Eramba
London, United Kingdom, and Bratislava, Slovak Republic
What it is
Eramba is governance, risk, and compliance software for organizations managing activities such as risk, compliance, data privacy, incidents, awareness programs, account reviews, and online assessments. It offers more than 70 ready-to-import compliance packages, and users can upload a custom framework as a CSV file. Common tools include notifications, granular access controls, dynamic status, custom fields, reporting, automations, and REST APIs. Eramba can receive API requests and send webhooks to other systems, with examples including SIEM incident creation and Jira issue creation. Authentication options include LDAP, SAML, and Google OAuth; documentation also covers LDAP synchronization. It is available as self-hosted software or SaaS. For SaaS, Eramba says it hosts systems in Europe or the USA and manages daily backups and upgrades when releases become available. Community is free; Enterprise On-Premise starts at €2,500 per year, and Enterprise SaaS starts at €5,000 per year. Enterprise plans include email support, while Community has no support in the comparison. Eramba is not a network scanner; its documentation recommends syncing asset information from a CMDB through its REST API.
For and against
For
- Includes more than 70 ready-to-import compliance packages.
- Supports custom frameworks uploaded as CSV.
- Can send webhooks to other systems.
- SaaS includes managed daily backups and upgrades.
Against
- Community has no support listed.
- Enterprise On-Premise starts at €2,500 per year.
- It is not a network scanner.
The verdict
Eramba combines compliance frameworks, GRC workflows, integrations, and self-hosted or SaaS deployment options. Community is free, while paid Enterprise plans include support and start at the listed annual prices.
Who it suits
Eramba suits GRC teams managing risks, controls, and policies, with other departments or suppliers able to provide review feedback. It can be deployed on-premise or as SaaS.
Plans and prices
Community
Open and free version · Self-hosted deployment
Read 21 Sep 2026 · eramba.org
Enterprise On-Premise
Unlimited users and data · All modules included · Email support included
Read 21 Sep 2026 · eramba.org
Enterprise SaaS
unlimited users · unlimited data · EU or US hosting · backups and updates managed by eramba
Read 14 Oct 2026 · eramba.org
Community on-premises
self-hosted · no user limit · no time limit · 4 of 7 use cases
Read 14 Oct 2026 · eramba.org
Implementation workshop
optional fixed-price workshop
Read 14 Oct 2026 · eramba.org
Enterprise on-premises
unlimited users · unlimited data · all modules · email support
Read 14 Oct 2026 · eramba.org
Community On Premise
Unlimited users and data · manual upgrades and backups · no support included
Read 28 Sep 2026 · eramba.org
Enterprise On Premise
Unlimited users and data · all modules included · email support
Read 28 Sep 2026 · eramba.org
On the record
- Account reviews
- Enterprise includes automated account-review use cases and connectors for systems such as AWS and LDAP.eramba.org · read 14 Oct 2026
- API documentation
- API documentation is exposed through Swagger within each module to administrators or members of the Admin group.eramba.org · read 14 Oct 2026
- API limitations
- The API documentation notes pagination but no sorting, and PATCH requests require the full object fields.eramba.org · read 14 Oct 2026
- Automation extensibility
- Automations run user-provided PHP code, can use Composer dependencies and can execute on schedules or record-change events.licenses-dev.eramba.org · read 14 Oct 2026
- Awareness programs
- Enterprise includes awareness training programs that track participation and results.eramba.org · read 14 Oct 2026
- Company founded
- LinkedIn lists Eramba as founded in 2011.linkedin.com · read 14 Oct 2026
- Company headquarters
- LinkedIn lists London, United Kingdom as headquarters, with 11–50 employees and a Bratislava location.linkedin.com · read 14 Oct 2026
- Company history
- Eramba’s about page says the team started building and sharing the tool in 2007 and describes its first version as emerging from that effort.eramba.org · read 28 Sep 2026
- Company legal entity
- Eramba is managed by Eramba Limited, a business registered in the United Kingdom.eramba.org · read 14 Oct 2026
- Company origin
- The company story says the first eramba version was built in 2007 and the team became full-time in 2015.eramba.org · read 14 Oct 2026
- Compliance management
- The compliance module supports imported requirements such as ISO 27001, PCI-DSS, NIST, SOC 2 and other frameworks.eramba.org · read 14 Oct 2026
- Customisation
- Enterprise supports custom fields, custom module associations and configurable forms.eramba.org · read 14 Oct 2026
- Data privacy
- Data Privacy is listed as a supported eramba use case alongside risk, compliance and incidents.eramba.org · read 14 Oct 2026
- Deployment components
- The Docker stack includes eramba, MySQL, Redis, cron, Caddy, triggers Caddy and an MCP server.eramba.org · read 14 Oct 2026
- Documentation
- The vendor publishes free installation, implementation and operating courses, plus a public forum and release notes.eramba.org · read 14 Oct 2026
- Dynamic statuses
- Dynamic Status lets administrators define conditions that label records, create KPIs, filter views and trigger notifications or automations.eramba.org · read 14 Oct 2026
- Features
- Common features include custom notifications, granular access controls, dynamic status, custom fields, REST APIs, reporting and automations.eramba.org · read 28 Sep 2026
- Frameworks
- The maker lists more than 70 ready-to-import compliance packages and says users can upload a custom framework as a CSV.eramba.org · read 28 Sep 2026
