Lastreia

Lastreia is a Brazilian GRC platform that helps organizations organize controls, policies, and evidence in a single location. It measures adherence to frameworks like LGPD, ISO 27001, CIS Controls, and GDPR. The service links evidence to controls, tracks expiration dates, and notifies responsible parties when evidence is about to lapse.

The platform supports 14 compliance references and includes 13 guided trails, such as 49 items from ISO 27001. It allows users to upload documents, identify gaps, and close them while showing results to auditors. Evidence is linked to controls with mandatory approvers and segregation of functions to prevent auto-approval.

Pricing starts at R$197 per month for one user and 5 GB of evidence space. The Equipe plan costs R$497 per month for five users and 25 GB, while the Avançado plan is R$997 per month for 15 users and 100 GB. All plans include a free 14-day trial without requiring a credit card.

Lastreia serves organizations in Brazil and operates in Portuguese. It is designed for companies needing to respond to client security questionnaires and prepare for audits. The platform handles multiple compliance frameworks including NIST CSF, SOC 2, and Resolução BCB 4.658.

The platform offers a free 14-day test period where users can create an account without a credit card. After the test, users can cancel at any time by sending a message, and the support team typically responds on the same business day. There is no implementation fee to start using the service.

Some reviewers note that the platform solves the problem of scattered evidence by linking documents directly to controls instead of using spreadsheets. Users appreciate the automatic alerts before evidence expiration and the ability to map answers to ISO/LGPD/CIS standards.

The platform enforces segregation of functions by requiring an approver for each control and blocking auto-approval of evidence. A single change to a control linked to a user triggers updates across the system. This ensures that creation and approval roles are distinct.

The platform includes a PDF diagnostic tool that estimates adherence to standards like ISO 27001. Users can upload existing documents to see named gaps and then close them within a single database per client. The system avoids the need for manual copying and pasting for questionnaires.

The official website of Lastreia is lastreia.com.br.

Lastreia has no reviews on Trustburn yet. Anyone who has used it can write the first review on its Trustburn page.