Hyperproof

Africa – October 29, 2026 -- Hyperproof and Platview are offering an on-demand session on how tightening data-security and AI regulation affects organisations operating in and with Africa.

EU rules reach beyond Europe as African regulators build their own frameworks

New EU rules on data security and AI apply well beyond Europe's borders, according to the organisers. African regulators are building their own frameworks at pace, adding a second layer of obligations for companies active on the continent.

Germany – October 28, 2026 -- Vendors selling to EU banks, hospitals or energy providers are being pulled into DORA and NIS2 obligations through contractual flow-down, regardless of where they are headquartered, according to Sergiy Lapin, CEO of Passeca Germany.

Customer contracts, not legal text, now define regulatory scope

Lapin says supplier contracts now carry DORA and NIS2 clauses even in countries where regulatory transposition is not finalized. His summary of the shift: "'We are not in scope' was the 2024 answer." By 2026, he argues, vendors must say their customers are in scope and prepare accordingly.

Passeca, a Hyperproof MSSP partner, offers incident response, security awareness, vCISO services and compliance support.

United States – October 28, 2026 -- The Pentagon's suspension of CMMC Phase II third-party assessment requirements has made contractors' own self-attestations the main compliance record, raising their exposure under the False Claims Act (FCA). Mandatory C3PAO certifications remain on hold following the Department of War's class deviation, but Phase I self-attestation is still fully active.

Phase I obligations and prime contractor requirements remain in force

Contractors must still self-attest compliance with NIST SP 800-171 Rev. 2 wherever DFARS 252.204-7012 applies. The 110 controls in that standard remain the legal baseline for any organization that processes or stores controlled unclassified information (CUI).

Global – October 28, 2026 -- Hyperproof is selling professional services across six areas to close the gap between buying governance, risk and compliance (GRC) software and getting teams to use it, and cites a G2 recognition for Fastest Implementation.

Customers choose between two implementation models

Under Hands-on Implementation, Hyperproof builds the platform from customer inputs and approvals. Under Guided Implementation, the customer builds and Hyperproof advises. The company says its team anticipates edge cases and designs scalable integrations.

Global – October 28, 2026 -- Hyperproof says compliance teams can reach readiness in weeks on an extensible GRC platform, versus 6 to 12 months spent engineering custom AI agent pipelines in-house.

The vendor frames the choice facing CISOs and compliance leaders as "build from scratch" versus "build on top." Risk teams are increasingly assembling internal utilities with Claude, ChatGPT or custom LLMs.

In-house LLM projects stay limited to narrow productivity tasks

Internal builds offer tailored workflows, private cloud control over audit evidence and source code, and no per-seat or per-framework licensing fees. But generic LLM wrappers carry heavy engineering overhead, security risk and audit exposure, according to Hyperproof.

Global – October 28, 2026 -- Enterprises that pair AI speed with documented human accountability are gaining a competitive edge in governance, risk and compliance (GRC), while four common deployment mistakes expose others to audit failures, according to a commentary originally published in Business Reporter and promoted by GRC vendor Hyperproof.

AI automation cannot replace a GRC system of record

AI excels at high-throughput evidence orchestration and cross-framework mapping, cutting the duplicative control work that inflates operational costs. But AI tools do not inherently persist as a structured, version-controlled source of truth. Regulators and external auditors demand policy versioning, centralized framework mappings and defensible audit trails over time, which a dedicated GRC platform provides.

United States – October 28, 2026 -- Hyperproof has named Carahsoft Technology Corp. its Master Government Aggregator, making its governance, risk and compliance (GRC) platform available to public sector organizations, defense industrial base (DIB) suppliers and government contractors through six procurement contract vehicles.

Carahsoft opens six contract routes to Hyperproof's GRC platform

Hyperproof will be sold through Carahsoft's reseller partners and these contracts: NASA SEWP V (NNG15SC03B and NNG15SC27B), NASPO ValuePoint Master Agreement #AR2472, TIPS Contract #220105, OMNIA Partners Contract #R240303, E&I Contract #EI00063~2021MA and The Quilt Master Service Agreement MSA05012019-F.

North America – October 28, 2026 -- Hyperproof and GRC 20/20 Research will host a webinar on November 17 at 12 PM ET / 9 AM PT arguing that third-party risk management (TPRM) programs should be measured by the risk they reduce, not by how many vendor assessments they complete.

Speakers are Michael Rasmussen of GRC 20/20 Research and David Zambrano, Director of GRC at Hyperproof. Rasmussen will present research on why vendor criticality and exposure matter more than assessment volume. Zambrano will explain how GRC teams use AI-powered assessments and a centralized system of record to measure and report vendor risk.