ORCA Opti Core
Know where your business stands. At any time. Without the scramble.
Your risks, incidents, policies and controls. One system. Always current. Always yours.
Right now that information is scattered across drives, inboxes, spreadsheets and people's heads. Opti Core brings it into one structured, living system of record, inside your Safe Zone. Your data stays sovereign, in the region you choose, and is never used to train external AI models.
The system of record
The backbone everything else connects to.
Opti Core is the living system of record underneath your entire compliance operation. Everything connects to it. Everything writes back to it. Every change logged. Every relationship mapped. When the auditor asks, you'll be pointing, not scrambling.
Risks
Risks
Identified, rated, linked to controls
Controls
Controls
Mapped to frameworks automatically
Incidents
Incidents
Logged, tracked, connected to assets
Policies
Policies
Tied to teams and obligations
Assets
Assets
Systems, data and people, all visible
Vendors
Vendors
Risk-profiled across your supply chain
Actions
Actions
Owned, due-dated, escalation-ready
Frameworks built in
The standards that matter for your industry. Already mapped.
You shouldn't have to build your compliance framework from scratch. Opti Core comes with the most important frameworks pre-mapped and ready to use.
UK GDPR & Data Protection Act 2018
UK GDPR & Data Protection Act 2018
Personal data obligations and ICO expectations, mapped and evidenced.
Cyber Essentials & Cyber Essentials Plus
Cyber Essentials & Cyber Essentials Plus
The NCSC baseline controls many contracts now require, kept audit-ready.
NIS Regulations
NIS Regulations
Network and information systems duties for operators of essential services and digital providers.
ISO 27001
ISO 27001
Information security management, pre-mapped to your controls.
AI governance
AI governance
A practical path to safe, accountable AI aligned with the UK's pro-innovation approach.
UK & EU data residency
UK & EU data residency
Keep data in your Safe Zone, hosted in the UK or the EU under the EU Data Boundary, with residency you can demonstrate.
Knowledge Packs
Months of work. Done in days. Or in minutes.
You know what the standard is: ISO 27001, SOC 2 and the frameworks your industry is held to. You just don't know how to get there without hiring a consultant and spending months building from scratch. Each Knowledge Pack is a pre-built compliance program structured for a specific standard and ready to install into Core.
- Policies and procedures written for your framework
- Controls already mapped to the standard
- Assessment questions structured around your obligations
- Evidence guidance so your team knows what to collect
Automation
Your processes run whether you're watching or not.
The things that fall through the cracks aren't the big things, they're the follow-up that didn't happen, the review nobody scheduled, the vendor assessment sitting in an inbox for three weeks.
Before
Incidents managed through email threads
With ORCA
Every step assigned, tracked, documented
Before
Risk reviews missed or done late
With ORCA
Owners notified, responses collected automatically
Before
Policies approved by whoever's available
With ORCA
Draft, review, approve, publish, without chasing
Before
Vendor onboarding inconsistent every time
With ORCA
Structured due diligence process, every time
Before
Access reviews nobody remembers to run
With ORCA
Reviews sent, responses collected, removals actioned
Live reporting
Generated from data that already exists. Not assembled the night before.
Real-time dashboards give leadership live visibility, and when a report is needed for the board, an auditor or a regulator, it's generated from the data already in Core.
How it all connects
From incident to board report
What happens when a ransomware incident is detected in an organisation running Opti Core? The entire lifecycle is managed in one platform. Complete audit trail. Nothing missed. Nothing manual.
- 1
An incident entity is created
Linked automatically to the affected asset, the relevant risk and the applicable controls.
- 2
Incident response workflow triggers
Tasks assigned to security, IT and management, with escalation timers running.
- 3
Opti Assist leads the response
Guiding the response, suggesting containment steps, drafting stakeholder communications.
- 4
Flagged against relevant controls
ISO 27001 and relevant control gaps highlighted automatically.
- 5
Status monitored and updated
An Agent monitors status and sends daily updates to the CISO until the incident is closed.
- 6
Full incident report generated
Timeline, impact assessment and lessons learned, ready for the board and any regulatory notification.
Privacy first. Always.
Your data never leaves your environment. It's never used to train AI models. It's encrypted at rest and in transit. Access is controlled at the entity and field level, people only see what they're authorised to see. Data residency is enforced. Sovereign by design.
Works with what you already have.
ORCA Opti lives inside your secure Microsoft ecosystem. It integrates with your existing SharePoint, Teams, Defender, Sentinel, HR and operational systems, reducing duplication, improving accountability and keeping all data inside your sovereign tenant.
Opti Core Plans
The full AI-powered GRC platform, for organisations of every size.
Opti Core Starter
£299.95/per month
Core GRC for small teams getting compliance-ready.
- Everything in Opti Assist
- Risk Management
- Incident Tracking
- Action Items
- Real-time Dashboards
- 5 Navigators + 10 Standard Users
- 2M Monthly AI Credits
- Standard Support
Sign up to the ORCA Opti Portal with a Microsoft work or school account, or a Google Workspace account, to order this plan.
Opti Core Professional
£539.95/per month
Full GRC for small to medium organisations.
- Everything in Opti Core Starter
- Advanced AI Tooling
- Compliance Frameworks
- 10 Navigators + 20 Standard Users
- 4M Monthly AI Credits
- Priority Support
Sign up to the ORCA Opti Portal with a Microsoft work or school account, or a Google Workspace account, to order this plan.
Opti Core Enterprise
£1549.95/per month
Complete platform for large organisations.
- Everything in Opti Core Professional
- Advanced Analytics
- Logistics
- Custom Integrations
- 30 Navigators + 60 Standard Users
- 12M Monthly AI Credits
- Dedicated Support
Sign up to the ORCA Opti Portal with a Microsoft work or school account, or a Google Workspace account, to order this plan.
Clarity in minutes. Confidence ongoing.
Work through a guided check with Opti Assist and receive an immediate view of alignment, visibility and improvement areas now.
Join our mailing list
News and updates from ORCA Opti.