Solutions

GRC for banks, insurers and pension funds

The GRC platform for financial institutions that want to manage risk, compliance and audit in one place. Built for European supervision, configured for your sector.

Why financial institutions choose CERRIX

A GRC platform that fits the regulation, organisation and way of working of financial institutions.

Built for European regulation

Where US platforms start from legislation such as SOX, CERRIX starts from European regulation such as DORA and Solvency II.

Experts who know your sector

Our consultants have hands-on risk management experience and help shape your framework.

One central source

Risks, controls, evidence and accountability in one place, for all three lines.

Data stored in Europe

Your risk and compliance data is stored in European data centres, in line with the GDPR.

Chosen by financial institutions

From insurers such as VGZ and Menzis to banks such as NIBC: over 100 organisations work with CERRIX.

A modular platform for integrated governance, risk,
compliance.

CERRIX brings structure to the way your teams manage oversights, collaborate across functions, and stay audit-ready.

Regulatory monitoring
AI & Automation
Real-time Reporting & Dashboard
GDPR Management
Compliance Management
Third Party Management
Audit Management
Incident Management
Process Management
Risk & Controls Management

Regulatory monitoring

Tracking regulatory change by hand across multiple sources costs time and invites mistakes. Ruler and CERRIX give you one traceable chain from change to control.

Nest link

AI & Automation

Documentation and reporting eat time your team could spend on analysis. CERRIX puts AI to work across your workflow.

Nest link

Real-time Reporting & Dashboard

Reports consolidated by hand are already weeks out of date when they land. CERRIX replaces them with live dashboards tailored to each user, so all three lines act on what is true today.

Nest link

GDPR Management

Processing records, privacy risks, and breaches in separate documents make compliance hard to prove. CERRIX keeps it linked in one place, across systems and partners.

Nest link

Compliance Management

Map regulations, automate control testing, manage evidence, and stay audit-ready with one integrated compliance management platform.

Nest link

Third Party Management

Third-party data centralized and scored. Contracts monitored, SLA breaches alerted, DORA readiness evidenced.

Nest link

Audit Management

Audits planned, workpapers centralized, findings followed up. Assurance delivered with full traceability.

Nest link

Incident Management

Incidents logged once, routed automatically, root causes traced. Continuous improvement baked into daily work.

Nest link

Process Management

Every flow visualised and owned. Risks linked automatically, attestations tracked, performance insights embedded.

Nest link

Risk & Controls Management

Manage risks and controls without spreadsheets. One GRC platform for banks, insurers and pension funds, built for European regulation such as DORA.

Nest link

Achieve Regulatory Compliance
‍
with an Integrated GRC Framework

A flexible, fully integrated GRC framework for the regulations that weigh most for financial institutions, so your team stays in control and can demonstrate compliance at any moment.

See how clients use CERRIX

How Blauwtrust Groep centralized its control framework in CERRIX GRC Platform

“CERRIX has given us overview, insights and structure. It allows us to demonstrate control in a way that is consistent and efficient, and it supports the way our governance framework continues to evolve.”

How VGZ Strengthens Risk & Compliance Operations with CERRIX

VGZ uses the CERRIX GRC platform to bring core activities, such as control testing, incidents, MoIs, findings and risks, into one environment.

Transforming Compliance: How Menzis Gained Efficiency and Real-Time Insights with CERRIX

Menzis, one of the largest healthcare insurers in the Netherlands, seeking an integrated and automated GRC solution to streamline compliance, enhance risk oversight, and improve operational efficiency.

Structuring Risk and Audit Across Teams: Haier Europe’s Journey

Haier Europe’s approach to risk and audit transformation with CERRIX.

Transforming Risk Culture: How Stater Strengthened First-Line Ownership and Assurance with CERRIX

Stater’s journey to first-line risk ownership and assurance with CERRIX.

Enterprise-grade security

Data protection

ISO/IEC 27001 certified, in line with the international standard for information security.

Control assurance

ISAE 3402 Type II: our internal controls are independently audited.

Financial sector readiness

FSQS-NL registered and pre-qualified for procurement by banks and insurers in the Netherlands.