Risk & Compliance Hub

Risk & Compliance Hub is a SharePoint Framework (SPFx) solution for SharePoint Online that helps organizations identify, assess, monitor, and report enterprise risks and compliance activities directly within Microsoft 365.

Deploy the solution once to your SharePoint Online tenant app catalog, add the web part to any modern SharePoint page or publish it as a full-page app, and use the built-in setup wizard to automatically provision the required SharePoint lists. Risk & Compliance Hub provides a centralized risk register, compliance assessments, executive dashboards, and reporting while keeping all data securely within your Microsoft 365 tenant.

Ideal for

Governance, Risk, and Compliance (GRC) teams, Internal Audit, IT, Information Security, Quality Management, Healthcare, Manufacturing, Financial Services, Government, and any organization seeking a centralized enterprise risk and compliance solution on Microsoft 365.

Key Features

• Centralized risk register with filtering, assignments, status tracking, and bulk actions
• Executive dashboards with KPI cards, inherent risk heatmaps, severity analysis, and financial exposure metrics
• Inherent and residual risk matrices with interactive drill-down
• Compliance management with built-in frameworks, assessments, and compliance dashboards
• Configurable risk forms and workflow-driven review and approval processes
• Advanced report builder with customizable columns and CSV export
• Native SharePoint Risks list form customizer for an enhanced create and edit experience

Microsoft Teams Integration

After deployment, administrators can use Sync to Teams from the SharePoint App Catalog to make the solution available in Microsoft Teams as a personal app or channel tab. Users access the same risk register, compliance tools, dashboards, and reports directly within Teams — while SharePoint Online remains the system of record.

Email Notifications

Risk & Compliance Hub supports flexible workflow email delivery. Choose the option that best fits your environment in Settings → Email Integration:

• Microsoft Graph (tenant-resident, default): Notifications are sent from the signed-in user's Exchange Online mailbox. A tenant administrator approves Microsoft Graph Mail.Send once in SharePoint Admin Center → API access. Mail never leaves your Microsoft 365 tenant.
• Chronodat Mail API (optional): Chronodat's hosted mail service sends notifications with zero tenant configuration. Requires an active Chronodat subscription. When enabled, notification recipients, subject, and message body are transmitted to the Chronodat mail service.
• Power Automate (advanced): Not shipped with the product. You build and configure your own flows. No Mail.Send approval is required in this mode.

The app installs and runs without configuring email; only workflow notifications require a delivery option.

Security & Data Residency

• 100% tenant-resident: All risk and compliance data is stored in standard SharePoint lists inside your Microsoft 365 tenant
• No external data transfer by default: Default Microsoft Graph delivery keeps notification email inside your tenant
• Microsoft 365 security inherited: Uses SharePoint permissions, Microsoft Entra ID authentication, conditional access, and DLP policies
• Audit trail: Actions are captured through SharePoint version history and Microsoft 365 audit logs
• You own the data: Uninstalling leaves your SharePoint lists and data intact

Component Information (SPFx component types in this package — policy 1170.1)

• Client-side web part — "Risk & Compliance Hub" — for modern SharePoint pages and (via Sync to Teams) Microsoft Teams channel tabs and personal apps
• Full-page app — the same "Risk & Compliance Hub" web part published as a SharePoint full-page application (SharePointFullPage host) for a dedicated full-width workspace
• Form Customizer extension — enhanced native SharePoint Risks list New, Edit, and Display forms

Prerequisites

• Microsoft 365 with SharePoint Online (SharePoint Server / on-premises is not supported)
• Tenant administrator permissions to deploy SPFx solutions to the app catalog
• Modern SharePoint sites
• Microsoft Teams (optional) for Teams integration

Recommended Browsers

• Microsoft Edge
• Google Chrome

Licensing

One license is required per SharePoint site collection. The free trial can be converted to a full version by purchasing a license from our website.

Get Started

Click Get it now to start your fully featured 14-day free trial. Deploy the solution to your Microsoft 365 tenant App Catalog, add the web part to a SharePoint page (or publish as a full-page app), and launch the built-in setup wizard. After the trial period, the subscription is $999 per site collection per year, with unlimited users across your tenant.

Help & Support

Product pageKnowledge baseSupport