How to use Do GRC

Create a free account from the Sign Up page using your email. Once you're logged in, head to Learning Journey for the guided, progressive experience, or jump straight to a job role under Job Paths if you already know what you're training for.

Not sure which part of GRC suits you? The Career Quiz asks a few quick questions, suggests a career area, and points you to its free paths and Job Paths. You don't need an account to take it.

Free accounts can work through the full beginner journey (6 modules), use daily AI checks, and open the intro scenario and case study tracks.A paid membership unlocks all learning paths, all scenario rooms, the full case study catalogue, the GRC Coach, GRC Tools, Interview Prep, Resume Generator, Role Play, and Exam Prep.

Learning Journey is the recommended way to progress through the platform. It lays out the content in a structured order — foundations first, then frameworks, then role-specific deep dives — so you always know what to work on next.

Open /learning-journey from the top menu. Completed rooms are marked, XP accrues as you go, and certificates unlock when you finish a path.

Job Paths group content by the GRC role you're training for — GRC Analyst, Risk Manager, Regulatory Compliance Analyst, and many more. Each job path contains a sequence of rooms plus a dedicated scenario room with realistic prompts. Paths from the free beginner journey are marked Free on a job path and open without a membership; the rest need a paid membership.

Paths (the dashboard view) is the topic-based index — browse by framework (ISO 27001, SOC 2, NIST, PCI DSS, etc.) or by skill area. The full beginner journey is free; all other paths require a paid membership. Free members can use the Free paths on top toggle next to the level filters to bring the unlocked beginner paths to the top of the list.

Every room is made up of tasks. A task typically has a Reading section — the background knowledge — followed by a few questions you answer in your own words. You can use the following tools inside a room:

• AI Check — submit your answer and get instant feedback on whether it's on track. Free members get a daily AI check allowance; Pro members get a much larger one.
• Reveal Answer — show a model answer if you're stuck. Unlimited on every tier.
• Answer key (Pro) — Pro members can switch on the accepted answers for every room question, the answers for every lab, and a model answer for every scenario task, from the profile page or the switch at the top of a room, lab or scenario path, and switch them off again whenever they want to be tested. No XP is earned while it is on.
• Text-to-Speech — play the reading material aloud. Character limits apply: free members get 10,000 per week; paid tiers get a daily allowance that scales with the plan (Plus 20,000/day, Pro 50,000/day).

Complete all tasks in a room to mark it as done and earn XP. Your progress is saved automatically when you're signed in.

Scenarios are open-ended prompts that mimic real tasks a GRC practitioner would face on the job — writing a risk statement, drafting a control exception, responding to an auditor, and so on. You write a full response, submit it, and the AI grades it against a rubric and gives written feedback.

Free members get 1 scenario submission per week on the intro scenario tracks (GRC Analyst, Regulatory Compliance Analyst, Risk Manager). Pro members get 25 submissions per day across every scenario track.

You can review all your past submissions and AI feedback under Scenario History.

Case Studies are longer-form business scenarios — usually a realistic company situation followed by several graded questions that test how you'd respond. Free members can open a curated set of beginner case studies; Pro members get the full catalogue. Use the search bar and sort controls at the top of the page to find case studies by topic or question count.

You earn XP for every completed task, finished room, and successful scenario submission. Your total XP is shown in the top-right of the nav bar when you're signed in, and it feeds into the global Leaderboard.

Finishing a full learning path unlocks a completion certificate you can download and share on LinkedIn or with employers. Certificates and XP are preserved even if you downgrade from Pro back to free.

The GRC Coach is your personal AI coaching assistant. Tell it about your career goals, experience level, and what you want to learn — it remembers your context and builds custom learning journeys tailored to your path.

Use it to ask questions about any GRC topic, get guidance on where to start, or generate a personalised study plan. The coach links directly to relevant tools and content on the platform so you can take action immediately.

Available to free and paid members with monthly message and journey-generation quotas — free members get a small allowance; paid tiers get progressively more.

The GRC Dashboard gives you access to a full suite of integrated GRC tools — a practice workspace for learning to manage risks, compliance obligations, incidents, vendors, policies, audits, gap analyses, business continuity plans, maturity assessments, KRI/KPIs, framework mappings, ROPA, and more, on fictional or practice data.

Each tool lets you create, edit, and track records through the steps a GRC programme follows. The dashboard shows health metrics at a glance — compliance rate, open risks, incident counts, and overall data volume. You can also use the AI Populate feature to generate example data across all modules and save snapshots of your GRC state.

Paid-member feature. Per-tool record limits apply (e.g. 200 risks, 100 audits). The tools are for learning and practice, not a production GRC system, so don't enter real personal data or your organisation's confidential information.

Interview Prep generates realistic GRC interview questions tailored by role (GRC Analyst, Auditor, Risk Manager, etc.), category (behavioural, technical, scenario, framework-specific), and difficulty level.

Write your answer, submit it, and receive AI-graded feedback scored out of 10 — including a verdict, detailed feedback, strengths, gaps, and a model answer to compare against. Review all your past attempts and retry any question to improve.

Paid-member feature. Uses your shared daily AI checks quota.

Exam Prep helps you prepare for industry certifications including CISA, CISM, CRISC, CISSP, CCSP, ISO 27001 Lead Auditor, ISO 27001 Lead Implementer, Security+, CySA+, GRCP, CTPRP, and more.

Each exam features AI-generated practice questions with explanations, progress tracking, and detailed breakdowns. The questions follow each certification body's published exam outline; they are practice, not questions from the real exams.

Paid-member feature. Uses your shared daily AI checks quota.

Resume Point Generator turns your completed work on the platform into tailored CV bullet points for 17 different GRC job roles. Pick the target role, and the tool drafts achievement-style points you can paste straight into your resume.

Paid-member feature.

Role Play drops you into live, multi-turn AI conversations that mirror real GRC interactions — external audit walkthroughs, board briefings, incident response tabletops, regulatory inquiries, vendor due-diligence meetings, M&A due diligence, and more (16 scenarios in total).

Pick a scenario and a difficulty (Standard, Challenging, or Adversarial), then chat with the AI partner playing the counterparty. When you end the session, the AI scores your performance, calls out strengths and improvements, and gives written feedback. Past sessions are saved so you can review them later.

Paid-member feature.

The Arcade is a set of 12 bite-size GRC games — Trivia, Flashcards, Speed Run, Acronym Rush, Regulation Roulette, Control ID Memory, Risk Matrix Puzzle, Framework Match, Incident Simulator, Evidence Hunt, Threat Modeler, and Policy Builder. A quick way to keep your knowledge sharp between learning paths. Free for all members.

Most day-to-day features have a daily quota that resets every 24 hours:

• AI checks per day (free gets a small allowance; Pro members get a larger one)
• Text-to-speech characters (10,000/week free; paid tiers get a daily allowance that scales with the plan)
• Answer reveals (unlimited on every tier)
• Scenario submissions (1/week free / 25/day Pro)
• GRC Coach (free members get a small monthly allowance; paid tiers get more)
• GRC Tools, Interview Prep, Exam Prep, Resume Point Generator, Role Play (Pro only)
• GRC Tools record limits per module (e.g. 200 risks, 100 audits, 50 gap analyses)

The full feature comparison table lives on the Pricing page. You can cancel your subscription any time from your profile, using Cancel membership — access stays active until the end of the current billing period, or of your free trial.

Teams lets one subscription pay for a group's seats. Whoever buys the team owns it: choose how many Plus and Pro seats you need and pay monthly in US dollars through Stripe, then invite people by email from the team's page. Each invite can come with a seat, or you can give seats out later. A member gets the higher of their own plan and their seat.

The owner and admins can add or remove seats (added seats are charged pro rata, and removed seats are credited on the next invoice), change who holds which seat, withdraw invites, and open the billing portal for the team's card and invoices. Only the owner can cancel the plan, make someone an admin, or pass ownership on. A team can pass to a new owner only once its plan has ended, because a running plan is charged to the card it was bought with: to hand a team over, cancel the plan, and when the period already paid for ends, make the new owner, who can then subscribe the team again with their own card.

The owner can't leave the team: to leave, pass ownership on first. To stop the team instead, cancel the plan; once it has ended, or if its checkout was never finished, the owner can delete the team from its page (Teams links to an unfinished one), or subscribe it again. If you closed checkout before paying, open Teams to start it again; nothing was charged.

While the plan is paid up, they also see on the team's page each member's progress since that member joined (or from before, if the member chooses to share their earlier progress with the team), can assign a path or a lab to one person or to everyone (every member, and any owner or admin who holds a seat), with a date to finish by if they like, and can download the team's training records as a CSV, with the CPE hours of the records members have been issued. Members see their own assignments on the same page.

The team's owner and admins will see your name and email address and, while the team's plan is paid up, your progress on Do GRC from the day you join: the rooms and paths you complete and when, your lab results, your CPE hours, and the date you were last active. They won't see what you did before you joined unless you choose to share it, which you can turn on or off at any time on the team's page. They never see your written answers, your own plan, or your conversations with the GRC Coach or in Role Play. You can leave from the team's page whenever you like, and you can be in one team at a time.

• Progress not saving? Make sure you're signed in — progress only persists for authenticated accounts. Check the top-right of the nav bar: if you see "Log In", you're signed out.
• Hit a daily limit? Limits reset every 24 hours. If you need more headroom, the Pro membership has significantly higher ceilings across the board.
• Can't open a path? Paths outside the free beginner journey need a paid membership. On Paths they're marked "Members", and on Job Paths "Locked — Upgrade required". You can still see their titles, but opening one takes you to the pricing page until you upgrade. On the Learning Journey, the intermediate and advanced levels are marked "Paid members only".
• Team invite not working? An invite link works for 7 days, and only for an account with the email address it was sent to, once that address is confirmed. Sign in with that address (confirm it first with the link we emailed when you signed up), or ask the team's manager to invite the address you use.
• AI feedback looks wrong? The AI grader can occasionally be too strict or too generous. Use it as a guide, not a verdict — and feel free to re-submit a revised answer.