obligations, findings and indicators across every organisation unit, filtered by owner, unit and period.
MANARA GRC
One Platform for Your GRC Programs
An integrated platform for governance, risk, compliance and internal audit — giving your organisation one unified view and clearer decisions.
- Arabic & English
- Self-hosted
- Explainable analytics
- Role-based access
Why MANARA
Built for organisation-wide governance
Programs that share owners, risks and evidence should share one system. MANARA links them so each fact is entered once and seen wherever it matters.
Integrated GPRC platform
Governance, performance, risk and compliance on one model: link a risk to its controls, KRIs, requirements and audit findings.
AI-powered risk and compliance intelligence
Local, explainable analytics flag anomalies, trends, clusters and compliance gaps — each result shows its rule and records.
Runs on your server. No external AI is enabled.
Faster reporting and response
Dashboards calculate from live records. Export to XLSX or CSV, print the executive report and route actions through approvals.
Solutions
Every GRC program, one connected platform
Each solution stands on the same foundation of organisation units, owners, roles, approvals and an audit trail.
Governance
Committees, decisions, strategic objectives and initiatives with clear owners.
ExploreRisk Management
Risk register, inherent and residual scoring, appetite and an interactive 5×5 heatmap.
ExploreCompliance
Framework libraries, requirements, applicability, gaps and evidence with SHA-256 integrity.
ExploreInternal Audit
Risk-based audit plan, work programmes, findings and corrective actions with controlled closure.
ExploreControls & RCSA
Control library, design and operating tests, self-assessments and derived effectiveness.
ExplorePolicy Management
Versioned policy library with a two-step approval workflow and review dates.
ExplorePerformance Management
KPIs, KRIs and KCIs with targets, thresholds, computed status and trends.
ExploreThird-Party Risk
Supplier register and weighted assessments across security, compliance, financial and operational risk.
ExploreIncidents & Corrective Actions
Incidents and non-compliance linked to risks, controls, requirements and suppliers.
ExploreAI Intelligence
Local, explainable analytics — anomalies, trends, clusters and gaps. No external AI is enabled.
ExploreDashboards & Reports
Executive, compliance and audit dashboards with filters, exports and a printable report.
ExploreSolutions overview
Eleven connected solutions on one data model.
All solutions
Inside the platform
The same view your executives and auditors will use
KPI tiles, a 5×5 risk heatmap, compliance by framework and the actions that are due — calculated from your own records, in Arabic or English.
- KPI tiles for open risks, appetite breaches, compliance rate and overdue actions.
- Interactive heatmap — select a cell to see the risks behind it.
- Compliance donut and task lists that link straight to the underlying record.
Enterprise risk
A heatmap that leads to a decision
Score likelihood and impact on 1–5 scales for inherent and residual risk. Rating bands, appetite and tolerance are configurable, so the matrix reflects your methodology.
- Click to filter. Each heatmap cell opens the risks behind it.
- Track movement. Compare inherent and residual positions after treatment.
- Own the method. Adjust bands and thresholds per organisation.
Intelligence
Insights you can explain to an auditor
MANARA's intelligence is a transparent rule engine on your own server. Each insight shows the rule and the records behind it, so reviewers can verify rather than simply trust.
No external AI is enabled. Any future external model would be opt-in: an administrator would have to configure it on the server and approve which data may be transferred.
Anomaly
Indicator outside its usual range
Flags a value far from the indicator's recent mean (z-score).
Trend
Deterioration before a breach
Detects consecutive moves toward a threshold.
Clustering
Similar findings, shared cause
Groups findings that share category, control and keywords.
Gaps
Requirements without controls
Lists obligations with no linked control.
Built for the public sector and large enterprises
Your governance data stays under your control
Registers describe an organisation's weaknesses. MANARA is designed to run inside your own environment, with Arabic as a first-class language.
Six roles, enforced on the server
Admin, risk manager, compliance officer, auditor, executive and viewer — permissions are checked on every request.
Complete audit trail
Create, update, approve and delete actions are logged with user, time and changed fields.
Tenant isolation
Each organisation's records are separated, and every query is scoped to the signed-in tenant.
Self-hosted
Runs as a single container in your data centre or private cloud. You decide where the data lives.
No external calls
Fonts, icons, scripts and images are served locally — no trackers, CDNs or analytics beacons.
Arabic and English, equally
Right-to-left Arabic and left-to-right English share one dataset; switch language at any time.
Configurable framework libraries
Map requirements to the frameworks your organisation follows. Frameworks are configurable libraries — you load your own licensed content. MANARA does not claim certification by, or endorsement from, any standards body or regulator.
- ISO 31000
- ISO 27001
- COSO
- NIST CSF
- COBIT
- NCA ECC
- SAMA
Reporting
From register to board pack, without retyping
Executive, compliance and audit dashboards are calculated from live records and filtered by unit, owner and date.
- XLSX and CSV exports of registers and indicator values.
- Printable executive report — save as PDF from your browser.
- Two-step approvals for policies and finding closure, with segregation of duties.
Bring your GRC programs onto one platform
Request a guided demo for your team, or sign in to your existing workspace.