Melbourne, Australia – 18 August 2026. 6clicks, the sovereign GRC platform, today announced the launch of intelligent GRC (iGRC) capabilities designed for defense, critical infrastructure, and organizations with complex compliance requirements.
The announcement addresses a structural gap in the GRC market. While most modern platforms have focused on automating compliance for cloud-native organizations through pre-built SaaS integrations, defense contractors, critical infrastructure operators, and highly regulated sectors often operate infrastructure that cannot connect to external cloud services: air-gapped networks, operational technology (OT) systems, and environments bound by data sovereignty requirements. These organizations face a choice between legacy platforms requiring extensive manual work or automation platforms that cannot physically connect to their systems.
6clicks operates within the customer's security perimeter, enabling AI-powered risk and compliance management without requiring organizations to circumvent existing controls or change established processes. Organizations using legacy systems, OT networks, or heterogeneous technology stacks can upload or retrieve any evidence directly from their environments, which is then automatically evaluated and mapped to compliance requirements using built-in AI.
Currently, the GRC market is split into two camps:
Legacy platforms (ServiceNow, OneTrust): Manual evidence upload, consultant-driven implementations, built for annual audits.
Automation platforms (Drata, Vanta): Pre-built integrations to 200+ SaaS tools, automated evidence collection, fast SOC 2 certification.
What both missed: Government agencies, defense contractors, and critical infrastructure operators don't just run on AWS, Salesforce, and Okta. They operate air-gapped networks, operational technology, and custom systems built over decades. SaaS-only GRC platforms literally cannot connect to these environments.
"We kept hearing the same thing: 'your competitors' platforms are useless in our environment,'" said Anthony Stevens, CEO of 6clicks. "So we built something that works anywhere. If you can access the data, we can map it to compliance requirements. We are categorically GRC that runs where your data lives."
The platform takes a fundamentally different approach to GRC automation:
Intelligent evidence collection and validation: Easily connect to any environment, automate control testing, and capture evidence continuously through no-code integration recipes generated by AI. Compliance automatically updates across linked frameworks with each new evidence or control assessment. For manual uploads, Hailey analyzes evidence against test-specific guidance and provides actionable findings before submission.
Knowledge that scales: 6clicks' GRC Knowledge Graph automatically maps evidence to compliance controls, assets, and frameworks in a single operation. Test results flow across the entire ecosystem continuously, allowing evidence and organizational knowledge to compound as compliance programs grow.
Universal connectivity: No more adapting your environment to static integrations or cloud-first platforms. 6clicks connects to OT environments, custom databases, legacy systems, and air-gapped networks. Data remains within organizational infrastructure, with organizations maintaining full control over what information flows in and when.
Works where others can't: Supports cloud, on-premises, air-gapped, and hybrid deployments. Organizations can manage their entire GRC workflow, from evidence ingestion through assessment, framework mapping, audit, and remediation, in one platform that adapts to their infrastructure and data requirements.
"I can upload a maintenance log from an airport's operational technology system, a photo of a server room access log, and a JSON export from a custom database, and Intelligent Evidence Collection understands all of them and maps them to ISO 27001, NIST SP 800-53, and local aviation regulations simultaneously," said Andrew Lawrence, CTO of 6clicks. "This shows a different paradigm altogether."
"Large language models have proven highly effective at understanding unstructured content at scale," Stevens added. "Since AI excels at interpreting regulatory requirements and determining what evidence satisfies them, we applied that capability to GRC. The GRC market has been solving the wrong problem: building hard-coded integration catalogs and framework templates instead of building intelligence. We're building the GRC platform everyone assumes already exists. One that actually understands your organization instead of making you conform to its limitations."
The new capabilities extend 6clicks' sovereign GRC platform, which pioneered the use of AI in GRC in 2019 and is currently deployed across government entities, critical infrastructure operators, defense primes, and telecommunications providers in Asia, the Middle East, Europe, and North America.
The platform delivers a full suite of AI-powered GRC capabilities and workflows. This includes Hub & Spoke architecture for federated governance across distributed operations, Hailey AI for automated task execution and compliance guidance, and end-to-end risk and compliance management from evidence collection through remediation and audit preparation. Deployment options span self-hosted, private cloud, dedicated instances, and government cloud environments.
The current release includes the GRC Knowledge Graph, intelligent evidence collection and validation, and connected compliance registers. Upcoming advancements in the roadmap will introduce enhanced assessments, bulk-mapping, and MCP-powered workflows, all using AI to understand organizational context rather than forcing rigid workflows.
6clicks builds AI-powered GRC software for government, defense, critical infrastructure, and global enterprises. The platform features Hub & Spoke architecture, data sovereignty controls, and native risk and compliance intelligence designed for environments where traditional vendors and automation platforms cannot operate.
Media contact:
Anthony Stevens
CEO & Founder