PilotVantage Documentation
Everything you need to get the most out of your GRC platform — from day-one setup to running an audit-ready compliance programme.
Quick Start Guide
Get up and running with PilotVantage in under 30 minutes — set up your organisation, invite your team and log your first records.
Risk Register
Record and score risks by department, escalate to the organisation register and track treatment against your risk appetite.
Policies & Documents
Draft, approve and version your policy library, then collect staff acknowledgements with a shareable link — evidence auditors ask to see.
Incidents
Log security incidents and drive them through a clear lifecycle — triage, investigate, contain, resolve and close — with a full timeline.
Third Parties
Keep a register of your suppliers and vendors, tier them by risk, track contracts and DPAs, and send security questionnaires for due diligence.
Users & Roles
Invite your team, assign roles and departments, and control exactly who can see and do what across your workspace with role-based access.
What is PilotVantage?
PilotVantage is a Governance, Risk & Compliance (GRC) platform for growing companies working towards ISO 27001, SOC 2, GDPR, HIPAA and other certifications and regulations. It replaces spreadsheets and heavyweight enterprise tools with one focused, practical workspace where your whole team — or your consultant — can collaborate.
What you can do
- Risk Register — record and score risks by department, escalate the important ones to an organisation-wide register, and track treatment against your appetite.
- Policies & Documents — draft, approve and version your policy library, then collect staff acknowledgements with a shareable link.
- Incidents — log security incidents and drive them through a clear lifecycle with a full timeline.
- Controls — 14 frameworks built in (ISO 27001, SOC 2, GDPR, HIPAA, ISO 9001/22301/27701/42001, CIS v8, NIST CSF, PCI DSS, Cyber Essentials, DORA, NIS2) plus custom frameworks, with a Statement of Applicability.
- Audits — plan internal audits, record findings and drive corrective actions to closure.
- Third Parties & Questionnaires — keep a vendor register and send security assessments through a secure public link.
- Assets, Evidence, Actions, Access Reviews & Training — the supporting records auditors expect to see.
- Reports — generate board packs and certification-ready PDFs from live data.
Key concepts
Departments
PilotVantage is organised around departments. Each department owns its own risk register, and most users see and manage only their own department's records. Risk & Compliance users see everything, and individual risks can be escalated to the organisation register for board-level visibility.
Roles
What each person can see and do is controlled by their role. You assign roles when you invite people (see Users & Roles).
| Role | What they can do |
|---|---|
| Administrator | Full access to everything, including settings, users and billing. |
| Risk & Compliance | Full access to all registers, approves escalations, manages departments. |
| SLT / MD | Read access to the organisation register and their own department; signs off reviews. |
| Risk Champion | Creates and manages risks in their department. |
| Auditor | Read-only access across all modules. |
| Viewer | Read-only access to their own department. |
The risk escalation workflow
A department logs a risk
The risk owner records a risk in their department register with scores, category and linked controls.
They request escalation
When it warrants board attention, the owner requests escalation with a short justification.
Risk & Compliance reviews
R&C sees a Pending Approvals badge, then approves or rejects with a reason.
It reaches the organisation register
Approved risks appear on the organisation register and in the leadership Board View.
Finding your way around
Use the global search in the app sidebar to jump to any record — risks, incidents, controls, policies, vendors, assets and more — as you type. In these docs, use the search box at the top of the page to find any guide.