Built from experience. Created to solve a real problem.

Built from a real problem

LISA started with a simple observation: as regulatory requirements such as NIS2 continue to grow, many organizations face the same challenge — turning compliance requirements into practical, manageable processes.

Information is often spread across spreadsheets, documents, emails and different systems. Responsibilities can be difficult to track, evidence needs to be collected and maintained, and preparing for reviews or audits can require significant manual effort.

At the same time, GRC systems can contain highly sensitive information about an organization — including risks, security measures, internal controls, infrastructure and compliance gaps. For organizations that want to maintain control over this information, relying entirely on externally hosted platforms may not always be the preferred approach.

This is the challenge LISA is being built to address.

LISA is designed as a self-hosted GRC platform that helps organizations structure and manage their compliance activities while keeping control of their data and infrastructure.

The story behind LISA

Maria Souto Robles

Founder of LISA

Compliance & software development

The idea for LISA grew from my own professional journey.

Over the years, I have worked across compliance, financial crime prevention and operational environments, with experience spanning global technology companies, financial institutions, consulting, banks and fintech companies, including organizations such as PayPal and Amazon.

Working across different types of organizations gave me the opportunity to see compliance from different perspectives. Despite differences in size and industry, I repeatedly encountered a similar challenge: turning regulatory requirements into processes that are practical, structured and manageable in everyday operations

Compliance often involves information distributed across documents, spreadsheets, emails and different systems. Responsibilities need to be assigned, risks understood, controls followed, evidence maintained and progress made visible. As regulatory expectations increase, managing all of this efficiently can become increasingly difficult.

There was another aspect that became equally important to me: security and control of the information itself.

GRC systems can contain some of an organization's most sensitive information — including identified risks, internal controls, security measures, compliance gaps and supporting evidence. This led me to think not only about how compliance could be managed more effectively, but also about how organizations could maintain greater control over the information used to manage it.

Alongside my compliance background, I expanded my knowledge into software development. Bringing these two areas together gave me the foundation for LISA.

I started building LISA to turn the problems I had encountered professionally into a practical software solution — one that combines structured compliance management with a self-hosted approach where organizations retain control of their environment and data.

LISA is currently under active development. The next step is to work with selected organizations through a pilot testing phase, where real-world feedback will help validate the approach and guide the continued development of the platform.

For me, this is an important part of building LISA: not developing a GRC product based only on assumptions, but shaping it together with the real challenges organizations face.

Where LISA is today

LISA is currently under active development and is not yet generally available.

The next milestone is a pilot phase with selected organizations. The goal is to work directly with organizations and compliance professionals, understand how LISA performs in real-world environments, gather practical feedback and use those insights to further develop the platform.

A GRC product should not be developed in isolation. The pilot phase is an important part of making sure LISA addresses real operational needs rather than assumptions.

Interested in helping shape LISA?

Organizations interested in LISA can request a private introduction to the platform and learn more about participating in the upcoming pilot phase.

Request a private introduction