Overview
NAVEX Global, which acquired LockPath, offers the Keylight platform as a SaaS solution for governance, risk management, and compliance (GRC) and integrated risk management (IRM). Keylight is a modular, cloud-based suite (with on-premises or hybrid options) built on a patented Dynamic Content Framework that lets users configure without coding and includes modules like Audit Manager, Business Continuity Manager, Compliance Manager, Incident Manager, Risk Manager, and Vendor Manager. It gathers data from many internal and external sources to provide a centralized view of risk and compliance, supporting end-to-end coverage from policy creation to audit readiness. The goal is to provide a single, holistic GRC/IRM platform that consolidates risk, compliance, and third-party oversight to help organizations meet regulations and make better risk-based decisions.
Work here?Claim your company
Simplify's take
What believers are saying
- September and October 2026 releases deepen AI across disclosures and investigations workflows.
- NAVEX’s 2026 benchmark reports use 2.37 million cases, strengthening product data advantage.
- The November 2026 workplace awards signal steadier retention during aggressive platform expansion.
What critics are saying
- ServiceNow, Microsoft, and Workday can bundle adjacent compliance features and compress NAVEX pricing.
- Nira’s July 2026 rollout raises reliability scrutiny; bad AI findings damage investigations and audits.
- Private-equity ownership plus crowded GRC suites create an existential replacement risk by 2028.
What makes NAVEX unique
- NAVEX owns regulated workflows across whistleblowing, policy, disclosures, and investigations in one suite.
- Nira, launched July 2026, adds governed AI with audit trails and human review.
- NAVEX claims 13,000 customers, including 75% of Fortune 100 and 500 firms.
Help us improve and share your feedback! Did you find this helpful?
Funding
Industry standards