LogicGate Risk Cloud

LogicGate offers a flexible implementation process tailored to the complexity of your GRC needs. Here’s a detailed breakdown of the process and timeline:

1. Scoping and Planning

• Initial Consultation: LogicGate works with your team to define business goals, use cases, and required applications.
• Scoping: Determines the level of customization, integrations, and data migration needed.
• Implementation Package Selection: Options include:
  • Lite Implementation: For basic needs using pre-built templates.
  • Standard Implementation: For moderate customization.

  • Custom Implementation: For complex, enterprise-wide deployments.

2. Configuration and Deployment

• Application Setup: LogicGate configures workflows, fields, and logic based on selected templates or custom requirements.
• Workflow Design: Includes steps, paths, and routing logic tailored to your risk processes.

• User Roles and Permissions: Power Users (builders), Standard Users (viewers), and External Users (limited access) are configured.

3. Enhancements and Integrations

• Minor Enhancements: Included in Lite Implementation (e.g., field adjustments).

• Advanced Features: Available in Premium Applications (e.g., automated evidence collection, document generation, integrations with Jira, Slack, etc.).

4. Testing and Validation

• UAT (User Acceptance Testing): Ensures workflows and logic meet business requirements.

• Feedback Loop: Iterative adjustments based on user feedback.

5. Training and Go-Live

• Training Sessions: Provided for Power Users and Standard Users.
• Documentation: Includes guides and access to LogicGate’s Help Center.

• Go-Live: Transition to production environment.

6. Post-Implementation Support

• Ongoing Support: Includes access to customer success managers and technical support.

• Optional Add-ons: Risk Cloud Quantify®, Spark AI, and additional applications can be added post-launch.

Implementation Timeline

• Lite Implementation: Typically 4–6 weeks, depending on scope.
• Standard Implementation: Around 8–12 weeks.
• Custom Implementation: Can extend to 16+ weeks, especially for enterprise-wide deployments with integrations and data migration.

LogicGate Risk Cloud is highly customizable and designed to adapt to specific business and regulatory requirements. Here are the key customization capabilities:

• No-Code Workflow Builder: Users can create and modify workflows using a drag-and-drop interface—no coding required.
• Custom Applications: Organizations can build their own applications or modify existing ones to align with unique risk and compliance processes.
• Flexible Data Architecture: The platform uses a graph database model, allowing users to define custom relationships between risks, controls, assets, and more.
• Custom Fields and Forms: Users can add custom fields, forms, and logic to tailor data capture and processing.
• Role-Based Access Control: Permissions can be customized for different user roles (Power Users, Standard Users, External Users).
• Custom Reporting and Dashboards: Visualizations and reports can be tailored to specific KPIs, risk metrics, and stakeholder needs.
• Integration Flexibility: Supports hundreds of native and custom integrations to fit into existing tech stacks.

Customer testimonials confirm that LogicGate worked closely with them to build tools that not only met but exceeded their requirements.

LogicGate uses a modular and transparent pricing model, with several components that may affect total cost:

1. Application Licensing

• Each GRC use case (e.g., ERM, Compliance, Third-Party Risk) is sold as a separate Application.

• You only pay for the Applications you need.

2. User Licensing

• Power Users (those who build and manage workflows) require paid licenses.

• Standard Users and External Users are included at no additional cost.

3. Implementation Packages

• Quick Start: For simple deployments.
• Standard: For moderate customization.
• Custom: For complex, enterprise-wide implementations.

• Each package includes setup, configuration, training, and support.

4. Add-On Features

• Advanced modules like Risk Cloud Quantify® and Spark AI are available as add-ons.

• These may incur additional licensing or usage-based fees.

5. Support and Maintenance

• Ongoing support is included, and LogicGate is known for high-quality customer service (98% satisfaction on G2).

• No separate maintenance fees are mentioned, but premium support tiers may be available upon request.

6. Pricing Transparency

• Pricing is available upon request and tailored to each organization’s size, complexity, and needs.

LogicGate provides a comprehensive training ecosystem for new users, especially Power Users (admins and builders). Key components include:

LogicGate Learning Portal

• A self-service online learning platform for Power Users and support team members.
• Offers Power User Certification, which includes:
  • Three structured courses covering fundamentals to advanced topics.
  • Topics include Applications, Workflows, Steps, Jobs, Workflow Mappings, Access Requirements, and Notifications.
  • Modular content: Videos, tutorials, how-to guides, and knowledge checks.
  • Time commitment: Each course takes 30 minutes to 2 hours; full certification takes up to 5 hours.

  • Free for customers.

Onboarding and Admin Training

• Admin training is part of the onboarding process and includes:
  • Workflow configuration
  • Role setup
  • Reporting and dashboard creation

  • Data structure design

Customer Success and Support

• Dedicated Customer Success Managers guide implementation and adoption.
• Access to Help Center, product documentation, and release updates.
• Slack Community – “The Risk Crowd”: A peer-to-peer forum for sharing best practices and tips.

LogicGate Risk Cloud is built with enterprise-grade security and compliance in mind. Key security features include:

Data Protection

• Encryption at Rest and in Transit: All customer data is encrypted using industry-standard tools and protocols.
• Fine-Grained Access Controls: Role-based access ensures least-privilege principles are enforced.

• SAML 2.0 SSO Support: Enables centralized authentication and identity management.

Infrastructure and Hosting

• Hosted on Amazon Web Services (AWS), leveraging its secure and scalable infrastructure.

• Three-Tier Architecture: Web, application, and data layers are separated and protected by firewalls.

Monitoring and Incident Response

• Continuous Monitoring: Tracks operational performance, availability, and security events.
• SIEM Platform: Detects abnormal behavior and potential threats.

• Incident Response Plan: Includes a Critical Escalation Team for rapid communication and resolution.

API Security

• Secure RESTful API with OAuth 2.0 authentication for integrations.

LogicGate Risk Cloud follows a frequent and structured release cycle, typically issuing updates monthly or more often. Here are the key details:

Release Frequency

• Updates are released multiple times per quarter, with version numbers like v2025.5.0, v2025.4.1, etc., indicating a consistent cadence.

• These updates include new features, API enhancements, bug fixes, and performance improvements.

Update Management

• Release Notes: Each update is accompanied by detailed release notes published on LogicGate’s website, outlining changes and new capabilities.
• In-App Notifications: Users receive alerts within the Risk Cloud platform when new features or updates are available.
• Monthly Newsletters: Customers are informed about updates via email newsletters.

• API Versioning: Updates to the Risk Cloud API are versioned and documented to ensure smooth integration and backward compatibility.

Testing and Deployment

• Updates are tested internally and rolled out in a controlled manner.
• Customers can validate changes in sandbox environments before applying them to production.

LogicGate emphasizes customer control and transparency regarding data ownership and portability. Key points include:

Data Ownership

• Customers retain full ownership of their data stored in the Risk Cloud platform.
• LogicGate acts as a data processor, not a data owner, aligning with GDPR and other privacy regulations.

Data Portability

• Customers can export their data at any time using built-in tools or via the Risk Cloud API.
• Supports structured data formats for easy migration or integration with other systems.

• API endpoints allow for bulk data retrieval, updates, and synchronization with external platforms.

Compliance and Privacy

• LogicGate complies with GDPR, SOC 2 Type II, and HIPAA standards, ensuring secure and compliant data handling.
• Data is encrypted in transit and at rest, and access is governed by role-based permissions.

LogicGate Risk Cloud is designed to scale flexibly with your organization’s evolving needs. Key points include:

• Modular Architecture: You can add or remove Applications (e.g., ERM, Compliance, Third-Party Risk) based on your current requirements.

• User Licensing Flexibility:
  • Power Users require paid licenses.

  • Standard and External Users are included at no extra cost, allowing for scalable collaboration.

• Dynamic Workflow Adjustments: The platform allows you to modify workflows, data structures, and reporting as your risk landscape changes, without needing to rebuild from scratch.
• Risk Cloud Quantify® and Spark AI can be added as premium features when needed, supporting advanced risk modeling and automation.

• Integration Expansion: Hundreds of integrations are available to support scaling across systems and departments.

This flexibility ensures that organizations can start small and expand their GRC programs over time without major disruptions.

LogicGate’s Subscription Services Agreement outlines the terms for renewal and cancellation:

• Contract Term: Defined in the Order Form; typically annual or multi-year agreements.

• Renewal: Contracts may auto-renew unless either party provides notice of non-renewal within a specified period (usually 30–60 days before the end of the term).

• Cancellation:
  • Customers may cancel by providing written notice before the renewal deadline.

  • Early termination may be subject to fees or forfeiture of prepaid amounts, depending on contract terms.

• Data Ownership: Upon termination, customers retain ownership of their data and can export it from the platform.
• Affiliate Access: Affiliates of the customer can also execute orders under the same agreement, allowing for enterprise-wide deployment.

For exact terms, organizations should review their specific Order Form and consult LogicGate’s legal documentation.

LogicGate Risk Cloud complies with several key industry standards to ensure data security and regulatory alignment:

• SOC 2 Type II: Demonstrates strong internal controls for security, availability, and confidentiality.
• GDPR: Compliant with European data protection regulations, ensuring customer data rights and privacy.
• HIPAA: Supports healthcare organizations with safeguards for protected health information (PHI).
• NIST Frameworks:
  • NIST Cybersecurity Framework
  • NIST 800-53
• CIS Top 20 Controls: Helps organizations implement best practices for cyber hygiene.
• Open FAIR™ Model: Used in Risk Cloud Quantify® for financial risk quantification.

These standards make LogicGate suitable for regulated industries such as finance, healthcare, and government.