About
Why Gwenda exists
Confidence in every obligation
Compliance software mostly asks people what they do. We thought it should go and look.
Every organisation we spoke to had the same problem, in different vocabulary. A childcare service is held to nothing like the same standards as a payments platform, and a residential aged care provider to different ones again. Yet all three spent most of their compliance effort assembling proof that controls existed, instead of working on the controls.
Australia-first, deliberately
Most GRC platforms are built for the United States and treat Australian obligations as a region pack, if they treat them at all. The AFS licence obligations, the reformed AML/CTF regime, the Essential Eight, the National Quality Framework and the strengthened Aged Care Quality Standards are not edge cases here. They are the reason the product exists.
Obligations rarely stop at a border, though. If your customers ask for SOC 2 or your users are in the EU, those are first-class modules on the same discovery engine. You won't be running a second programme for them.
What we believe
A compliance score you cannot explain is worse than no score, and a finding without an owner is a meeting, not a fix. A control that was proven once, a year ago, is by now only a claim.
We would rather show you an honest number that is lower than your last self-assessment than a flattering one you cannot defend to an assessor.
How we work
Principles we hold ourselves to
Read-only by default
We build a system that reads your most sensitive configuration. The narrowest scope that answers the question is the only defensible default.
Show the working
Every score resolves to a control, and every control to the system it was read from and the clause it maps to. No unexplained numbers.
The regulator's text governs
We summarise standards to make them usable. Where our summary and the regulator's text differ, theirs wins, and we link to it.
Come and break it.
If you're responsible for compliance somewhere regulated, we'd like to hear where this would fall down for you.