Osano vs. SAP Process Control vs. Vanta

Osano is well-suited for startups and small-to-medium-sized enterprises (SMEs) due to its low cost and excellent service. The customer support is also commendable. It consistently notifies you of missing privacy policies or cookie compliance issues on your webpage. Additionally, it requires mandatory two-factor authentication (2FA) at login, enhancing security.

In my opinion, SAP Process Control is well suited for bigger companies with an already mature Internal Control System as well as for bigger companies who want to completely new/redesign the internal control system. The size of the company, as well as the budget, is quite important when thinking about the implementation of SAP Process Control. A smaller company with e.g., 150 people should think more about implementing SAP FCM.

Incentivized

Vanta seems excellent for startups, but I expect that they would be even more useful at bigger companies. I think it really helps people that haven't done SOC2 before. I also think it would help in monitoring compliance across teams with many users. If the budget is extremely tight, I think it would be possible to save money by not using it.

Incentivized

• Legal compliance in ever changing landscape across the globe
• built for fast with minimal impact on page speed
• language adapts to users device configuration no matter where they are.

Incentivized

• Native connection to SAP applications
• Automated monitoring process of SAP applications
• Workflow capabilities for control testing

Incentivized

• API driven capabilities offer a very easy way to connect your systems to their application.
• It was mostly intuitive to figure out what needed to be configured.
• I like how responsive they have been and how they have been able to outline the entire process for us from the start to the end.

Incentivized

• [I] would like to have more details on what the scripts/cookies are for (it isn't always clear).
• The step-by-step process of classifying scripts and saving vs. publishing is clunky and unclear.
• Some [of the] naming conventions aren't intuitive - compliance mode, strict, passive, etc.

Incentivized

• Default delivery of controls could be done by SAP on some basic controls like client openings, password controls, etc
• The messaging or customization of messages in different workflows is limited, which could be introduced to enhance the product
• SAP Process control does not have the capability for cloud product monitoring which is required with more SAP cloud products available right now

• In my opinion, they make it very hard to contact them when you need something.
• In my experience, they write their contracts to make it difficult to cancel service.
• In my experience, they have no policy for refunds in addition to their [...] contacts.

Great to maintain for our SOC2 compliance and further compliance evolutions

Incentivized

It's very user friendly once implemented

Incentivized

In my experience, the sheer volume of tasks and to do items is a bit inundating.

Always available

Incentivized

Fast although the agent may take some time to reping on checks

Incentivized

Direct support and replies in a timely manner to tickets submitted

Incentivized

Pretty straight forward

Incentivized

Straight Forward

Incentivized

Pretty seemless and did it almost entirely myself

Incentivized

I prefer Osano over others for it's easy of configuration and flexibility to adjust language dynamical and legal requirements dynamically based on user device and/or location. Plus easily add team members to help manage the various parts of the software make this a one stop shop solution for our business.

Incentivized

The connectivity with other SAP products out of the SAP GRC suite, like Access Control and so on, was key for the decision. Also we had an already mature SAP System landscape as well as having internal processes that were similar to the SAP Process Control standard processes helped us with the decision to implement SAP Process Control.

Incentivized

Vanta's reporting was far superior, the price was competitive but my engineers running the project said that working with vanta would save them significant amount of time. Secondly vanta had more integrations so they could plug directly into the systems we use!

Incentivized

Works as intended

Incentivized

• Cost savings.
• Time
• Risk management.

• Automated alerts for controls issues
• Workflow capabilities; however, there's natively only 2 levels of review. More layers would be beneficial.

Incentivized

• We were able to close contracts because we had our SOCII compliance in place
• SOCII certification process was reduced by at least 80%

Incentivized